Threat Outbreak Alert RuleID21353: Email Messages Distributing Malicious Software on February 25, 2016

Medium Alert ID: 43759 First Published: 2016 February 25 16:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21353 may contain the following files: Name |...

Threat Outbreak Alert RuleID20984: Email Messages Distributing Malicious Software on February 10, 2016

Medium Alert ID: 43478 First Published: 2016 February 10 14:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20984 may contain the following files: Name |...

CVE-2016-2049

examples/consumer/common.php in JanRain PHP OpenID library aka php-openid improperly checks the openid.realm parameter against the SERVERNAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted...

Threat Outbreak Alert RuleID19524: Email Messages Distributing Malicious Software on November 19, 2015

Medium Alert ID: 42168 First Published: 2015 November 19 17:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19524 may contain the following files: Name |...

Threat Outbreak Alert RuleID19325: Email Messages Distributing Malicious Software on June 16, 2016

Medium Alert ID: 42155 First Published: 2015 November 18 21:45 GMT Last Updated: 2016 June 16 15:40 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19325 an...

Threat Outbreak Alert RuleID19150: Email Messages Distributing Malicious Software on November 4, 2015

Medium Alert ID: 41910 First Published: 2015 November 3 20:21 GMT Last Updated: 2015 November 4 20:34 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19150...

USN-2787-1 audiofile vulnerability

Fabrizio Gennari discovered that audiofile incorrectly handled changing both the sample format and the number of channels. If a user or automated system were tricked into processing a specially crafted file, audiofile could be made to crash, leading to a denial of service, or possibly execute...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the SampleTable::setSampleToChunkParams function in the libstagefright library of the Android operating system is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially crafted MP4 data...

Threat Outbreak Alert RuleID18217: Email Messages Distributing Malicious Software on September 26, 2015

Medium Alert ID: 41178 First Published: 2015 September 25 18:46 GMT Last Updated: 2015 October 5 13:22 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat...

Exploit for Out-of-bounds Read in Openssl

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak C...

Threat Outbreak Alert RuleID17998: Email Messages Distributing Malicious Software on September 15, 2015

Medium Alert ID: 41014 First Published: 2015 September 15 20:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17998 may contain the following files: Name ...

Android Stagefright Media Playback Engine 远程代码执行漏洞

No description provided by source. !/usr/bin/env python Joshua J. Drake @jduck of ZIMPERIUM zLabs Shout outs to our friends at Optiv formerly Accuvant Labs C Joshua J. Drake, ZIMPERIUM Inc, Mobile Threat Protection, 2015 www.zimperium.com Exploit for RCE Vulnerability CVE-2015-1538 1 Integer...

SQLChop - SQL Injection Detection Engine

SQLChop is a novel SQL injection detection engine built on top of SQL tokenizing and syntax analysis. Web input URLPath, body, cookie, etc. will be first decoded to the raw payloads that web app accepts, then syntactical analysis will be performed on payload to classify result. The algorithm behi...

Adobe Flash - Pointer Crash in XML Handling

Adobe Flash - Pointer Crash in XML Handling Source: https://code.google.com/p/google-security-research/issues/detail?id=400&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The attached sample file, signalsigsegv7ffff637297a8900e3f87b25c25db8f9ec3c975f8c1211cc.swf, crashes,...

Threat Outbreak Alert RuleID17380: Email Messages Distributing Malicious Software on July 13, 2016

Medium Alert ID: 40526 First Published: 2015 August 17 14:20 GMT Last Updated: 2016 July 15 13:56 GMT Version: 12 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17380 and...

CVE-2015-4496

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538...

CVE-2015-4496

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538...

Apple Quicktime Invalid 3GPP stsd Sample Description Entry Size Denial of Service Vulnerability

Talos Vulnerability Report TALOS-2015-0013 Apple Quicktime Invalid 3GPP stsd Sample Description Entry Size Denial of Service Vulnerability August 13, 2015 CVE Number CVE-2015-3789 Description There is a denial of service vulnerability in Apple Quicktime. An attacker who can control the number of...

Out-of-bounds read with malformed MP3 file — Mozilla

Security researcher Aki Helin used the Address Sanitizer tool to discover an out-of-bounds read during playback of a malformed MP3 format audio file which switches sample formats. This could trigger a potentially exploitable crash or the reading of out-of-bounds memory content in some circumstanc...

NetCracker Resource Management System 8.0 XSS / SQL Injection Vulnerabilities

NetCracker Resource Management System versions 8.0 and below suffer from multiple cross site scripting and sql injection Vulnerabilities Vulnerability type: Cross-site Scripting Vendor: http://www.netcracker.com/ Product: NetCracker Resource Management System Affected version: =alert"XSS"...