Wallarm to sponsor OWASP AppSec USA

If you are a SecOps or DevOps professional you can not miss the application security event of the year: AppSec USA, September 19–22nd at Disney Coronado Spring Resort, Orlando, FL Use the code: UNLM50WLLRM to register to get $50 discount. You will get great information on the new security tools a...

NEC EXPRESS CLUSTER clpwebmc Remote Root Exploit

NEC EXPRESS CLUSTER comes with Cluster Manager, a Java applet for cluster configuration and management. The underlying webserver 'clpwebmc' runs as root and accepts connections on TCP port 29003 which can be initiated without authentication in the default installation. / 2017 update: as of 3.3.4...

Bitdefender Total Security 'bdfwfpf' Kernel Driver Privilege Escalation Vulnerability

Bitdefender Total Security is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

September 1, 2017 – Morning Cyber Coffee Headlines – “Labor Day Weekend” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! September 1, 2017 - Headlines Carbon Black in the News: This Week In...

Reflected XSS Bug Patched in Popular WooCommerce WordPress Plugin

An extension of the WooCommerce WordPress plugin, used by 28 percent of all online stores, has been patched against a reflected cross-site scripting vulnerability. The vulnerability was found in the Product Vendors plugin, which allows an existing ecommerce site to support multiple vendors,...

dbt-hive (>=1.1.5 <=1.11.0), dbt-impala (>=1.1.4 <=1.3.1) +30 more potentially affected by CVE-2015-3206 via kerberos (>=1.1.1 <=1.3.1)

kerberos PYPI version =1.1.1, =1.1.5, =1.1.4, =0.1.0, =1.0.5, =0.1.0, =6.0.0, =0.2.0, =0.1.0, =0.0.1, =0.0.2, =2017.3.3, =0.1.0, =0.0.1, =1.6.16 and more Source cves: CVE-2015-3206 Source advisory: OSV:PYSEC-2017-49...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of August 21, 2017

In last week’s blog entry, I mentioned the fact that the Zero Day Initiative ZDI published two zero-day advisories ZDI-17-691 and ZDI-17-692 for vulnerabilities found in Foxit Reader after Foxit failed to meet the 120-day deadline outlined in ZDI’s disclosure policy. Since the public disclosure,...

A Company Offers $500,000 For Secure Messaging Apps Zero-Day Exploits

How much does your privacy cost? It will soon be sold for half a Million US dollars. A controversial company specialises in acquiring and reselling zero-day exploits is ready to pay up to US$500,000 for working zero-day vulnerabilities targeting popular secure messenger applications, such as...

Zerodium Offers $500K for Secure Messaging App Zero Days

Zerodium, a vendor operating in the nebulous exploit acquisition market, has put a premium on zero-day vulnerabilities in secure messaging applications in a new pricing structure announced today. Remote code execution and local privilege elevation zero days in messaging apps such as WhatsApp,...

SpiderControl SCADA MicroBrowser

CVSS v3 7.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: SpiderControl Equipment: SCADA MicroBrowser Vulnerability: Stack-based Buffer Overflow AFFECTED PRODUCTS The following versions of SCADA MicroBrowser, a software management platform, are affected: SCADA MicroBrowser...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of August 14, 2017

One of my favorite movies is the 1999 comedy “Galaxy Quest,” which features the cast of a science-fiction television series similar to Star Trek. In the movie, the crew is visited by real aliens who ask them for help against an intergalactic adversary because they believe that Galaxy Quest is a...

Two Critical Zero-Day Flaws Disclosed in Foxit PDF Reader

Are you using Foxit PDF Reader? If yes, then you need to watch your back. Security researchers have discovered two critical zero-day security vulnerabilities in Foxit Reader software that could allow attackers to execute arbitrary code on a targeted computer, if not configured to open files in th...

fuchsia_fidl: Crash in fidl::Lexer::Peek

Detailed report: https://oss-fuzz.com/testcase?key=6200421431377920 Project: fuchsiafidl Fuzzer: libFuzzerfuchsiafidlfuzzer Fuzz target binary: fuchsiafidlfuzzer Job Type: libfuzzerasanfuchsiafidluntrusted Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x614000010000 Crash State:...

Microsoft Edge Chakra Uninitialized Arguments Exploit

Microsoft Edge Chakra suffers from an uninitialized arguments vulnerability. Microsoft Edge: Chakra: Uninitialized arguments CVE-2017-8640 Here's a snippet of "ParseVariableDeclaration" which is used for parsing declarations. template ParseNodePtr Parser::ParseVariableDeclaration tokens...

Threat Intelligence for WAF

It’s all about security rules Stephen Hawking said, “Intelligence is the ability to adapt to change”. One could say much the same of web application firewalls and WAF security rules. With web applications now one of the most attacked components of IT infrastructures, organizations have a critical...

Microsoft Edge Charka Failed Re-Parse

Microsoft Edge: Chakra: InterpreterStackFrame::ProcessLinkFailedAsmJsModule incorrectly re-parses CVE-2017-8645 When Chakra fails to link an asmjs module, it tries to re-parse the failed-to-link asmjs function to treat it as a normal javascript function. But it incorrectly handles the case where...

Advantech WebOP

CVSS v3 4.8 ATTENTION: Low skill level to exploit. Public exploits are available. Vendor: Advantech Equipment: WebOP Vulnerability: Heap-Based Buffer Overflow AFFECTED PRODUCTS Researchers report that all versions of Advantech WebOP operator panels are affected. IMPACT Successful exploitation of...

ffmpeg: Index-out-of-bounds in decode_header

Detailed report: https://oss-fuzz.com/testcase?key=6421736130084864 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSNOWfuzzer Fuzz target binary: ffmpegAVCODECIDSNOWfuzzer Job Type: libfuzzerubsanffmpeguntrusted Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of August 7, 2017

Earlier this month, a blog post from Blue Frost Security was released stating that they were giving away tickets to the upcoming Ekoparty Security Conference in Argentina. But there was a catch: in order to get the tickets and free whiskey, entrants had to complete an exploitation challenge and...

Fuji Electric Monitouch V-SFT

CVSS v3 7.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Fuji Electric Equipment: Monitouch V-SFT Vulnerabilities: Stack-Based Buffer Overflow, Heap-Based Buffer Overflow, Improper Privilege Management AFFECTED PRODUCTS The following versions of Monitouch V-SFT, a screen...