TAU Threat Intelligence Notification: Shade Ransomware

Summary Recently there is a new wave of malicious spam campaign distributing Shade ransomware via sending malicious JavaScript attachments. The spam campaign was mainly targeting users from Russia, and the ransom note was written in both Russian and English. This variant of Shade ransomware will...

CVE-2016-6525

Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute arbitrary code via a large decode array...

sail-shade-boutique.com XSS vulnerability

Open Bug Bounty ID: OBB-127712 Description| Value ---|--- Affected Website:| sail-shade-boutique.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

shade-sail-boutique.com XSS vulnerability

Open Bug Bounty ID: OBB-127698 Description| Value ---|--- Affected Website:| shade-sail-boutique.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

PT-2009-6296 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: MuPDF versions prior to commit 20091125231942 SumatraPDF versions prior to 1.0.1 Description: The issue is related to multiple stack-based buffer overflows in the pdf shade4.c file. These overflows can be triggered by remote attackers via a...

Unfixed XSS vulnerability at www.shade-game.com

Security researcher Pragmatk, has submitted on 23/10/2008 a cross-site-scripting XSS vulnerability affecting www.shade-game.com, which at the time of submission ranked 3459688 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is...