PT-2018-19484

Simple Taxonomy Revision module enables revisions for taxonomy terms for Drupal 8. The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module, please read: . The securit...

Threat Outbreak Alert RuleID32674: Email Messages Distributing Malicious Software on May 3, 2018

Medium Alert ID: 57730 First Published: 2018 May 3 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32674 may contain the following files: Name | Size ...

WebKit - 'WebCore::jsElementScrollHeightGetter' Use-After-Free

input:enabled content: urlfoo; padding-top: 0vmin .class4 -webkit-transform: scale1, 255; function jsfuzzer document.head.appendChildkg; var test = input.scrollHeight; ::ptr const /Users/projectzero/webkit/WebKit/WebKitBuild/Release/WebCore.framework/Versions/A/WebCore:x8664+0xe0a06 1 0x3000e09d8...

Threat Outbreak Alert RuleID32628: Email Messages Distributing Malicious Software on April 27, 2018

Medium Alert ID: 57624 First Published: 2018 May 1 11:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32628 may contain the following files: Name| Size i...

WebKit WebCore::jsElementScrollHeightGette Use-After-Free

WebKit: use-after-free in WebCore::jsElementScrollHeightGetter CVE-2018-4200 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of Revision 227958 on OSX. PoC Note: It might take multiple refreshes for the issue to be triggered:...

Threat Outbreak Alert RuleID32557: Email Messages Distributing Malicious Software on April 24, 2018

Medium Alert ID: 57566 First Published: 2018 April 24 18:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32557 may contain the following files: Name | Si...

wget/wget_ftpls_fuzzer: Heap-buffer-overflow in ftp_parse_winnt_ls

Project: https://git.savannah.gnu.org/git/wget.git Detailed report: https://oss-fuzz.com/testcase?key=5159444754202624 Project: wget Fuzzer: libFuzzerwgetftplsfuzzer Fuzz target binary: wgetftplsfuzzer Job Type: libfuzzerasanwget Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Threat Outbreak Alert RuleID32524: Email Messages Distributing Malicious Software on April 19, 2018

Medium Alert ID: 57541 First Published: 2018 April 19 20:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32524 may contain the following files: Name | Si...

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::KeyManager::SetMasterKey

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=4791101178249216 Project: openthread Fuzzer: aflopenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow...

Threat Outbreak Alert RuleID32504: Email Messages Distributing Malicious Software on April 18, 2018

Medium Alert ID: 57528 First Published: 2018 April 18 18:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32504 may contain the following files: Name | Si...

CVE-2018-10107

D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php...

Design/Logic Flaw

D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the Treturn parameter to /htdocs/webinc/js/bscsmsinbox.php...

PT-2018-4006 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 REV. B versions through DIR-815 REVB FIRMWARE PATCH 2.07.B01 Description: The issue exists due to inadequate protection of the web page structure in the /htdocs/webinc/js/info.php component of the D-Link DIR-815 REV. B router's...

systemd/fuzz-unit-file: Use-of-uninitialized-value in streq_ptr

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=4908210742886400 Project: systemd Fuzzer: libFuzzersystemdfuzz-unit-file Fuzz target binary: fuzz-unit-file Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value...

Threat Outbreak Alert RuleID32416: Email Messages Distributing Malicious Software on April 10, 2018

Medium Alert ID: 57456 First Published: 2018 April 11 12:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32416 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32422: Email Messages Distributing Malicious Software on April 10, 2018

Medium Alert ID: 57459 First Published: 2018 April 10 20:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32422 may contain the following files: Name | Si...

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

gdal/gdal_translate_fuzzer: Heap-buffer-overflow in sbits

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5332539309817856 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...