SIMDComp Buffer Overflow Vulnerability

SIMDComp is a C library that uses binary packing to compress a list of certificates. A security vulnerability exists in SIMDComp versions prior to 0.1.0. A remote attacker could exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read and application crash...

Shopify: H1514 Lack of access control on edit packing slip template

Summary: An admin is able to edit the Edit packing slip template at /admin/settings/packingsliptemplate. However, a staff user with only "Home" permission and none other can view and also make edits to this template. Description: The Edit packing slip feature exists so an admin user can customize...

WordPress WooCommerce PDF Invoices & Packing Slips plugin <=2.0.12 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Detectify in WordPress WooCommerce PDF Invoices & Packing Slips plugin versions =2.0.12. Solution Update the WordPress WooCommerce PDF Invoices & Packing Slips plugin to the latest available version at least 2.0.13...

Threat Outbreak Alert RuleID30637: Email Messages Distributing Malicious Software on September 18, 2017

Medium Alert ID: 55318 First Published: 2017 September 18 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30637 may contain the following files: Name ...

Threat Outbreak Alert RuleID30447: Email Messages Distributing Malicious Software on September 4, 2017

Medium Alert ID: 55099 First Published: 2017 September 5 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30447 may contain the following files: Name |...

Woocommerce PDF Invoices Packing Slips < 2.0.13 - XSS

The WooCommerce PDF Invoices & Packing Slips WordPress plugin was affected by a XSS security vulnerability...

Threat Outbreak Alert RuleID25321: Email Messages Distributing Malicious Software on October 21, 2016

Medium Alert ID: 49387 First Published: 2016 October 21 19:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25321 may contain the following files: Name |...

Threat Outbreak Alert RuleID25298: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49205 First Published: 2016 October 6 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25298 may contain the following files: Name |...

Threat Outbreak Alert RuleID24881: Email Messages Distributing Malicious Software on September 7, 2016

Medium Alert ID: 48799 First Published: 2016 September 7 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24881 may contain the following files: Name |...

Adobe Flash - ATF Image Packing Overflow

Adobe Flash - ATF Image Packing Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=793 There is a heap overflow in ATF impage packing. To reproduce the issue, load the attach file '129' using LoadImage.swf as follows: LoadImage.swf?img=129 Proof of Concept:...

Adobe Flash - ATF Image Packing Overflow

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=793 There is a heap overflow in ATF impage packing. To reproduce the issue, load the attach file '129' using LoadImage.swf as follows: LoadImage.swf?img=129 Proof of Concept:...

Adobe Flash - ATF Image Packing Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=793 There is a heap overflow in ATF impage packing. To reproduce the issue, load the attach file '129' using LoadImage.swf as follows: LoadImage.swf?img=129 Proof of Concept:...

Automatically Extracting Obfuscated Strings from Malware using the FireEye Labs Obfuscated String Solver (FLOSS)

Introduction and Motivation Have you ever run strings.exe on a malware executable and its output provided you with IP addresses, file names, registry keys, and other indicators of compromise IOCs? Great! No need to run further analysis or hire expensive experts to determine if a file is malicious...

Automatically Extracting Obfuscated Strings from Malware using the FireEye Labs Obfuscated String Solver (FLOSS)

Introduction and Motivation Have you ever run strings.exe on a malware executable and its output provided you with IP addresses, file names, registry keys, and other indicators of compromise IOCs? Great! No need to run further analysis or hire expensive experts to determine if a file is malicious...

Threat Outbreak Alert RuleID15071: Email Messages Distributing Malicious Software on May 4, 2015

Medium Alert ID: 38661 First Published: 2015 May 4 18:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15071 may contain the following files: Name | Size ...

CVE-2014-6985

The Georgia Packing aka com.tapatalk.georgiapackingorg application 3.9.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Georgia Packing aka com.tapatalk.georgiapackingorg application 3.9.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6985

The Georgia Packing aka com.tapatalk.georgiapackingorg application 3.9.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6985

The CVE-2014-6985 entry concerns the Georgia Packing Android app (version 3.9.16). The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. The connected...

Threat Outbreak Alert: Fake Packing Invoice and Shipping Information Email Messages on June 30, 2013

Medium Alert ID: 29867 First Published: 2013 July 1 18:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice and shipment notification for the recipient. The text in the email message attempts to convince the...