Resurrection of the Evil Miner

At FireEye Labs, we recently detected the resurgence of a coin mining campaign with a novel and unconventional infection vector in the form of an iFRAME inline frame – an HTML document embedded inside another HTML document on a web page that allows users to get content from another separate sourc...

Veris: Registeration Link "Jacking&Redirecting"

Hello Team , i found dangerous issue in your register application , once i tried to register , the request was like that : POST /portal/register/ HTTP/1.1 Host: sandbox.veris.in User-Agent: My 'User-Agent' Details Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type:...

Microsoft Office Files Containing Malicious VBScript Downloader

Microsoft Office files might contain a malicious downloader. A remote attacker could send spam e-mails including those downloaders, and use social engineering in order to convince users to manually enable them. This would allow the malicious code to run and infect the target system...

IC3 Warns of Extortion Email Schemes

The Internet Crime Complaint Center IC3 has issued an alert on extortion schemes that relate to recent high-profile data thefts. Fraudsters often use the news release of high-profile data breaches to scare victims into clicking on a link or paying a ransom. US-CERT encourages users and...

Cybercrime Hit Businesses Hardest in 2015, says IC3 Report

Businesses were hit hardest by inbox-based scams in 2015 that robbed U.S. companies of $263 million. The numbers come from the FBI’s recently released 2015 Internet Crime Report that tallies the types of cybercrimes hitting U.S. business and individuals the hardest. According to the FBI, its...

Reverse Engineering Cross Platform Disassembler: Panopticon

Reverse Engineering Cross Platform Disassembler Panopticon is a disassembler that understands the semantics of opcodes. This way it’s able to help the user by discovering and displaying invariants that would have to be discovered “by hand” in traditional disassemblers. This allows an interactive...

Operation Technology ETAP 14.1.0 - Multiple Stack Buffer Overrun Vulnerabilities

Operation Technology ETAP 14.1.0 Multiple Stack Buffer Overrun Vulnerabilities Vendor: Operation Technology, Inc. Product web page: http://www.etap.com Affected version: 14.1.0.0 Summary: Enterprise Software Solution for Electrical Power Systems. ETAP is the most comprehensive electrical...

brookfieldengineering.com XSS vulnerability

Vulnerable URL: http://www.brookfieldengineering.com/download/downloadform.asp?uid=1%22--%3E%3Csvg/onload=;prompt%28/OPENBUGBOUNTY/%29;%3E=8 Details: Description| Value ---|--- Patched:| Yes, at 18.06.2017 Latest check for patch:| 18.06.2017 17:36 GMT Vulnerability type:| XSS Vulnerability status...

Targeted Attacks against Banks in the Middle East

UPDATE Dec. 8, 2017: We now attribute this campaign to APT34, a suspected Iranian cyber espionage threat group that we believe has been active since at least 2014. Learn more about APT34 and their late 2017 targeting of a government organization in the Middle East. Introduction In the first week ...

IBM Rational Engineering Lifecycle Manager Information Disclosure Vulnerability

IBM Rational Engineering Lifecycle Manager is a suite of engineering lifecycle management software from IBM in the United States. A security vulnerability in IBM Rational Engineering Lifecycle Manager allows remote attackers to submit specially crafted URLs to obtain sensitive information...

IBM Rational Engineering Lifecycle Manager Cross-Site Scripting Vulnerability

IBM Rational Engineering Lifecycle Manager is a suite of engineering lifecycle management software from IBM in the United States. A cross-site scripting vulnerability exists in IBM Rational Engineering Lifecycle Manager, which can be exploited by remote attackers to inject arbitrary Web script or...

IBM Rational Engineering Lifecycle Manager Cross-Site Scripting Vulnerability (CNVD-2016-03396)

IBM Rational Engineering Lifecycle Manager is a suite of engineering lifecycle management software from IBM in the United States. A cross-site scripting vulnerability exists in IBM Rational Engineering Lifecycle Manager, which can be exploited by remote attackers to inject arbitrary Web script or...

IBM Rational Engineering Lifecycle Manager Cross-Site Scripting Vulnerability (CNVD-2016-03397)

IBM Rational Engineering Lifecycle Manager is a suite of engineering lifecycle management software from IBM in the United States. A cross-site scripting vulnerability exists in IBM Rational Engineering Lifecycle Manager, which can be exploited by remote attackers to inject arbitrary Web script or...

Multiple IBM Rational Products Cross-Site Scripting Vulnerabilities

IBM Rational Collaborative Lifecycle Management CLM and others are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions. Manager are collaborative lifecycle management...

Hacker reports Vulnerability in Mr. Robot Season 2 Website

Mr. Robot was the biggest 'Hacking Drama' television show of 2015 and its second season will return to American TV screens on Wednesday 13th of July 2016. However, the new promotional website for season two of Mr. Robot has recently patched a security flaw that could have easily allowed a hacker ...

Facebook Capture The Flag Platform Open Source

If you’ve been to DEF CON or any number of other technical hacker conferences, you’re familiar with Capture the Flag contests. These events pit teams of hackers and researchers against each other in a series of challenges until a winner is determined. Capture the Flag is also a valuable teaching...

Laser Gun to Detect Bombs and Chemical Weapons from 100 Feet Away

In Brief US-based Intelligence Advanced Research Projects Activity IARPA agency is sponsoring a program to build portable laser sensors that could detect explosives, narcotics and other dangerous chemical weapons from 100 feet away. Dubbed SILMARILS Standoff Illuminator for Measuring Absorbance a...

Unspecified Vulnerability in Agile Engineering Data Management Component in Oracle Supply Chain Products Suite

Oracle Supply Chain Products Suite is the United States Oracle Oracle company's set of supply chain solutions. An unspecified vulnerability exists in the Agile Engineering Data Management component of Oracle Supply Chain Products Suite, which could be exploited by an attacker to affect system...

CVE-2016-3428

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect availability via vectors related to Engineering Communication Interface...

CVE-2016-3428

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect availability via vectors related to Engineering Communication Interface...