CVE-2018-5266

The CVE-2018-5266 entry affects Cobham Sea Tel 121 devices (build 222701). Affected component is the login mechanism where an attacker can read the loginName lines in the js/userLogin.js URI to obtain potentially sensitive information about valid usernames. This is a remote information-disclosure...

Friday Squid Blogging: Gonatus Squid Eating a Dragonfish

There's a video: Last July, Choy was on a ship off the shore of Monterey Bay, looking at the video footage transmitted by an ROV many feet below. A Gonatus squid was spotted sucking off the face of a "really huge dragonfish," she says. "It took a little while to figure out what's going on here,...

Friday Squid Blogging: Baby Sea Otters Prefer Shrimp to Squid

At least, this one does. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

SeaCMS admin/admin_ping.php file code execution vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 6.56. The vulnerability can be exploited by a remote attacker to execute arbitrary PHP code ...

IT threat evolution Q3 2017

Targeted attacks and malware campaigns Re-enter the dragon In July, we reported on the recent activities of a targeted attack group called 'Spring Dragon' also known as LotusBlossom, whose activities data back to 2012. Spring Dragon makes extensive use of spear-phishing and watering-hole attacks...

Threat Outbreak Alert RuleID30473: Email Messages Distributing Malicious Software on September 1, 2017

Medium Alert ID: 55021 First Published: 2017 September 1 16:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30473 may contain the following files: Name |...

sea-sports.de XSS vulnerability

Vulnerable URL: http://www.sea-sports.de/xanariosearch.php?productskeywords=test%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Spring Dragon – Updated Activity

Spring Dragon is a long running APT actor that operates on a massive scale. The group has been running campaigns, mostly in countries and territories around the South China Sea, since as early as 2012. The main targets of Spring Dragon attacks are high profile governmental organizations and...

Friday Squid Blogging: Squid as Prey

There's lots of video of squid as undersea predators. This is one of the few instances of squid as prey from a deep submersible in the Pacific: "We saw brittle stars capturing a squid from the water column while it was swimming. I didn't know that was possible. And then there was a tussle among t...

Threat Outbreak Alert RuleID29266: Email Messages Distributing Malicious Software on May 24, 2017

Medium Alert ID: 53953 First Published: 2017 May 24 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29266 may contain the following files: Name | Size...

Bear sea CMS v1. 0 backend login bypass vulnerability

No description provided by source...

Sea days OA system MessageInfoDis. asp parameters VOID SQL injection vulnerability

No description provided by source...

APT Group 'Patchwork' Cuts-and-Pastes a Potent Attack

An advanced persistent threat tied to Southeast Asia and the South China Sea is targeting governments and entities around the world including the U.S. The attacks are unique, according to security experts, because the perpetrators are relying nearly 100 percent on computer code copied-and-pasted...

The vulnerability of the SeaMonkey software allows a malicious attacker to execute arbitrary code or cause a service failure.

The vulnerability of the asm.js component of the SeaMonkey software lies in the improper definition of safe exception handling during JIT-compilation and the lack of access to dynamic memory. Exploiting this vulnerability allows a malicious actor to gain access to data in separate memory segments...

Kids Sea Animals Jigsaw Puzzle - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Kids Sea Animals Jigsaw Puzzle published at the 'play' market has multiple vulnerabilities...

Puzzle for Toddlers Sea Fishes - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Puzzle for Toddlers Sea Fishes published at the 'play' market has multiple vulnerabilities...

KyoroChanAdventure2 in the Sea - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application KyoroChanAdventure2 in the Sea published at the 'play' market has multiple vulnerabilities...

Sea Battle Pirate - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Sea Battle Pirate published at the 'play' market has multiple vulnerabilities...

Sea Empire - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Sea Empire published at the 'play' market has multiple vulnerabilities...

Sea Battle Multiplayer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sea Battle Multiplayer published at the 'play' market has multiple vulnerabilities...