flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method. Successful exploitation could lead to arbitrary code execution...

Intel Branded NUC Kits Privilege Acquisition Vulnerability

Intel Branded NUC Kits are a series of host kits for Mini computers from Intel Corporation USA. A privilege-acquisition vulnerability exists in the BIOS firmware in Intel Branded NUC Kits. A local attacker could use this vulnerability to gain access to System Management Mode and take full control...

Zeus Variant 'Floki Bot' Targets PoS Data

Researchers have observed an uptick in attacks using the banking malware Floki Bot against U.S., Canadian and Brazilian banks, and insurance firms. Floki Bot, which uses code from the once notorious Zeus banking Trojan, has evolved and unlike its predecessor, is targeting point-of-sale systems vi...

Hacking Millions with Just an Image — Recipe: Pixels, Ads & Exploit Kit

If you have visited any popular mainstream website over the past two months, your computer may have been infected — Thanks to a new exploit kit discovered by security researchers. Researchers from antivirus provider ESET released a report on Tuesday stating that they have discovered an exploit ki...

Keitai Kit for Movable Type vulnerable to OS command injection

Overview Keitai Kit for Movable Type contains an OS command injection vulnerability. Keitai Kit for Movable Type provided by ideaman's Inc. contains an OS command injection vulnerability CWE-78. CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

EasyPHP Devserver Remote Command Execution Vulnerability

EasyPHP is a Windows Apache + Mysql + Perl/PHP/Python development kit , the package integrates PHP, Apache, MySQL, but also integrated a number of auxiliary development tools . A remote command execution vulnerability exists in EasyPHP Devserver running on port 1111, which can be exploited to...

UCanCode - Multiple Vulnerabilities

UCanCode multiple vulnerabilities Url: http://www.hmi-software.com/ http://www.ucancode.net/index.htm http://www.ucancode.net/bbs/zhuce/login.htm Description: Form vendor's web page "UCanCode Software is a Market Leading provider of HMI & SCADA, CAD, UML, GIS, Vector Graphics and Real Time Data...

Social Media Infected Image File (ImageGate)

A vulnerability exists in a web kit used by major web servers. A malicious code may be embedded in an image file. Specially crafted HTTP request is later used to manipulate a web client into executing the embedded code...

TrickBot Banking Trojan Adds New Browser Manipulation Tools

The TrickBot banking Trojan, a close relative to Dyre, has a growing target list and new browser manipulation techniques, experts at IBM X-Force said. “We expect to see it amplify infection campaigns and fraud attacks, sharpen its aim on business and corporate accounts,” wrote Limor Kessem,...

Inside the RIG Exploit Kit

Today’s most prolific exploit kit is RIG, which has filled a void left by the departure of Angler, Neutrino and Nuclear. That has made it public enemy No. 1 when it comes exploit kits. Now Cisco Talos researchers are hoping to shed new light into the ongoing development of the potent EK in hopes ...

Critical: Red Hat Security Advisory: java-1.7.1-ibm security update

An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

Sundown Exploit Kit 'Larger Threat Than People Realize'

It’s been a tumultuous summer for exploit kits with the demise of Angler, Neutrino and Nuclear, for years each responsible for massive amounts of dollar losses and malware infections. Now, Cisco Talos security researchers are bracing for new entrants to fill the void, starting with the Sundown...

CVE-2016-5503

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity, and availability via vectors related to Core Services...

CVE-2016-5492

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users...

CVE-2016-5486

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors related to Core Services...

CVE-2016-5481

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows remote attackers to affect confidentiality via vectors related to Core Services...

CVE-2016-5492

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users...

CVE-2016-5503

CVE-2016-5503 concerns the Sun ZFS Storage Appliance Kit (AK) 2013, specifically the Core Services subcomponent. The affected software is the AK (2013) in Oracle Sun Systems Products Suite AK 2013, with a local-privilege/vector scenario that could affect confidentiality, integrity, and availabili...

RHEL 6 / 7 : java-1.8.0-oracle (RHSA-2016:2088)

An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which give...

Oracle Sun Systems Products Sun ZFS Storage Appliance Kit Component Unauthorized Access Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. An unauthorized access vulnerability exists in the Core Services subcomponent of the AK 2013 release of the Sun ZFS Storage AK...