Threat Source (May 2, 2019)

Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. If you haven’t yet, there’s still time to register for this year’s Talos Threat Research Summit — our second annual conference by...

Unprotected Database Exposes Personal Info of 80 Million American Households

A team of security researchers has claims to have found a publicly-accessible database that exposes information on more than 80 million U.S. households—nearly 65 percent of the total number of American households. Discovered by VPNMentor's research team lead by hacktivists Noam Rotem and Ran Loca...

Command Execution Vulnerability in M8600E-WS-ED of Riptide Networks Inc.

M8600E-WS-ED is a wireless control service card designed for cloud architecture network by Ruijie Networks, which is suitable for RG-S8600E series new-generation cloud architecture network core switches. A command execution vulnerability exists in Ruijie Networks M8600E-WS-ED. An attacker can...

74cms backend Hr***.cl***.ph page has arbitrary file download vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Hr.cl.ph page there are arbitrary file download vulnerability. Attacker...

PT-2019-3428

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 74.0.3729.108 Description The issue is related to insufficient policy enforcement in Blink, a component of Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can be...

CVE-2019-3901

A race condition in perfeventopen allows local attackers to leak sensitive data from setuid programs. As no relevant locks in particular the credguardmutex are held during the ptracemayaccess call, it is possible for the specified target task to perform an execve syscall with setuid execution...

CVE-2019-3901: Improper Locking

A race condition in perfeventopen allows local attackers to leak sensitive data from setuid programs. As no relevant locks in particular the credguardmutex are held during the ptracemayaccess call, it is possible for the specified target task to perform an execve syscall with setuid execution...

DEBIAN-CVE-2019-3460

A heap data infoleak in multiple locations including L2CAPPARSECONFRSP was found in the Linux kernel before 5.1-rc1...

Facebook Exposed Dataset Debacle: Who's Really To Blame?

UPDATE The discovery of millions of Facebook records leaked from publicly-exposed AWS storage buckets has left researchers wondering where the responsibility lies. The two separate datasets, disclosed Wednesday by researchers at Upguard, were held by two app developers, Cultura Colectiva and At t...

540 Million Facebook User Records Found On Unprotected Amazon Servers

It's been a bad week for Facebook users. First, the social media company was caught asking some of its new users to share passwords for their registered email accounts and now… ...the bad week gets worse with a new privacy breach. More than half a billion records of millions of Facebook users hav...

DSMALL open source mall B2B2C Fl***.php page there are SQL injection vulnerabilities

DSMALL open source mall B2B2C is a set of B2B2C multi-store mall solutions. DSMALL open source mall B2B2C Fl.php page there is a SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive database information...

openSUSE: Security Advisory for python-azure-agent (openSUSE-SU-2019:1106-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : python-azure-agent (openSUSE-2019-1106)

This update for python-azure-agent fixes the following issues : - CVE-2019-0804: An issue with swapfile handling in the agent created a data leak situation that exposes system memory data. bsc1127838 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenabl...

OPENSUSE-SU-2019:1106-1 Security update for python-azure-agent

This update for python-azure-agent fixes the following issues: - CVE-2019-0804: An issue with swapfile handling in the agent created a data leak situation that exposes system memory data. bsc1127838 This update was imported from the SUSE:SLE-15:Update update project...

Security update for python-azure-agent (important)

openSUSE Security Update: Security update for python-azure-agent Announcement ID: openSUSE-SU-2019:1106-1 Rating: important References: 1127838 Cross-References: CVE-2019-0804 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update f...

Cyber Security Week in Review (March 28)

Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. Top headlines this week ASUS had to release an emergency fix for a malware that may have accidentally deployed to their machines. Attackers may have...

CVE-2019-3860

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory...

CVE-2019-3861

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory...

CVE-2019-3858: Out-of-bounds Read

An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory...

SUSE-SU-2019:0603-1 Security update for python-azure-agent

This update for python-azure-agent fixes the following issues: - CVE-2019-0804: An issue with swapfile handling in the agent created a data leak situation that exposes system memory data. bsc1127838...