Threat Outbreak Alert RuleID27385: Email Messages Distributing Malicious Software on January 24, 2017

Medium Alert ID: 52402 First Published: 2017 January 24 20:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27385 may contain the following files: Name |...

Cisco Mobility Express 2800 and 3800 802.11 Denial of Service Vulnerability

A vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. The vulnerability is...

Design flaws in the Android version of the Far Eastern Express app client

Yuancheng Express app is a life service application, a mobile logistics platform. There is a design vulnerability in the Far Cheng Express app client for Android. Due to the digest digest algorithm can be cracked, allowing an attacker to exploit the vulnerability to reset the password of any user...

paris-express.com XSS vulnerability

Vulnerable URL: http://www.paris-express.com/search?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6527729 VIP website status:| No Check paris-express.com SSL connection:| Grad...

Cisco IOS and IOS XE Software Path Traversal Vulnerability

Cisco IOx is a suite of applications from Cisco USA that provide unified hosting capabilities for Cisco's IoT network infrastructure Cisco routers, switches, etc.. A security vulnerability exists in Cisco IOx on Cisco IOS and IOS XE that stems from the failure of an affected framework on the targ...

Teradata Studio Express 15.12.00.00 Race Condition Vulnerability

Exploit for linux platform in category local exploits Title: /tmp race condition in Teradata Studio Express v15.12.00.00 studioexpressinstall Author: Larry W. Cashdollar, @larry0 Date: 2016-10-03 Download Site: http://downloads.teradata.com/download/tools/teradata-studio-express Vendor: Teradata...

Teradata Studio Express 15.12.00.00 Race Condition

Title: /tmp race condition in Teradata Studio Express v15.12.00.00 studioexpressinstall Author: Larry W. Cashdollar, @larry0 Date: 2016-10-03 Download Site: http://downloads.teradata.com/download/tools/teradata-studio-express Vendor: Teradata Vendor Notified: 2016-10-03 Vendor Contact: web form...

Teradata Studio Express Elevation of Privilege Vulnerability

Teradata Studio Express is a suite of information mining tools from Teradata Teradata that retrieve data from Teradata and Aster database systems and support the manipulation and storage of data on the desktop. An elevation of privilege vulnerability exists in the installation script in Teradata...

CVE-2016-7490

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

CVE-2016-7490

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

CVE-2016-7490

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

CVE-2016-7490

The CVE concerns Teradata Studio Express 15.12.00.00, where the installation script studioexpressinstall insecurely creates files under /tmp. A local attacker could place a symlink in /tmp and potentially clobber system files or escalate privileges. Technical details in related records confirm th...

CVE-2016-7490

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

americanexpress.com XSS vulnerability

Vulnerable URL: https://www.americanexpress.com/uk/visitamsterdam/travel/en/assets/amsterdamtravelcast.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 13.02.2017 Latest check for patch:| 13.02.2017 14:07 GMT Vulnerability type:| XSS Vulnerability...

SOL01471335 - BIND vulnerability CVE-2016-2848

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

PCILeech - Direct Memory Access (DMA) Attack Software

The PCILeech use the USB3380 chip in order to read from and write to the memory of a target system. This is achieved by using DMA over PCI Express. No drivers are needed on the target system. The USB3380 is only able to read 4GB of memory natively, but is able to read all memory if a kernel modul...

personalsavings.americanexpress.com XSS vulnerability

Vulnerable URL: https://personalsavings.americanexpress.com/application/app/nao?intlink=X"...

Oracle Fixes 253 Vulnerabilities in Last CPU of 2016

Oracle fixed 253 vulnerabilities across 76 product lines on Tuesday as part of its quarterly Critical Patch Update. Many of the fixes addressed by Oracle tackled vulnerabilities tied to securing critical enterprise data. Vulnerabilities in Oracle Fusion Middleware, a family of infrastructure...

Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability

Cisco Unified Contact Center Express Unified CCX and Cisco Unified Intelligence Center CUIC are both products of Cisco, Inc. Unified CCX is a customer relationship management component of a unified communications solution; CUIC is a web-based reporting platform. Unified CCX is a customer...

Advance MLM Script - SQL Injection Vulnerability

Exploit for php platform in category web applications x========================================================================================================================================x | Title : Advance MLM Script SQL Vulnerabilities | Software : Advance MLM Script | Vendor :...