Cisco Unified Communications Manager SQL Injection Vulnerability

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The vulnerability is due to a lack of input validation on user-supplied input in SQL...

IT threat evolution Q3 2017. Statistics

Q3 figures According to KSN data, Kaspersky Lab solutions detected and repelled 277,646,376 malicious attacks from online resources located in 185 countries all over the world. 72,012,219 unique URLs were recognized as malicious by web antivirus components. Attempted infections by malware that ai...

Threat Outbreak Alert RuleID31129: Email Messages Distributing Malicious Software on November 9, 2017

Medium Alert ID: 55818 First Published: 2017 November 9 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31129 may contain the following files: Name |...

Qt qt5-qtwebkit Information Disclosure Vulnerability

Qt qt5-qtwebkit is a toolkit that encapsulates the Webkit browser engine from Qt Inc. in the Republic of Finland. A security vulnerability exists in Qt qt5-qtwebkit versions prior to 5.4, which originates when the program records the URLs of an individual's browsing in the WebpageIcons.db databas...

Threat Outbreak Alert RuleID31207: Email Messages Distributing Malicious Software on November 8, 2017

Medium Alert ID: 55807 First Published: 2017 November 8 14:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31207 may contain the following files: Name |...

DATA WING - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application DATA WING published at the 'play' market has multiple vulnerabilities...

LinkedIn - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application LinkedIn published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID31192: Email Messages Distributing Malicious Software on November 6, 2017

Medium Alert ID: 55787 First Published: 2017 November 6 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31192 may contain the following files: Name |...

Threat Outbreak Alert RuleID31205: Email Messages Distributing Malicious Software on November 6, 2017

Medium Alert ID: 55786 First Published: 2017 November 6 15:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31205 may contain the following files: Name |...

Threat Outbreak Alert RuleID31132: Email Messages Distributing Malicious Software on November 6, 2017

Medium Alert ID: 55783 First Published: 2017 November 6 15:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31132 may contain the following files: Name |...

Threat Outbreak Alert RuleID31127: Email Messages Distributing Malicious Software on November 6, 2017

Medium Alert ID: 55782 First Published: 2017 November 6 15:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31127 may contain the following files: Name |...

Threat Outbreak Alert RuleID31101: Email Messages Distributing Malicious Software on November 6, 2017

Medium Alert ID: 55779 First Published: 2017 November 6 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31101 may contain the following files: Name |...

Threat Outbreak Alert RuleID31098: Email Messages Distributing Malicious Software on November 6, 2017

Medium Alert ID: 55778 First Published: 2017 November 6 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31098 may contain the following files: Name |...

Threat Outbreak Alert RuleID31075: Email Messages Distributing Malicious Software on November 6, 2017

Medium Alert ID: 55777 First Published: 2017 November 6 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31075 may contain the following files: Name |...

Tor Browser 7.0.8 IP Address Leak Vulnerability

TorBrowser versions 7.0.8 and below for Mac OS X and Linux are affected by a critical security issue. According to the Tor Project, further details will be released in the near future. Due to a Firefox bug in handling file:// URLs it is possible on both systems that users leak their IP address...

Tor Browser Users Urged to Patch Critical ‘TorMoil’ Vulnerability

The Tor Project released a patch for a vulnerability that leaks the real IP addresses of macOS and Linux users of its Tor Browser. The patch was issued late Friday and fixes a vulnerability found in Tor Browser version 7.0.8. The patch is in an upgrade to Tor Browser 7.0.9. Windows users running...

Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability (CNVD-2017-32925)

Cisco WebEx Meetings Server is a highly secure, highly available, fully virtualized behind-the-firewall meeting solution that combines audio, video, and Web conferencing in one solution. A cross-site scripting vulnerability exists in Cisco WebEx Meetings Server. The vulnerability arises because t...

HouseProxy - HTTP proxy focused on block phishing URL's

Protect your parents from phishing, HTTP proxy focused on block phishing URL's Install git clone https://github.com/mthbernardes/HouseProxy.git cd HouseProxy/ pip install -r requeriments.txt Config Edit etc/HouseProxy.conf to change de default user and password Create a entry in your DNS to...

IBM Infosphere BigInsights Link Injection Vulnerability

IBM InfoSphere BigInsights is a suite of software platforms for storing and analyzing "Big Data" from IBM in the United States. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data. A link injection vulnerability exists in IBM Infosphere...

Threat Outbreak Alert RuleID31183: Email Messages Distributing Malicious Software on November 1, 2017

Medium Alert ID: 55757 First Published: 2017 November 1 16:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31183 may contain the following files: Name |...