Threat Outbreak Alert RuleID29210: Email Messages Distributing Malicious Software on May 22, 2017

Medium Alert ID: 53914 First Published: 2017 May 22 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29210 may contain the following files: Name | Size...

Design/Logic Flaw

An issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface, there is a page that allows an attacker to use an unsanitized GET parameter to download files from the device as the root user. The attacker can download any file from the device's filesystem. This can be...

Threat Outbreak Alert RuleID29182: Email Messages Distributing Malicious Software on May 19, 2017

Medium Alert ID: 53899 First Published: 2017 May 20 03:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29182 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29203: Email Messages Distributing Malicious Software on May 19, 2017

Medium Alert ID: 53905 First Published: 2017 May 19 15:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29203 may contain the following files: Name | Size...

USN-3275-3 openjdk-7 regression

USN-3275-2 fixed vulnerabilities in OpenJDK 7. Unfortunately, the update introduced a regression when handling TLS handshakes. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenJDK improperly re-used cached NTLM connections in...

Threat Outbreak Alert RuleID29164: Email Messages Distributing Malicious Software on May 18, 2017

Medium Alert ID: 53881 First Published: 2017 May 18 16:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29164 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29175: Email Messages Distributing Malicious Software on May 18, 2017

Medium Alert ID: 53886 First Published: 2017 May 18 15:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29175 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29177: Email Messages Distributing Malicious Software on May 17, 2017

Medium Alert ID: 53871 First Published: 2017 May 17 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29177 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29174: Email Messages Distributing Malicious Software on May 17, 2017

Medium Alert ID: 53870 First Published: 2017 May 17 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29174 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29169: Email Messages Distributing Malicious Software on May 17, 2017

Medium Alert ID: 53869 First Published: 2017 May 17 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29169 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29160: Email Messages Distributing Malicious Software on May 17, 2017

Medium Alert ID: 53867 First Published: 2017 May 17 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29160 may contain the following files: Name | Size...

BSA-2017-271

Security Advisory ID : BSA-2017-271 Component : MD5 Algorithm Revision : 1.0: Interim The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature...

Threat Outbreak Alert RuleID29083: Email Messages Distributing Malicious Software on May 16, 2017

Medium Alert ID: 53861 First Published: 2017 May 16 16:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29083 may contain the following files: Name | Size...

WordPress: WordPress Automatic Update Protocol Does Not Authenticate Updates Provided by the Server

When the WordPress automatic update process is initiated likely via wp-cron.php, this is the path the code takes: https://github.com/WordPress/WordPress/blob/4a6f90db58a935abb688cfb91b391dffeda7b35c/wp-admin/includes/class-wp-upgrader.phpL242-L283...

Threat Outbreak Alert RuleID29140: Email Messages Distributing Malicious Software on May 16, 2017

Medium Alert ID: 53850 First Published: 2017 May 16 14:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29140 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29138: Email Messages Distributing Malicious Software on May 16, 2017

Medium Alert ID: 53848 First Published: 2017 May 16 14:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29138 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29133: Email Messages Distributing Malicious Software on May 16, 2017

Medium Alert ID: 53845 First Published: 2017 May 16 14:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29133 may contain the following files: Name | Size...

Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-3275-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3275-2 advisory. USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Tenable has extracted the preceding...

USN-3275-2: OpenJDK 7 vulnerabilities

USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Original advisory details: It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java applicati...

USN-3275-2 openjdk-7 vulnerabilities

USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Original advisory details: It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java applicati...