CVE-2015-8079

qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...

New Dridex Phishing Campaign Delivers Fake Accounting Invoices

A new variant of the banking trojan Dridex is part of a sophisticated phishing attack targeting users of the cloud-based accounting firm Xero. The global campaign is the latest in what security experts at Trustwave said is a wave of phishing attacks against Xero and other financial and accounting...

Threat Outbreak Alert RuleID30457: Email Messages Distributing Malicious Software on September 5, 2017

Medium Alert ID: 55111 First Published: 2017 September 5 15:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30457 may contain the following files: Name |...

Threat Outbreak Alert RuleID30454: Email Messages Distributing Malicious Software on September 4, 2017

Medium Alert ID: 55103 First Published: 2017 September 5 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30454 may contain the following files: Name |...

Threat Outbreak Alert RuleID30450: Email Messages Distributing Malicious Software on September 4, 2017

Medium Alert ID: 55102 First Published: 2017 September 5 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30450 may contain the following files: Name |...

Debian DSA-3963-1 : mercurial - security update

Several issues were discovered in Mercurial, a distributed revision control system. - CVE-2017-9462 fixed in stretch only Jonathan Claudius of Mozilla discovered that repositories served over stdio could be tricked into granting authorized users access to the Python debugger. - CVE-2017-1000115...

GSA Bounty: Reflected XSS on the data.gov (WAF bypass+ Chrome XSS Auditor bypass+ works in all browsers)

Description Hello. I discovered Cross-Site scripting issue on the https://www.data.gov/local/ endpoint. The issue can be site-wide, and exploitable in any place, where pagination exist. The Impact and Severity I assigned the High severity, because unlike the last 263226 report that XSS was...

Amazon Linux AMI : subversion / mod_dav_svn (ALAS-2017-883)

Command injection through clients via malicious svn+ssh URLs A shell command injection flaw related to the handling of 'svn+ssh' URLs has been discovered in Subversion. An attacker could use this flaw to execute shell commands with the privileges of the user running the Subversion client, for...

Amazon Linux AMI : git (ALAS-2017-882)

Command injection via malicious ssh URLs : A shell command injection flaw related to the handling of 'ssh' URLs has been discovered in Git. An attacker could use this flaw to execute shell commands with the privileges of the user running the Git client, for example, when performing a 'clone' acti...

emacs, mercurial security update

CentOS Errata and Security Advisory CESA-2017:2489 An update for mercurial is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Important: git

Issue Overview: Command injection via malicious ssh URLs: A shell command injection flaw related to the handling of "ssh" URLs has been discovered in Git. An attacker could use this flaw to execute shell commands with the privileges of the user running the Git client, for example, when performing...

Threat Outbreak Alert RuleID30411: Email Messages Distributing Malicious Software on August 30, 2017

Medium Alert ID: 54986 First Published: 2017 August 30 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30411 may contain the following files: Name |...

Threat Outbreak Alert RuleID30405: Email Messages Distributing Malicious Software on August 30, 2017

Medium Alert ID: 54981 First Published: 2017 August 30 13:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30405 may contain the following files: Name |...

Domain Analyzer

Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way. Domain analyzer takes a domain name and finds information about it, such as DNS servers, mail servers, IP addresse...

Threat Outbreak Alert RuleID30371: Email Messages Distributing Malicious Software on August 28, 2017

Medium Alert ID: 54956 First Published: 2017 August 28 12:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30371 may contain the following files: Name |...

Threat Outbreak Alert RuleID30293: Email Messages Distributing Malicious Software on August 24, 2017

Medium Alert ID: 54936 First Published: 2017 August 24 17:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30293 may contain the following files: Name |...

Threat Outbreak Alert RuleID30279: Email Messages Distributing Malicious Software on August 22, 2017

Medium Alert ID: 54909 First Published: 2017 August 22 12:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30279 may contain the following files: Name |...

Threat Outbreak Alert RuleID30275: Email Messages Distributing Malicious Software on August 22, 2017

Medium Alert ID: 54907 First Published: 2017 August 22 12:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30275 may contain the following files: Name |...

Matrimonial Script - SQL Injection

Exploit Title: Matrimonial Script - SQL Injection Dork: N/A Date: 22.08.2017 Vendor Homepage: http://www.scubez.net/ Software Link: http://www.mscript.in/ Demo: http://www.mscript.in/matrimonial-demo.html Version: N/A Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsa...

Scientific Linux Security Update : mercurial on SL7.x x86_64 (20170817)

Security Fixes : - A vulnerability was found in the way Mercurial handles path auditing and caches the results. An attacker could abuse a repository with a series of commits mixing symlinks and regular files/directories to trick Mercurial into writing outside of a given repository. CVE-2017-10001...