Advance Notification Service for the August 2014 Security Bulletin Release

Today, we provide advance notification for the release of nine Security Bulletins. Two of these are rated Critical, and the remaining seven are rated Important in severity. These Updates are for SQL Server, SharePoint, OneNote, .NET, Microsoft Windows, and Internet Explorer. As per our usual...

Threat Outbreak Alert RuleID10975: Email Messages Distributing Malicious Software on August 6, 2014

Medium Alert ID: 35187 First Published: 2014 August 6 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10975 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID10952: Email Messages Distributing Malicious Software on August 5, 2014

Medium Alert ID: 35169 First Published: 2014 August 5 19:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10952 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID10935: Email Messages Distributing Malicious Software on August 4, 2014

Medium Alert ID: 35157 First Published: 2014 August 4 20:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10935 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID10927: Email Messages Distributing Malicious Software on August 4, 2014

Medium Alert ID: 35153 First Published: 2014 August 4 18:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10927 may contain the following files: Name | Si...

CVE-2014-2595

creationtimestamp| type| source ---|---|--- 2014-08-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39278...

exlibris.colgate.edu XSS vulnerability

Vulnerable URL: http://exlibris.colgate.edu/feed/feed2js.php?src=%22%3E%3CIFRAME%20SRC=%22javascript:alert%28%27XSSPOSED%27%29;%22%3E%3C/IFRAME%3E&utf=y&img=y&targ=y&num=1&desc=347 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

tracking.au.pwc.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-46491 Description| Value ---|--- Affected Website:| tracking.au.pwc.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Firefox onreadystatechange Event DocumentViewerImpl Use After Free

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Mambo Peoplebook Component 1.0 - Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- Peoplebook Mambo Component = v1.0 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : August, 14th 20...

Adobe Illustrator CS4 DLL Hijacking Exploit (aires.dll)

No description provided by source. / Exploit Title: Adobe Illustrator CS4 DLL Hijacking Exploit aires.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 v14.0.0 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .ait .eps Greetz: Astalavista, OffSE...

WzdFTPD <= 0.5.4 - Remote Command Execution Exploit

No description provided by source. 0day0day0day0day0day0day0day ------------------------------- wzdftpd remote exploit by kcope nice call to popen3 on custom site commands... August 2005 confidential! keep private! ------------------------------- 0day0day0day0day0day0day0day . . | // / | | / \ /...

TNR Enhanced Joomla Search <= SQL Injection Vulnerability

No description provided by source. ========================================================================================= o TNR Enhanced Joomla Search = SQL Injection Vulnerability Software : comesearch ver 3.0.0 Vendor : http://www.tnrjoomla.com/ Author : NoGe Contact : nogedotcodeatgmaildotc...

WebBoard <= 2.0 Arbitrary SQL Question/Anwser Delete Vulnerability

No description provided by source. -+================================================================================+- -+ WebBoard = 2.0 Arbitrary SQL Question/Anwser Delete Vulnerability +- -+================================================================================+- Discovered By:...

GeekLog <= 1.5.0 - Remote Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + GeekLog = 1.5.0 Remote Arbitrary File Upload + + + + Discovered && Coded By: t0pP8uZz + + + + 0day?!?Most...

Linux Kernel 2.x - sock_sendpage() Local Root Exploit (Android Edition)

No description provided by source. Source for exploiting CVE-2009-2692 on Android; Hole is closed in Android kernels released August 2009 or later. orig: http://zenthought.org/content/file/android-root-2009-08-16-source back: http://www.exploit-db.com/sploits/android-root-20090816.tar.gz...

Threat Outbreak Alert RuleID10389: Email Messages Distributing Malicious Software on August 19, 2014

Medium Alert ID: 34673 First Published: 2014 June 20 12:52 GMT Last Updated: 2014 August 20 11:48 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10389 and...

CVE-2013-4978

creationtimestamp| type| source ---|---|--- 2013-08-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38742...

Jumping Out of IE's Sandbox With One Click

Software vendors often give intentionally vague and boring names to the updates they use to fix security vulnerabilities. The lamer the name, the less attention it may attract from attackers looking to reverse-engineer the patch. There was one patch in Microsoft’s August Patch Tuesday release...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on August 21, 2013

Medium Alert ID: 30479 First Published: 2013 August 21 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a money transfer notification for the recipient. The text in the email message attempts to convince the recipie...