Hackers are using Nuclear Exploit Kit to Spread Cryptowall 4.0 Ransomware

Beware Internet Users! Cryptowall 4.0 – the newest version of the world's worst Ransomware – has surfaced in the Nuclear exploit kit, one of the most potent exploit kits available in the underground market for hacking into computers. Ransomware threat has emerged as one of the biggest threats to...

iOS Tracking

The vulnerability of the CFNetwork Cookies component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely track users...

CVE-2015-5831: Exposure of Sensitive Information to an Unauthorized Actor

NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...

Thumbnail Carousel Slider < 1.0.1 - Authenticated Shell Upload & CSRF

The original advisory states that this vulnerability is exploitable with editor and author roles but this is incorrect. Only the administrator role by default can trigger this vulnerability. However, CSRF on the image upload form makes this exploitable by a malicious actor. PoC Create a file name...

Flash Player Code Execution

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

Flash Player Code Execution

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

Flash Player Code Execution

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

Flash Player Code Execution

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

Flash Player Code Execution

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

Flash Player Code Execution

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

Flash Player Code Execution

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

Flash Player Code Execution

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

Criminal Group Using Dynamic Gate System to Infect with Fiesta EK

A sophisticated criminal group operating for more than a year is utilizing a changing series of Internet protocol addresses, domains and gates in order to infect its victims with the Fiesta exploit kit. Fiesta is among the handful of exploit kits to have emerged in the wake of the once prominent...

Inside nls_933w.dll, the Equation APT Persistence Module

CANCUN – The names called out like beacons from the screen: Samsung; Seagate; Western Digital; Hitachi; Maxtor. Hardware makers were in the crosshairs of the Equation APT group and it was perhaps the worst possible scenario imagined by researchers looking at the frightening and extensive storehou...

CVE-2015-0922: Exposure of Sensitive Information to an Unauthorized Actor

McAfee ePolicy Orchestrator ePO before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password...

ShellShock DHCP Server

Added: 11/20/2014 CVE: CVE-2014-6271 BID: 70103 OSVDB: 112004 Background Bash is vulnerable to command injection using environment variables. When an application takes user input and uses setenv a malicious actor is able to execute commands on the target in the security context of the running...

CVE-2014-5376: Improper Input Validation

Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0, when a pre-generated key is used, does not validate that the requesting user matches the actor in the message, which allows remote authenticated users to impersonate arbitrary users via the actor field in a message...

PT-2014-6437

Name of the Vulnerable Software and Affected Versions Adaptive Computing Moab versions prior to 7.2.9 Adaptive Computing Moab version 8 before 8.0.0 Description The issue allows remote authenticated users to impersonate arbitrary users via the actor field in a message, due to the lack of validati...

Moab Workload Manage 7.2.9 / 8 User Impersonation Vulnerability

Moab versions prior to 7.2.9 and 8 suffer from a user impersonation vulnerability. Moab User Impersonation : CVE-2014-5375 Software: Moab Affected Versions: All current versions of Moab. However, the impact is limited in Moab 7.2.9 and Moab 8. CVE Reference: CVE-2014-5375 Author: John Fitzpatrick...

CVE-2014-6271

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the modcgi and modcg...