Threat Outbreak Alert RuleID33094: Email Messages Distributing Malicious Software on July 3, 2018

Medium Alert ID: 58333 First Published: 2018 July 3 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33094 may contain the following files: Name | Size...

This Week in Security News: Macs, Hacks and Attacks

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, GitHub was hacked via their official account with cryptocurrency Sycoin. Also, a phishing attack targeting trustee company HealthEquity led ...

Popular Flight Tracker Flightradar24 Suffers Data Breach

One of the world's most popular flight tracking services Flightradar24, which shows real-time aircraft flight information on a map, has suffered a massive data breach that may have compromised email addresses and hashed passwords for more than 230,000 customers. Without revealing any information...

Security Bulletin: Multiple Vulnerabilities in IBM Initiate Master Data Service (CVE-2014-4789, CVE-2014-4788, CVE-2014-4787, CVE-2014-4786, CVE-2014-4785, CVE-2014-4784, CVE-2014-4783)

Summary Multiple Vulnerabilities discovered in web UI components of IBM Initiate Master Data Service. Vulnerability Details CVE-ID: CVE-2014-4789 DESCRIPTION: IBM Initiate Master Data Service could allow a remote attacker to hijack a valid user's session, caused by the failure to update the sessi...

UBUNTU-CVE-2017-16652

An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the targetpath parameter and generates a redirect response, but no check is...

WordPress Feed-Statistics Plugin Open Redirect Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports the setting up of personal blog sites on servers with PHP and MySQL.Feed-Statistics is one of the editorial statistics through the Feed reader about the people who are readi...

Mail.ru: Stored XSS in api.icq.net

Crossite scripting in api.icq.net domain. icq.net is considered as a sandbox domain, it does not use HTTP authentication or cookies, but XSS could be used to facilitate phishing attack...

Meet MEWKit, a tricky phishing attack draining Ethereum wallets

By Waqas Another day, another phishing attack trying to steal Ethereum cryptocurrency but This is a post from HackRead.com Read the original post: Meet MEWKit, a tricky phishing attack draining Ethereum wallets...

Bitso: Injecting html codes

Hi, I observed that I could inject some html codes in this page https://bitso.com/authenticate?redirect=/merchantinfo. To reproduced: Login to your account that has two factor authentication set up After you login you will be redirected to a page which you will enter the authentication code Open ...

Office 365 in the 0-day vulnerability baseStriker appear in the wild examples of the use-vulnerability warning-the black bar safety net

5 October 1, Avanan the researchers found that Office 365 appears in a named baseStriker of 0-day vulnerabilities. An attacker can exploit this vulnerability to send malicious mail, bypassing the Office 365 account security mechanisms. ! baseStriker vulnerability of the code to use the less...

SUSE-SU-2018:1102-1 Security update for python-Django

This update for python-Django fixes the following issues: Security issues fixed: - CVE-2018-7537: Fixed catastrophic backtracking in django.utils.text.Truncator. bsc1083305 - CVE-2018-7536: Fixed catastrophic backtracking in urlize and urlizetrunc template filters. bsc1083304 - CVE-2017-12794:...

Honeypot strategy is no longer effectively preventing spam account signup

panel:title=Fix From 3.9.5 onwards we have turned off the honeypot in favour of using captcha anyone affected by this issue just needs to switch the CAPTCHA on...

Honeypot strategy is no longer effectively preventing spam account signup

panel:title=Fix From 3.9.5 onwards we have turned off the honeypot in favour of using captcha anyone affected by this issue just needs to switch the CAPTCHA on...

SO Connect SO WIFI hotspot web interface open redirect vulnerability

SO Connect SO WIFI hotspot is a Wi-Fi hotspot device. web interface One of the web management interface. An open redirection vulnerability exists in the SO Connect SO WIFI hotspot web interface version 137. A remote attacker can exploit this vulnerability to redirect users to an arbitrary website...

HP IceWall Federation Agent Information Disclosure Vulnerability

HP IceWall Federation Agent is a suite of access control software. The software enables single sign-on by working with authentication in public and private clouds. An information disclosure vulnerability exists in HP IceWall Federation Agent version 3.0. A remote attacker could exploit this...

vBulletin 'url' parameter open redirect vulnerability

vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . An open redirector vulnerability exists in vBulletin versions 3.x.x and 4.2.x through 4.2.5. An attacker can exploit this vulnerability by sending the 'url'...

CVE-2016-10257

The Symantec Advanced Secure Gateway ASG 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack ...

CVE-2017-1668

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a us...

HackerOne: HTTP Parameter Pollution using semicolons in iframe element at hackerone.com/careers allows loading external Greenhouse forms

Summary: I noticed that HackerOne career pages loads it's application forms from Greenhouse.io via an iframe. The ghjid parameter value is taken into the iframe element for the token parameter in the iframe URL boards.greenhouse.io. Any html characters are escaped in order to avoid XSS and possib...

Security Flaw Left Major Banking Apps Vulnerable to MiTM Attacks Over SSL

A team of security researchers has discovered a critical implementation flaw in major mobile banking applications that left banking credentials of millions of users vulnerable to hackers. The vulnerability was discovered by researchers of the Security and Privacy Group at the University of...