Check_MK < 1.4.0p6 webapi.py XSS

The version of CheckMK running on the remote web server is prior to 1.4.0p6. It is, therefore, affected by a reflected cross-site XSS scripting vulnerability in webapi.py due to error messages being interpreted as HTML when they should be plain text. An unauthenticated, remote attacker can exploi...

CVE-2017-0199: in-depth analysis of the Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net

0x00 Preface Recently, researchers also found a number of CVE-2017-0199 vulnerability of the sample. Although the Microsoft in this year 4 month has been released for the vulnerability the patch, but since its use is relatively simple, worldwide usage is still very high, here to share some of the...

Zusy Malware Installs Via Mouseover – No Clicking Required

Researchers are warning of several recent spam campaigns delivering PowerPoint files that when opened contain a mouseover link that installs a variant of the Zusy malware. The malware is novel because it does not rely on macros, JavaScript or VBA macros to be enabled for the dropper file to...

Beware! This Microsoft PowerPoint Hack Installs Malware Without Requiring Macros

"Disable macros and always be extra careful when you manually enable it while opening Microsoft Office Word documents." You might have heard of above-mentioned security warning multiple times on the Internet as hackers usually leverage this decade old macros-based hacking technique to hack...

“Good hackers” took over billboard to send security warning

By Waqas When it comes to taking advantage of vulnerabilities the WannaCry ransomware attack is the latest example of it where hackers used Server Message Block protocol SMB vulnerability in Windows OS and infected computers in more than 100 countries. But then some good guys do good things just...

RW-4040 driver installer may insecurely load Dynamic Link Libraries

Overview RW-4040 driver installer for IC Card Reader/Writer devices provided by Sharp Corporation contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Yuji Tounai of NTT Communications Corporation and BlackWingCat of PinkFlyingWhale reporte...

Wechat appeared“remote pop exploit”has been maxed circle of friends in reference to specific play-a vulnerability warning-the black bar safety net

This morning a 5 month 26 day, micro-channel circle of friends have a lot of friends to the lei Feng network reflect: wechat appearedXSSvulnerabilities that can be in a friends phone, remote pop up! The black bar safety net in accordance with the User Instructions, go to wechat search friends...

Fatal vulnerability will allow an attacker to bypass Apple's OTR signature verification and steal your iCloud keychain information-vulnerability warning-the black bar safety net

! Background content In the analysis of the iOS platform and sandbox escape about the attack surface when we in the iCloud keychain sync feature of OTR implementation has discovered a serious security vulnerability. iCloud keychain sync feature allows users in a secure manner across the device to...

Dridex and Locky Return Via PDF Attachments in Latest Campaigns

Dridex and Locky, two prolific malware families that made waves in 2016 after being distributed in several high-volume spam campaigns, have returned after a brief hiatus. FireEye observed a decline in the volume of Dridex and Locky in the latter half of 2016, but we recently observed two new larg...

FIN7 Evolution and the Phishing LNK

FIN7 is a financially-motivated threat group that has been associated with malicious operations dating back to late 2015. FIN7 is referred to by many vendors as “Carbanak Group”, although we do not equate all usage of the CARBANAK backdoor with FIN7. FireEye recently observed a FIN7 spear phishin...

The Word exposed 0day vulnerabilities: no need to enable the macros, open the document it automatically install a malicious program-vulnerability warning-the black bar safety net

! In fact, the use of Word macros as the distribution of malicious programs is the way today's conventional via, so many people choose to disable macros, but if you say disable the macros are useless, such a malicious Word document danger is quite different. Recently, McAfee and FireEye security...

IIS6. 0 remote command execution shellcode construct-vulnerability warning-the black bar safety net

Author: Vulntor Date: 2017/03/29 0x00 Preface Yesterday broke the iis6. 0 Vulnerability, CVE-2017-7269 of the poc so many web Dog miserable. As a web dog, I also naive to think that a calculator will pop-up, in fact, the process already appeared to calc. exe process, but it does not appear the...

Old version of vBulletin vulnerability to be exploited: hackers leak from the 126 Forum of the 82 million accounts-vulnerability warning-the black bar safety net

Since the older versions of vBulletin there is a serious vulnerability, this is an Internet forum widely used software has been used by hackers, and leakage from the 126 Forum of the 82 million account.@ CrimeAgency on Twitter claim that hackers stole from the forum administrator and registered...

Lyst: Site configured improperly at subdomain of lyst.co.uk

Steps to reproduce the issue: Go to : "https://w.lyst.co.uk/" It will give you message The owner of w.lyst.co.uk has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website. Image: F163225 A attacker will send this link to user...

Kaspersky analyst: hackers can utilize APP vulnerability control smart cars-vulnerability warning-the black bar safety net

According to the British "Daily Mail" 2017 2 May 20 reported that the now more and more car owners by the car manufacturers provide a mobile app for your own car operate. However, Kaspersky Lab analysts have detected a large number of APP system vulnerabilities, hackers can by these vulnerabiliti...

openSUSE Security Update : virtualbox (openSUSE-2017-141)

This update for virtualbox fixes the following issues : - The version has been updated from 5.1.8 to 5.1.12. Upstream fixed various functional and security issues. - Multiple security issues have been fixed that could cause DoS and possibly privilege escalation...

Network transmission PayPal is the exposure of"acquaintances can tamper with the password"deadly vulnerability-vulnerability warning-the black bar safety net

! This morning, the security client to the user feedback, the account is a friends login, and show the Bank card and the free password to pay functions can be normal use, very with devices, IP, environmental, geographical location, the truth in the end how? We know almost found on the relevant...

Experts Warn of Novel PDF-based Phishing Scam

The SANS Internet Storm Center published a warning on Wednesday about an active phishing campaign that utilizes PDF attachments in a novel ploy to harvest email credentials from victims. According to the SANS bulletin, the email has the subject line “Assessment document” and the body contains a...

PhpMailer and SwiftMailer, the ZendMail successive exposure of the RCE high-risk vulnerabilities, affecting millions of Web servers-vulnerability warning-the black bar safety net

! Researchers recently found a present in 3 common open source PHP Library for high-riskCriticalvulnerabilities, hackers can exploit this vulnerability to remotely execute arbitrary commands, there is a vulnerability in the PHP library includes SwiftMailer And PhpMailer and ZendMail it. A few day...

Through AWS, Google Cloud and Digital Ocean DNS vulnerability take over nearly 12 million domain names-bug warning-the black bar safety net

Shortly before, I was at cloud hosting provider Digital Ocean domain into the system found a security vulnerability, an attacker or may exploit this vulnerability to take over two million of the plurality of domain names in the report of the transfer gate on. If you have not read this report whil...