1018 matches found
March 13, 2018—KB4088779 (OS Build 10586.1478)
None None...
March 13, 2018—KB4088787 (OS Build 14393.2125 and 14393.2126)
None None...
March 13, 2018—KB4088786 (OS Build 10240.17797)
None None...
March 13, 2018—KB4088782 (OS Build 15063.966 and 15063.968)
None None...
av-online.hu XSS vulnerability
Open Bug Bounty ID: OBB-581533 Description| Value ---|--- Affected Website:| av-online.hu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
GPAC MP4Box Stack Buffer Overflow Vulnerability
GPAC MP4Box is an open source project GPAC provided in the multimedia wrapper . GPAC MP4Box commit 90dc7f853d31b0a4e9441cba97feccf36d8b69a4 Previous versions of the src/mediatools/avparsers.c file of https://github.com/gpac/gpac/blob/...
GPAC Buffer Overflow Vulnerability
GPAC is a set of open source multimedia framework. A buffer overflow vulnerability exists in the 'gfmediaavcreadsps' function in the mediatools/avparsers.c file in GPAC 0.7.1 and earlier versions. An attacker can exploit this vulnerability to overwrite blocks of memory in the glibc heap...
Behavior monitoring combined with machine learning spoils a massive Dofoil coin mining campaign
Update: Further analysis of this campaign points to a poisoned update for a peer-to-peer P2P application. For more information, read Poisoned peer-to-peer app kicked off Dofoil coin miner outbreak. Just before noon on March 6 PST, Windows Defender Antivirus blocked more than 80,000 instances of...
av-online.co.za XSS vulnerability
Open Bug Bounty ID: OBB-570453 Description| Value ---|--- Affected Website:| av-online.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Year-Old Coldroot RAT Targets MacOS, Still Evades Detection
Researchers are warning users about the Coldroot remote access Trojan that is going undetected by AV engines and targets MacOS computers. The RAT is cross-platform and capable of planting a keylogger on MacOS systems prior to the OS High Sierra and is designed to steal banking credentials. Coldro...
How artificial intelligence stopped an Emotet outbreak
At 12:46 a.m. local time on February 3, a Windows 7 Pro customer in North Carolina became the first would-be victim of a new malware attack campaign for Trojan:Win32/Emotet. In the next 30 minutes, the campaign tried to attack over a thousand potential victims, all of whom were instantly and...
How artificial intelligence stopped an Emotet outbreak
At 12:46 a.m. local time on February 3, a Windows 7 Pro customer in North Carolina became the first would-be victim of a new malware attack campaign for Trojan:Win32/Emotet. In the next 30 minutes, the campaign tried to attack over a thousand potential victims, all of whom were instantly and...
av-iq.com XSS vulnerability
Open Bug Bounty ID: OBB-556348 Description| Value ---|--- Affected Website:| av-iq.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Gojdue Variant Eludes Microsoft, Google Cloud Protection, Researchers Say
Researchers have identified a new ransomware strain that went undetected by built-in anti-malware protection used by cloud heavyweights Microsoft and Google as recently as January. According to researchers at the cloud service firm Bitglass, both Google Drive and Microsoft Office 365’s SharePoint...
av-iq.eu XSS vulnerability
Open Bug Bounty ID: OBB-554621 Description| Value ---|--- Affected Website:| av-iq.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Meltdown / Spectre: New Concerns Over Intel Patches, as Hackers Test Exploits
This week brought new developments in the Meltdown / Spectre saga, including more concerns about Intel’s buggy patches, and mounting evidence that hackers are trying to create exploits for the vulnerabilities. It seemed that after weeks of complaints and confusion, Intel’s issue had hit bottom an...
Anti-Virus Updates Required Ahead of Microsoft’s Meltdown, Spectre Patches
Microsoft said it is holding off delivering security updates to Windows PCs for Spectre and Meltdown CPU flaws until hosted anti-virus software confirms it does not make unsupported calls into Windows kernel memory. Affected are PCs running certain AV products that bypass Windows built-in Kernel...
Dell SonicWall SonicOS NSA Cross-Site Scripting Vulnerability (CNVD-2018-03085)
The Dell SonicWall Network Security Appliance NSA 2017 Q4 devices is a firewall appliance from Dell USA.SonicWall SonicOS is a system that runs on it.CFS Custom Category and Cloud AV DB Exclusion Settings are among the modules. A cross-site scripting vulnerability exists in the CFS Custom Categor...
products.av-integrators.com XSS vulnerability
Open Bug Bounty ID: OBB-501063 Description| Value ---|--- Affected Website:| products.av-integrators.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
