A Cyber Revolution: Advanced Attacks Increasing in EMEA Reflect Political Tension

Financial, geopolitical and economical changes made 2015 a very busy year for the Europe, Middle East and Africa EMEA region, particularly in the cyber realm. FireEye has been monitoring these shifting cyber trends and has identified considerable evolutions to the EMEA threat landscape when...

A Cyber Revolution: Advanced Attacks Increasing in EMEA Reflect Political Tension

Financial, geopolitical and economical changes made 2015 a very busy year for the Europe, Middle East and Africa EMEA region, particularly in the cyber realm. FireEye has been monitoring these shifting cyber trends and has identified considerable evolutions to the EMEA threat landscape when...

OpenSSL Cipher Stuffing Vulnerability

OpenSSL is a general-purpose open source cryptographic library that implements Secure Sockets Layer and Secure Transport Layer protocols and can support a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure hashing algorithms, and so on. OpenSSL suffers fr...

WordPress Advanced Custom Fields 4.4.7 Cross Site Scripting

FULL DISCLOSURE Product : Advanced Custom Fields Exploit Author : Rahul Pratap Singh Version : 4.4.7 Home page Link :https://wordpress.org/plugins/advanced-custom-fields/ Website : https://0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 1/5/2016...

Whitewidow - SQL Vulnerability Scanner

Whitewidow is an open source automated SQL vulnerability scanner, that is capable of running through a file list, or can scrape Google for potential vulnerable websites. It allows automatic file formatting, random user agents, IP addresses, server information, multiple SQL injection syntax, and a...

Advanced Encryption Package Buffer Overflow Vulnerability

Advanced Encryption Package is an advanced password shell program. A buffer overflow vulnerability exists in Advanced Encryption Package that stems from mishandling of an exception.1006 bytes resulting in an overflow. An attacker could gain administrator privileges...

HPE P9000 CVAE Arbitrary Command Execution Vulnerability

HP XP P9000 Command View Advanced Edition is a multifunctional device manager for HP XP P9500, XP Disk Array products. A security vulnerability exists in HPE P9000 Command View Advanced Edition Software CVAE and XP7 CVAE, which allows remote attackers to execute arbitrary commands via constructed...

CVE-2016-2003

Summary: CVE-2016-2003 affects HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00. Root cause: remote code execution via crafted serialized Java objects, related to the Apache Commons Collections library, due to insecure de...

Advanced Electron Forum has multiple vulnerabilities

Advanced Electron Forum is an online forum system written in PHP. Advanced Electron Forum suffers from stored cross-site scripting and remote file inclusion vulnerabilities. An attacker could execute arbitrary remote files...

Advanced Electron Forum Cross-Site Request Forgery Vulnerability

Advanced Electron Forum is an online forum system written in PHP. Advanced Electron Forum suffers from a cross-site request forgery vulnerability that allows an attacker to alter the current database, delete all Inbox/Sent messages, delete all 'shouts' and delete all Topics...

Advanced Electron Forum Cross-Site Scripting Vulnerability

Advanced Electron Forum is an online forum system written in PHP. Advanced Electron Forum suffers from a stored cross-site scripting vulnerability that could be exploited by attackers to conduct cross-site scripting attacks...

The vulnerability of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IQ ADC, BIG-IQ Cloud, and BIG-IQ Device – these tools’ access control and remote authentication mechanisms can be exploited by attackers, leading to service interruptions.

The vulnerability of the virtual server component of the access control and remote authentication solution, BIG-IP Access Policy Manager, as well as software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security...

McAfee Advanced Threat Defense Security Bypass Vulnerability (CNVD-2016-02145)

McAfee Advanced Threat Defense is a powerful anti-malware solution. A security bypass vulnerability exists in the implementation of McAfee Advanced Threat Defense ATD prior to version 3.4.8.178, which can be exploited by remote attackers to bypass malware detection...

CVE-2016-3983

McAfee Advanced Threat Defense ATD before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the parent process...

Authentication flaw

McAfee Advanced Threat Defense ATD before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the parent process...

CVE-2016-3983

McAfee Advanced Threat Defense ATD before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the parent process...

Linux kernel Advanced Linux Sound Architecture Framework Denial of Service Vulnerability

Linux kernel is an open source operating system. A denial of service vulnerability exists in the Linux kernel's Advanced Linux Sound Architecture framework, which can be exploited by a local attacker to cause the system to hang, resulting in a denial of service attack...

Linux kernel Advanced Linux Sound Architecture framework denial of service vulnerability (CNVD-2016-01978)

Linux kernel is an open source operating system. The Linux kernel's Advanced Linux Sound Architecture framework fails to verify that a FIFO is attached to a client before clearing it, which can be exploited by a local attacker to cause a system hang, resulting in a denial of service attack...

Advanced Task Manager - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Advanced Task Manager published at the 'play' market has multiple vulnerabilities...

Advanced Task Killer - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Advanced Task Killer published at the 'play' market has multiple vulnerabilities...