August 1, 2017 – Morning Cyber Coffee Headlines – “August” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 1, 2017 - Headlines Carbon Black in the News: Carbon Black Appoints Form...

Trend Micro InterScan Web Security Virtual Appliance ManageSRouteSettings RCE

Remote command execution vulnerability in Trend Micro InterScan Web Security Virtual Appliance ManageSRouteSettings Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Trend Micro InterScan Web Security Virtual Appliance LogSettingHandler RCE

Remote command execution vulnerability in Trend Micro InterScan Web Security Virtual Appliance LogSettingHandler mountdevice parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Citrix NetScaler SD-WAN RCE

Remote command execution vulnerability in Citrix NetScaler SD-WAN Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Trend Micro InterScan Web Security Virtual Appliance SSHConfig Remote Root RCE

Remote command execution vulnerability in Trend Micro InterScan Web Security Virtual Appliance SSHConfig Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Citrix CloudBridge RCE

Remote command execution vulnerability in Citrix CloudBridge Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

HDFC Life InstaFR Sales - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application HDFC Life InstaFR Sales published at the 'play' market has multiple vulnerabilities...

resling.co.il XSS vulnerability

Open Bug Bounty ID: OBB-261496 Description| Value ---|--- Affected Website:| resling.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

baltimoreticketsales.com XSS vulnerability

Vulnerable URL: https://www.baltimoreticketsales.com/tickets.php?/Ugly-God/The-Fillmore-Silver-Spring-MD/=1"...

starcraftbussales.com XSS vulnerability

Vulnerable URL: http://www.starcraftbussales.com/bussales.php?used=1=0=Year=1"...

stitchera.com XSS vulnerability

Vulnerable URL: http://www.stitchera.com/designera/sales-contact.asp?ok=1=1"...

Threat Outbreak Alert RuleID29600: Email Messages Distributing Malicious Software on June 26, 2017

Medium Alert ID: 54312 First Published: 2017 June 26 17:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29600 may contain the following files: Name | Siz...

classifieds.dnj.com XSS vulnerability

Vulnerable URL: http://classifieds.dnj.com/map.php?place=Garage+Sales=1/-///'/"//--...

Getting started in sales: Q&A with Eric Erston

Today we're excited to introduce a key leader in Rapid7s sales organization: Eric Erston is Rapid7's senior vice president of sales for the Americas region. He has extensive experience in a variety of sales roles, including leading go-to-market functions for mergers and acquisitions. Prior to...

clevelandbrothers.com XSS vulnerability

Open Bug Bounty ID: OBB-242140 Description| Value ---|--- Affected Website:| clevelandbrothers.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

echoesofsinatra.com XSS vulnerability

Vulnerable URL: http://echoesofsinatra.com/wp-content/plugins/nextgen-smooth-gallery/nggSmoothFrame.php?galleryID=9=540=540=1=1=1=1=5000=fade=1=Slides=== http://edjesales.com/catalogpage.php?catalogid=613 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

The Silk Road Creator’s Life Sentence Actually Boosted Dark Web Drug Sales

A new study raises questions about the deterrence value of harsh sentencing for dark web crimes. The post The Silk Road Creator’s Life Sentence Actually Boosted Dark Web Drug Sales appeared first on WIRED...

Dell SonicWALL Secure Remote Access diagnostics RCE

Remote command execution vulnerability in Dell SonicWALL Secure Remote Access /cgi-bin/diagnostics Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Dell SonicWALL Secure Remote Access gencsr RCE

Remote command execution vulnerability in Dell SonicWALL Secure Remote Access /cgi-bin/gencsr Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Sophos Web Protection Appliance Reports RCE

Remote command execution vulnerability in Sophos Web Protection Appliance Reports token parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...