Regsvr32.exe (.sct) Command Delivery Server

This module uses the Regsvr32.exe Application Whitelisting Bypass technique as a way to run a command on a target system. The major advantage of this technique is that you can execute a static command on the target system and dynamically and remotely change the command that will actually run by...

Instacart: Authorization Bypass in Delivery Chat Logs

An authorization issue in the mobile app API allows any Instacart user to gain access to other users' order delivery chat logs. The /api/v2/orderdeliveries/:orderdeliveryid/orderchangelogs endpoint does not sufficiently check if the user has permissions to access that particular order's chat logs...

Windows BITS 'Notification' Feature Used to Deliver Malware

Attackers have found a new way to exploit the Widows Background Intelligent Transfer Service BITS which is being used to infect and reinfect targeted PCs with malware even after the initial infection has been removed. According to security researchers at Dell SecureWorks, attackers are exploiting...

Threat Outbreak Alert RuleID23317: Email Messages Distributing Malicious Software on June 7, 2016

Medium Alert ID: 46592 First Published: 2016 June 7 13:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23317 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID23297: Email Messages Distributing Malicious Software on June 7, 2016

Medium Alert ID: 46586 First Published: 2016 June 7 13:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23297 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID23287: Email Messages Distributing Malicious Software on June 4, 2016

Medium Alert ID: 46561 First Published: 2016 June 6 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23287 may contain the following files: Name | Size...

CVE-2016-4810

Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 CU1, and Citrix XenApp 7.5 and 7.6 allow attackers to set Access Policy rules on the XenDesktop Delivery Controller via unspecified vectors...

PT-2016-6154

Name of the Vulnerable Software and Affected Versions Citrix Studio versions prior to 7.6.1000 Citrix XenDesktop 7.x versions prior to 7.6 LTSR Cumulative Update 1 CU1 Citrix XenApp versions 7.5 and 7.6 Description The issue allows attackers to set Access Policy rules on the XenDesktop Delivery...

CVE-2016-4810: Improper Access Control

Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 CU1, and Citrix XenApp 7.5 and 7.6 allow attackers to set Access Policy rules on the XenDesktop Delivery Controller via unspecified vectors...

[SECURITY] Fedora 23 Update: jenkins-1.625.3-4.fc23

Jenkins is an award-winning, cross-platform, continuous integration and continuous delivery application that increases your productivity. Use Jenkins to build and test your software projects continuously making it easier for developers to integrate changes to the project, and making it easier for...

Wekby APT Gang Seen Using DNS Tunneling for Command and Control

Palo Alto Networks is reporting a shift in malware tactics used by the APT group Wekby that has added a rare but effective new tool to its bag of tricks. The security firm reported on Tuesday that over the past week, Wekby attackers are turning to the technique known as DNS tunneling in lieu of...

[SECURITY] Fedora 24 Update: jenkins-1.651.1-1.fc24

Jenkins is an award-winning, cross-platform, continuous integration and continuous delivery application that increases your productivity. Use Jenkins to build and test your software projects continuously making it easier for developers to integrate changes to the project, and making it easier for...

Threat Outbreak Alert RuleID22585: Email Messages Distributing Malicious Software on April 29, 2016

Medium Alert ID: 44958 First Published: 2016 April 29 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22585 may contain the following files: Name | Si...

Citrix Systems NetScaler ADC and Gateway Information Disclosure Vulnerability (CNVD-2016-02416)

Citrix Systems NetScaler ADC is a suite of service and application delivery solutions and Citrix Access Gateway Enterprise Edition is a secure remote access solution. An information disclosure vulnerability exists in Citrix Systems NetScaler ADC and Gateway, which can be exploited by remote...

prism.pingnetwork.in Open Redirect vulnerability

Open Bug Bounty ID: OBB-146691 Description| Value ---|--- Affected Website:| prism.pingnetwork.in Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

CVE-2016-1019: A New Flash Exploit Included in Magnitude Exploit Kit

On April 2, security researcher @Kafeine at Proofpoint discovered a change to the Magnitude Exploit Kit. Thanks to their collaboration, we analyzed the sample and discovered that Magnitude EK was exploiting a previously unknown vulnerability in Adobe Flash Player CVE-2016-1019. The in-the-wild...

Santa Gift Delivery - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Santa Gift Delivery published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21829: Email Messages Distributing Malicious Software on March 21, 2016

Medium Alert ID: 44233 First Published: 2016 March 21 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21829 may contain the following files: Name | Si...

Stop Scanning My Macro

FireEye Labs detected an interesting evasion strategy in two recent, large Dridex campaigns. These campaigns changed the attachment file-type and location of malicious logic in an attempt to avoid scanners. Overview Both campaigns used an invoice theme and came from a wide variety of sending...

[SECURITY] Fedora 23 Update: jenkins-1.625.3-3.fc23

Jenkins is an award-winning, cross-platform, continuous integration and continuous delivery application that increases your productivity. Use Jenkins to build and test your software projects continuously making it easier for developers to integrate changes to the project, and making it easier for...