Threat Outbreak Alert RuleID31623: Email Messages Distributing Malicious Software on December 13, 2017

Medium Alert ID: 56252 First Published: 2017 December 13 18:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31623 may contain the following files: Name |...

CVE-2017-17872

creationtimestamp| type| source ---|---|--- 2017-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43330...

CVE-2017-17871

creationtimestamp| type| source ---|---|--- 2017-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43329...

CVE-2017-1000408

creationtimestamp| type| source ---|---|--- 2017-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43331...

Patch Tuesday, December 2017 Edition

The final Patch Tuesday of the year is upon us, with Adobe and Microsoft each issuing security updates for their software once again. Redmond fixed problems with various flavors of Windows, Microsoft Edge, Office, Exchange and its Malware Protection Engine. And of course Adobe's got another...

December 2017 security update release

Today, we released security updates to provide additional protections against malicious attackers. By default, Windows 10 receives these updates automatically, and for customers running previous versions, we recommend they turn on automatic updates as a best practice. More information about this...

updatestar.com XSS vulnerability

Open Bug Bounty ID: OBB-452511 Description| Value ---|--- Affected Website:| updatestar.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

salatik.com.ua XSS vulnerability

Open Bug Bounty ID: OBB-452431 Description| Value ---|--- Affected Website:| salatik.com.ua Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

druha.svetova.cz XSS vulnerability

Open Bug Bounty ID: OBB-452412 Description| Value ---|--- Affected Website:| druha.svetova.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

uniecampus.it XSS vulnerability

Open Bug Bounty ID: OBB-452396 Description| Value ---|--- Affected Website:| uniecampus.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

December 2017 security update release

Today, we released security updates to provide additional protections against malicious attackers. By default, Windows 10 receives these updates automatically, and for customers running previous versions, we recommend they turn on automatic updates as a best practice. More information about this...

December 12, 2017—KB4054521 (Security-only update)

None None...

Security Updates for Microsoft Word Products (December 2017)

The Microsoft Word Products are missing security updates. Microsoft has released an update for Microsoft Office that provides enhanced security as a defense-in-depth measure. The update disables the Dynamic Update Exchange protocol DDE in all supported editions of Microsoft Word. More information...

CVE-2017-13875

creationtimestamp| type| source ---|---|--- 2017-12-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43327...

KB4053577: Security update for Adobe Flash Player (December 2017)

The remote Windows host is missing security update KB4053577. It is, therefore, affected by a vulnerability which may allow an attacker to reset the global settings preference file. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105178; scriptversion"1.12";...

Threat Outbreak Alert RuleID31579: Email Messages Distributing Malicious Software on December 11, 2017

Medium Alert ID: 56213 First Published: 2017 December 11 17:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31579 may contain the following files: Name |...

Threat Outbreak Alert RuleID31076: Email Messages Distributing Malicious Software on December 11, 2017

Medium Alert ID: 56211 First Published: 2017 December 11 17:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31076 may contain the following files: Name |...

mamnewsa.pl XSS vulnerability

Open Bug Bounty ID: OBB-452095 Description| Value ---|--- Affected Website:| mamnewsa.pl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

astleyststephen.org.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-451829 Description| Value ---|--- Affected Website:| astleyststephen.org.uk Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

pt.anuncioo.com XSS vulnerability

Open Bug Bounty ID: OBB-451792 Description| Value ---|--- Affected Website:| pt.anuncioo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...