Threat Outbreak Alert RuleID31046: Email Messages Distributing Malicious Software on November 1, 2017

Medium Alert ID: 55750 First Published: 2017 November 1 16:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31046 may contain the following files: Name |...

Threat Outbreak Alert RuleID31158: Email Messages Distributing Malicious Software on October 31, 2017

Medium Alert ID: 55737 First Published: 2017 October 31 15:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31158 may contain the following files: Name |...

Default configuration

Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931...

[SECURITY] [DSA 4010-1] git-annex security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4010-1 [email protected] https://www.debian.org/security/ Sebastien Delafond October 30, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4010-1] git-annex security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4010-1 [email protected] https://www.debian.org/security/ Sebastien Delafond October 30, 2017 https://www.debian.org/security/faq -...

SUSE SLES11 Security Update : MozillaFirefox, mozilla-nss (SUSE-SU-2017:2872-1)

This update for MozillaFirefox and mozilla-nss fixes the following issues: Mozilla Firefox was updated to ESR 52.4 bsc1060445 - MFSA 2017-22/CVE-2017-7825: OS X fonts render some Tibetan and Arabic unicode characters as spaces - MFSA 2017-22/CVE-2017-7805: Use-after-free in TLS 1.2 generating...

Threat Outbreak Alert RuleID31092: Email Messages Distributing Malicious Software on October 27, 2017

Medium Alert ID: 55711 First Published: 2017 October 27 14:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31092 may contain the following files: Name |...

Threat Outbreak Alert RuleID30995: Email Messages Distributing Malicious Software on October 26, 2017

Medium Alert ID: 55694 First Published: 2017 October 26 11:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30995 may contain the following files: Name |...

IRCCloud: [IRCCloud Android] Opening arbitrary URLs/XSS in SAMLAuthActivity

Hi, I'd like to report a bug which allow to open arbitrary URLs in com.irccloud.android.activity.SAMLAuthActivity This activity is exported: xml it means that it can be accessed by any third-party apps installed on the same device. On the newest Androids it also could be exploited by Android...

Barclays Mobile Banking - Customized SSL, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Barclays Mobile Banking published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID31072: Email Messages Distributing Malicious Software on October 25, 2017

Medium Alert ID: 55683 First Published: 2017 October 25 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31072 may contain the following files: Name |...

OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)

It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additiona...

Threat Outbreak Alert RuleID31068: Email Messages Distributing Malicious Software on October 24, 2017

Medium Alert ID: 55673 First Published: 2017 October 24 11:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31068 may contain the following files: Name |...

OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)

It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additiona...

Threat Outbreak Alert RuleID31052: Email Messages Distributing Malicious Software on October 20, 2017

Medium Alert ID: 55657 First Published: 2017 October 20 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31052 may contain the following files: Name |...

chromium-browser: content security bypass

Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page...

Threat Outbreak Alert RuleID30854: Email Messages Distributing Malicious Software on October 19, 2017

Medium Alert ID: 55631 First Published: 2017 October 19 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30854 may contain the following files: Name |...

Pidgin MXIT MultiMX Message Code Execution Vulnerability(CVE-2016-2374)

DESCRIPTION An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution. CVSSv3 SCORE 8.1...

imprezy i koncerty - PartyMap - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application imprezy i koncerty - PartyMap published at the 'play' market has multiple vulnerabilities...

Easy Solar Photovoltaic Design - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Easy Solar Photovoltaic Design published at the 'play' market has multiple vulnerabilities...