Threat Outbreak Alert RuleID18857: Email Messages Distributing Malicious Software on October 21, 2015

Medium Alert ID: 41635 First Published: 2015 October 21 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18857 may contain the following files: Name |...

Threat Outbreak Alert RuleID18830: Email Messages Distributing Malicious Software on October 21, 2015

Medium Alert ID: 41628 First Published: 2015 October 21 13:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18830 may contain the following files: Name |...

wsws.org XSS vulnerability

Vulnerable URL: https://www.wsws.org/en/search.html?sectionId=workspace%3A%2F%2FSpacesStore%2Fdf95a748-f560-4286-b023-b98ab42aec9E=100=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=Search Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017...

October 2015 Oracle Critical Patch Update

Oracle on Tuesday patched 154 vulnerabilities in 54 different products as part of its regularly scheduled Critical Patch Update. More than half of the patches, 84 to be exact, address vulnerabilities that Oracle claims may be remotely exploitable without authentication. Java SE is responsible for...

Oracle JRockit R28 < R28.3.8 Multiple Vulnerabilities (October 2015 CPU)

The version of Oracle JRockit installed on the remote Windows host is R28 prior to R28.3.8. It is, therefore, affected by multiple vulnerabilities : - Multiple denial of service vulnerabilities exist due to multiple unspecified flaws in the JAXP subcomponent. A remote attacker can exploit these...

Threat Outbreak Alert RuleID18836: Email Messages Distributing Malicious Software on October 22, 2015

Medium Alert ID: 41619 First Published: 2015 October 20 20:23 GMT Last Updated: 2015 October 23 12:56 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18836...

Microsoft Bounty Programs Expansion - .NET Core and ASP.NET Beta Bounty

Today, I have another exciting expansion of the Microsoft Bounty Programs to announce. Please visit https://aka.ms/bugbounty to find out more. I’ll be discussing this new bounty in my talk at SyScan360 on October 21, 2015. We are delighted to offer a bounty for the .NET Core and ASP.NET Beta whic...

Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for October 2015 to address 154 vulnerabilities across multiple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the Oracle...

searcheye.kr XSS vulnerability

Vulnerable URL: http://www.searcheye.kr/index.php?q=glubz%22%3E%3Cimg+src%3Dx+onerror%3Dwindow.onerror%3Dalert%3Bthrow%2Fxssposed%2F%3B%2F%2F%3E%3C=searchnmall==glubz%22%3E%3Cimg%20src=x%20onerror=window.onerror=alert;throw/xssposed/;//%3E%3C Details: Description| Value ---|--- Patched:| No Lates...

Threat Outbreak Alert RuleID18742: Email Messages Distributing Malicious Software on October 17, 2015

Medium Alert ID: 41586 First Published: 2015 October 19 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18742 may contain the following files: Name |...

Threat Outbreak Alert RuleID18784: Email Messages Distributing Malicious Software on October 17, 2015

Medium Alert ID: 41590 First Published: 2015 October 19 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18784 may contain the following files: Name |...

ibe.net XSS vulnerability

Vulnerable URL: http://www.ibe.net/success.php?msg=RK%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

nceg.uop.edu.pk XSS vulnerability

Vulnerable URL: http://nceg.uop.edu.pk/nceglibrary/search.php?text=glubz%22%3E%3Cimg+src%3Dx+onerror%3Dwindow.onerror%3Dalert%3Bthrow%2Fxssposed%2F%3B%2F%2F%3E%3C=any=TITLE=1=Book=detail=searchall==0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerabilit...

medicalimaginggroup.com XSS vulnerability

Vulnerable URL: http://www.medicalimaginggroup.com/advantagevision/login.php?error=RK%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:35 GMT Vulnerabili...

Threat Outbreak Alert RuleID18757: Email Messages Distributing Malicious Software on October 16, 2015

Medium Alert ID: 41575 First Published: 2015 October 16 22:34 GMT Last Updated: 2015 October 19 12:34 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18757...

de.escada.com XSS vulnerability

Vulnerable URL: http://de.escada.com/search?search=asd%3E%3Cimg%3Ca%3E%20src%3Da%20oner%3Ca%3Eror%3Dalert%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Threat Outbreak Alert RuleID18735: Email Messages Distributing Malicious Software on October 15, 2015

Medium Alert ID: 41545 First Published: 2015 October 15 21:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18735 may contain the following files: Name |...

UBUNTU-CVE-2015-7645

Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015...

PROLiNK H5004NK Backdoor Accounts / RBAC Failure / CSRF

Exploit Title: PROLiNK H5004NK ADSL Wireless Modem Multiple Vulnerabilities Discovered by: Karn Ganeshen Reported on: October 13, 2015 Vendor Response: No process to handle vuln reports Vendor Homepage: http://www.prolink2u.com/newtemp/datacom/adsl-modem-router/381-h5004nk.html Version Affected:...

Threat Outbreak Alert RuleID18681: Email Messages Distributing Malicious Software on October 13, 2015

Medium Alert ID: 41509 First Published: 2015 October 14 18:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18681 may contain the following files: Name |...