RHEL 6 : qemu-kvm (RHSA-2016:0997)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0997 advisory. - qemu: incorrect banked access bounds checking in vga module CVE-2016-3710 Note that Nessus has not tested for this issue but has instead relied onl...

MS16-056: Description of the security update for Windows Journal: May 10, 2016

None None...

PT-2016-1843

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1o OpenSSL versions prior to 1.0.2c Description The issue is caused by a buffer overflow in the ASN.1 implementation, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted...

Katie Moussouris on Free ISO 29147

Threatpost Op-Ed is a regular feature where experts contribute essays and commentary on what’s happening in security and privacy. Today’s contributor is Katie Moussouris @k8em0. Today marks an exciting development in the often monotonous rehashing of vulnerability disclosure. The ISO standard tha...

Citrix XenApp and XenDesktop Hardening Guidance

A Joint Whitepaper from Mandiant and Citrix Throughout the course of Mandiant’s Red Team and Incident Response engagements, we frequently identify a wide array of misconfigured technology solutions, including Citrix XenApp and XenDesktop. We often see attackers leveraging stolen credentials from...

How to collect ADB and XCODE logs for XenMobile

To make users aware on how they can collect the ADB logs and XCODE logs...

PT-2016-1784 · Mariadb +7 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.47 and earlier Oracle MySQL versions 5.6.28 and earlier Oracle MySQL versions 5.7.10 and earlier MariaDB versions prior to 5.5.48 MariaDB versions 10.0.x prior to 10.0.24 MariaDB versions 10.1.x prior to 10.1.12...

Logstash CSV Output Vulnerability - CVE pending

Summary: Logstash 2.2 and prior versions are vulnerable to a formula based injection, when using the CSV output plugin. This plugin allows users to export data in comma separated values and is susceptible to an attack if the values contained a spreadsheet formula. This vulnerability is not presen...

MS16-007: Description of the security update for Windows: January 12, 2016 (KB3121461)

None None...

Kibana 4.x XSS -- CVE pending

Summary Kibana versions up to and including 4.3.0, 4.2.1, and 4.1.3 are vulnerable to a cross-site scripting XSS attack. The attack allows execution of arbitrary JavaScript in the context of the user’s browser. We have requested a CVE number and will update our forum post and website when the...

Securing Home and Small Business Routers

Home and Small Business routers have become the ideal target for attackers seeking to gain control over a user's gateway to the Internet. Router misconfigurations e.g., default credentials, interfaces open to the Internet or the lack of security precautions e.g., absence of updates may make users...

Kibana Cross-site Request Forgery CVE-2015-8131

CVE: CVE-2015-8131 Affected versions: All versions up to and including 4.1.2 and 4.2.0. The vulnerability is a cross-site request forgery CSRF or XSRF that could allow an attacker to read and write changes to the .kibana index or gain read and write access to Kibana plugin actions. Remediation: A...

KLA10677 Multiple vulnerabilities in Microsoft Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper memo...

RHEL 6 : net-snmp (RHSA-2015:1385)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1385 advisory. - net-snmp: snmptrapd crash when handling an SNMP trap containing a ifMtu with a NULL type CVE-2014-3565 Note that Nessus has not tested for this iss...

Logstash SSL/TLS FREAK Vulnerability CVE-2015-5378

Logstash 1.5.2 and prior versions are vulnerable to a SSL/TLS security issue called the FREAK attack. If you are using the Lumberjack input, FREAK allows an attacker to successfully implement a man in the middle attack, intercepting communication between the Logstash Forwarder agent and Logstash...

PT-2015-6343

Name of the Vulnerable Software and Affected Versions Ansible versions prior to 1.9.2 Description The issue concerns a failure to verify that the server hostname matches a domain name in the subject's Common Name CN or the subjectAltName field of the X.509 certificate. This allows man-in-the-midd...

IC3 Issues Internet Crime Report for 2014

The Internet Crime Complaint Center IC3 has released its Internet Crime Report for 2014, indicating that scams relating to social media—including doxing, click-jacking, and pharming—have increased substantially over the past five years. US-CERT encourages users to review the IC3 Alert for details...

PT-2015-3383 · Proftpd +2 · Proftpd +2

Name of the Vulnerable Software and Affected Versions: ProFTPD versions prior to 1.3.6b ProFTPD version 1.3.7rc before 1.3.7rc2 Description: The issue is related to the incorrect handling of overly long commands in the main.c component of the ProFTPD FTP server. This can lead to a remote...

Report Recommends Series of Cybersecurity Changes at FAA

The Federal Aviation Administration needs to upgrade and update its information security capabilities–including building a threat-modeling capability and implementing federal security guidelines–in order to ensure the safety of the nation’s aviation infrastructure, according to a new report by th...

PT-2015-1022 · Php +5 · Php +5

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.5.22 PHP versions 5.6.x prior to 5.6.6 Description: The issue is related to a use-after-free vulnerability in the phar rename archive function. This vulnerability can be exploited by remote attackers to cause a denial ...