CVE-2017-2481

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

Aviation-Related Phishing Campaigns Seeking Credentials

A wave of email-based phishing campaigns is targeting airline consumers with messages that contain malware that infects systems or links to spoofed airline websites that are personalized to trick victims into handing over personal or business credentials. “Over the past several weeks, we have see...

Analyze Web-based Network Traffic: squidmagic

Analyze Web-based Network Traffic squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control C&C servers and Malicious site, using Squid proxy server and Spamhaus. Install Ubuntu 16.04 Clone this repo & execute the script squidmagic ./install.sh ✓...

Latest Tax Scams Include Phishing Lures, Malware

Microsoft warned Monday this year’s crop of tax scams are using social engineering attacks based on fear to spread Zdowbot and Omaneat banking Trojans and collect personal info via spoofed tax sites linked to from phishing campaigns. The warning comes with less than a month before the April 18 ta...

S2-045 Remote Code Execution Vulnerability in 263 Enterprise Email Sites

263 enterprise mailbox site is an electronic mailbox launched by Beijing 263 Enterprise Communication Co. The 263 enterprise mailbox site uses Apache Struts xwork as the website application framework, the file upload function of the Jakarta plug-in of the framework has a remote command execution...

squidmagic - Analyze a Web-Based Network Traffic to Detect Central Command and Control (C&C) Servers and Malicious Site

squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control C&C servers and Malicious site, using Squid proxy server and Spamhaus. usage squidmagic python squidmagic.py /var/log/squid3/access.log | | | | / |/ | | | | |/ | ' \ / |/ | |/ | \ \ | | || |...

An SSL error has occurred and a secure connection to the server cannot be made.

“An SSL error has occurred and a secure connection to the server cannot be made.” This error was seen when browsing to HTTPS sites with Secure Web over a Full VPN tunnel. HTTP sites loaded correctly...

Thailand Government Sites CMS data.php parameter id SQL injection vulnerability

No description provided by source...

KLA10974 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10973. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

moodle -- multiple vulnerabilities

Marina Glancy reports: In addition to a number of bug fixes and small improvements, security vulnerabilities have been discovered and fixed. We highly recommend that you upgrade your sites as soon as possible. Upgrading should be very straightforward. As per our usual policy, admins of all...

Cross site scripting

IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing CORS, which is a mechanism that allows web sites to request resources from external sites, avoiding the need to duplicate them. IBM Reference : 1999539...

Open redirect

Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the 1 success or 2 failure parameter...

CVE-2017-5571

Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher aka Flex License Manager 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

CVE-2017-5571

Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher aka Flex License Manager 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

CVE-2016-8508

Yandex Browser for desktop before 17.1.1.227 does not show Protect similar to Safebrowsing in Chromium warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site...

CVE-2016-8508

CVE-2016-8508 affects Yandex Browser for desktop prior to 17.1.1.227. The issue is that the browser does not show Protect warnings (analogous to Safebrowsing) for web-sites with certain content-types, which could allow a remote attacker to silence protection warnings on a malicious site. The vuln...

Joomla Civicrm 1.6 SQL Injection

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

Criminals Monetizing Attacks Against Unpatched WordPress Sites

Criminals have inevitably begun to attempt to monetize attacks against WordPress sites still vulnerable to a severe REST API endpoint vulnerability silently patched in the recent 4.7.2 security update. While more than one million websites have been defaced, researchers are now beginning to see so...

DEBIAN-CVE-2017-2363

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...

CVE-2016-7589

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...