Patch Tuesday - August 2017

It was a busy month this month with a total of 48 security issues fixed. All of these have a severity of Critical or Important with Remote Code Execution vulnerabilities again figuring highly, particularly for Microsoft Edge. There were also a few publicly disclosed vulnerabilities that were fixe...

Microsoft Patches Critical Windows Search Vulnerability

Microsoft patched more than two dozen remote code execution vulnerabilities today, many of them rated critical. One was a RCE bug that allowed an attacker to take complete control of a server or workstation via Windows Search. The fixes were part of Microsoft’s August Patch Tuesday update that...

Microsoft Patch Tuesday - August 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 48 new vulnerabilities with 25 of them rated critical, 21 rated important, and 2 rated moderate. These...

August 2017 security update release

Today, we released security updates to provide additional protections against malicious attackers. By default, Windows 10 receives these updates automatically, and for customers running previous versions, we recommend they turn on automatic updates as a best practice. More information about this...

CVE-2017-11151

creationtimestamp| type| source ---|---|--- 2017-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42434...

CVE-2017-12479

creationtimestamp| type| source ---|---|--- 2017-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42959...

CVE-2017-11154

creationtimestamp| type| source ---|---|--- 2017-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42434...

CVE-2017-11153

creationtimestamp| type| source ---|---|--- 2017-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42434...

Threat Outbreak Alert RuleID30007: Email Messages Distributing Malicious Software on August 7, 2017

Medium Alert ID: 54757 First Published: 2017 August 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30007 may contain the following files: Name | Si...

A week in security (July 31 – August 6)

Last week we explored some basic PowerShell commands, dived into the new methods used by TrickBot, and wrote at length about the Magnitude exploit kit redirection chain. Our teams were busy at both BlackHat and DefCon, and outside of those famous hallways, we also took time to fire up some basic...

aktionspreis.de XSS vulnerability

Open Bug Bounty ID: OBB-276156 Description| Value ---|--- Affected Website:| aktionspreis.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

conservationevidence.com XSS vulnerability

Vulnerable URL:...

rentquebecapartments.com XSS vulnerability

Vulnerable URL:...

blog.ocp.com.ua XSS vulnerability

Open Bug Bounty ID: OBB-276062 Description| Value ---|--- Affected Website:| blog.ocp.com.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

marionmunicipalcourt.org XSS vulnerability

Vulnerable URL: http://www.marionmunicipalcourt.org/cgi-bin/search.cgi Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 05.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4185093 VIP website status:| No Check...

Threat Outbreak Alert RuleID30102: Email Messages Distributing Malicious Software on August 4, 2017

Medium Alert ID: 54741 First Published: 2017 August 5 01:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30102 may contain the following files: Name | Si...

arhivach.org XSS vulnerability

Vulnerable URL: https://arhivach.org/add/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16022 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

myfortworthurbanliving.com XSS vulnerability

Vulnerable URL: http://www.myfortworthurbanliving.com/%3Cimg%20src=x%20onerror=alert'openbugbounty'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

torrentdownload.me XSS vulnerability

Vulnerable URL: https://www.torrentdownload.me/search?q=%3Cimg%20src=x%20onerror=alert%27openbugbounty%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 141311 VIP website...

Threat Outbreak Alert RuleID29936: Email Messages Distributing Malicious Software on August 2, 2017

Medium Alert ID: 54728 First Published: 2017 August 3 19:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29936 may contain the following files: Name | Si...