IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems

In the latter half of 2015, the FireEye Labs Advanced Reverse Engineering FLARE team identified several versions of an ICS-focused malware crafted to manipulate a specific industrial process running within a simulated Siemens control system environment. We named this family of malware IRONGATE...

Apache ActiveMQ Fileserver Remote Code Execution Vulnerability

Apache ActiveMQ is the messaging and integration model provider . A remote code execution vulnerability exists in the Apache ActiveMQ Fileserver web program, which could allow a remote attacker to replace the web application with malicious code to execute remote code on an affected system...

The vulnerability of the ColdFusion interpreter allows attackers to replace the server.

The vulnerability of the ColdFusion interpreter exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the server using a specially crafted certificate...

[SECURITY] Fedora 24 Update: subversion-1.9.4-1.fc24

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

MS16-054: Description of the security update for Word Automation Services on SharePoint Server 2010: May 10, 2016

MS16-054: Description of the security update for Word Automation Services on SharePoint Server 2010: May 10, 2016 Summary This security update resolves vulnerabilities in Microsoft SharePoint that could allow remote code execution if a user opens a specially crafted Office file. To learn more abo...

MS16-054: Description of the security update for Office 2016 for Mac: May 10, 2016

None None...

MS16-065: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows Server 2012: May 10, 2016

MS16-065: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows Server 2012: May 10, 2016 View products that this article applies to. Summary This security update resolves a vulnerability in the Microsoft .NET Framework. The vulnerability could cause information...

The vulnerability of the operating system for Clustered Data ONTAP storage systems allows a attacker to obtain confidential information or replace servers.

The vulnerability of the Clustered Data ONTAP operating system exists due to the lack of verification of X.509 certificate checks for the TLS server. Exploiting this vulnerability allows a malicious actor to replace the server remotely or obtain confidential information using a specially crafted...

The vulnerability of the microprogramming software of the Storeonce Backup system allows a intruder to replace the user during the session.

The vulnerability of Storeonce Backup’s microprogramming software relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to replace the user during the session...

The vulnerability of the Safari browser, which allows a hacker to replace the user interface

The vulnerability of Safari browser is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to replace the user interface through a web page that replaces the actual text...

The vulnerability of the Android operating system allows a hacker to replace the server

The vulnerability of the caching function in the TrustManagerImpl class TrustManagerImpl.java of the Conscrypt component in the Android operating system is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace servers by accessing...

Security update 2016-04-12

...

MS16-039: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: April 12, 2016

MS16-039: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: April 12, 2016 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remote code execution i...

MS16-042: Description of the security update for SharePoint Server 2010 Office Web Apps: April 12, 2016

MS16-042: Description of the security update for SharePoint Server 2010 Office Web Apps: April 12, 2016 Summary This security update resolves vulnerabilities in SharePoint that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

The vulnerability of the iOS operating system, which allows a perpetrator to replace the trusted profile of the MDM device

The vulnerability of the iOS operating system’s Profiles component exists due to insufficient verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to replace the trusted profile of the MDM remotely...

The vulnerability of the Moodle learning management system allows a hacker to replace a user during a session.

The vulnerability of the admin/registration/register.php function in the Moodle learning management system is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to replace a user during a session by sending a request that sends statistics to...

MS16-029: Description of the security update for 2007 Microsoft Office Suite: March 8, 2016

None None...

Low: Red Hat Security Advisory: openstack-glance security update

Updated openstack-glance packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 6. Red Hat Product Security has rated this update as having a Low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

openstack-glance: Glance image status manipulation through locations

An authorization vulnerability in OpenStack Image service was discovered, which allowed image-status manipulation using locations. By removing the last location of an image, an authenticated user could change the status from 'active' to 'queue'. A malicious tenant could exploit this flaw to...

openstack-glance: Glance image status manipulation through locations

An authorization vulnerability in OpenStack Image service was discovered, which allowed image-status manipulation using locations. By removing the last location of an image, an authenticated user could change the status from 'active' to 'queue'. A malicious tenant could exploit this flaw to...