Threat Outbreak Alert RuleID24477: Email Messages Distributing Malicious Software on August 23, 2016

Medium Alert ID: 48565 First Published: 2016 August 23 17:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24477 may contain the following files: Name |...

OpenSSH 7.x < 7.3 Multiple Vulnerabilities

Binary data 9507.prm...

php security update

5.3.3-48 - don't set environmental variable based on user supplied Proxy request header CVE-2016-5385...

The plant controller has a remote vulnerability and no patch-vulnerability warning-the black bar safety net

Power station use of an industrial control system has not patched the vulnerability, an attacker can remotely exploit it to gain network control. Remedy method? Turning off the function or replace the equipment. Power station use of an industrial control system has not patched the vulnerability, ...

Environmental Systems Corporation(ESC)8832数据控制器权限绕过及XSS漏洞

No description provided by source...

CVE-2016-4502

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter...

CVE-2016-4502

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter...

CVE-2016-4501

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

Authentication flaw

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

CVE-2016-4501

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

CVE-2016-4502

The CVE-2016-4502 entry affects Environmental Systems Corporation (ESC) 8832 Data Controller versions 3.02 and earlier. The vulnerability allows remote attackers to bypass authentication and perform unauthorized administrative operations by abusing a modified parameter, enabling privilege escalat...

CVE-2016-1531

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...

Here's Why Microsoft Drops a Cloud Data Center Under the Ocean

Where tech companies like Facebook and Google prefer to move their data centers to colder countries to reduce their air conditioning bill, Microsoft has come up with an even better home for data centers while cutting high energy costs for cooling them: Under the Sea. Here's what Microsoft says:...

XYCMS环保设备企业建站系统 SQL 注入漏洞

No description provided by source...

XYCMS环保设备企业建站系统数据库发现漏洞

No description provided by source...

groundwaterenvironmentalgroup.com XSS vulnerability

Vulnerable URL: http://groundwaterenvironmentalgroup.com/GalleryView.asp?MyName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=Photos/Everglades/frogonpad.jpg Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:03 GMT Vulnerability type:| XSS...

The vulnerability of the libvdpau library, which allows a hacker to execute arbitrary files

The vulnerability of the libvdpau library is related to incorrect handling of environmental variables. Exploiting this vulnerability allows a local attacker to execute arbitrary file writing operations...

LabTech Insecure File Permissions Vulnerability

LabTech is an international company specializing in providing analytical chemistry laboratories from sample pre-treatment to analytical testing solutions for food safety, environmental testing, disease control and materials analysis. LabTech has an insecure file permission vulnerability that can ...

SIP Script Remote Command Execution via Shellshock

The remote host appears to be running SIP. SIP itself is not vulnerable to Shellshock; however, any Bash script that SIP runs for filtering or other routing tasks could potentially be affected if the script exports an environmental variable from the content or headers of a SIP message. A negative...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20141008-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - A flaw exists in the SQLNET Inspection Engine due to improper handling of SQL REDIRECT packets. An attacker can exploit this vulnerability by sending a crafted sequence of REDIRECT packets through the...