EUVD-2019-13569

Malware in sbrugna...

JFrog: Impersonation attack via Broken link in "blog-author" page

A social media platform link of "Twitter" on https://jfrog.com/blog-author/john-peterson/ was broken and could've allowed a user to impersonate a reseller and attack / scam your customers. This happened because the account of twitter either deleted or changed their username. I thought I'd report ...

Tenable Nessus < 8.5.0 Multiple Vulnerabilities (TNS-2019-04)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 8.5.0. It is, therefore, affected by multiple vulnerabilities: - A reflected XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker could...

CVE-2019-3962

Content Injection vulnerability in Tenable Nessus prior to 8.5.0 may allow an authenticated, local attacker to exploit this vulnerability by convincing another targeted Nessus user to view a malicious URL and use Nessus to send fraudulent messages. Successful exploitation could allow the...

Code injection

Content Injection vulnerability in Tenable Nessus prior to 8.5.0 may allow an authenticated, local attacker to exploit this vulnerability by convincing another targeted Nessus user to view a malicious URL and use Nessus to send fraudulent messages. Successful exploitation could allow the...

Tenable Nessus <= 8.4.0 Multiple XSS Vulnerabilities (TNS-2019-04)

Tenable Nessus is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6 sure signs someone is phishing you—besides email

There are several common and, unfortunately, frequently successful avenues of attack that cybercriminals can use to part you from your personal contact and financial information. These phishing attack methods include email, phone calls, corrupted software or apps, social media, advertisements, an...

Twitter Suspends Accounts of Users With Infected Computers

From IDG News Service Jeremy Kirk Twitter is suspending the accounts of some users whose computers have fallen victim to a well-known piece of malicious software that has targeted other sites such as Facebook and MySpace. The malware, Koobface, is designed to spread itself by checking to see if...