January 22, 2018 – Morning Cyber Coffee Headlines – “NFL” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 22, 2018 - Headlines Carbon Black in the News: Strategic Cyber Ventures...

About the security content of macOS High Sierra 10.13.2 Supplemental Update - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Many high-risk SVGA code execution vulnerability bug,VMware efforts to be patched-vulnerabilities and early warning-the black bar safety net

VMware this week announced a patch to fix a number of vulnerabilities flaws bug, contains a major vulnerability flaws bugs, exploits flaws bug touches the product containing ESXi, vCenter Server, Workstation and Fusion. This is the major vulnerability flaws bug number for CVE-2017-4924, which is ...

www3.thomas.edu XSS vulnerability

Open Bug Bounty ID: OBB-298140 Description| Value ---|--- Affected Website:| www3.thomas.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

custominteriorsbythomas.com XSS vulnerability

Vulnerable URL: http://custominteriorsbythomas.com/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

mytmc.thomasmore.edu XSS vulnerability

Vulnerable URL: https://mytmc.thomasmore.edu/ICS/Admissions/?tool=search=%22%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Media - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-044

This module provides intuitive ways to manage large libraries of media, insert or display or import various types of media either through fields or a wysiwyg interface. Versions of this module prior to 7.x-2.1 or 7.x-3.0-alpha5 did not sufficiently whitelist input parameters for the media browser...

thomasoppermann.de XSS vulnerability

Vulnerable URL: http://www.thomasoppermann.de/suche.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5607741 VIP website status:| No Check...

thomas-mahlberg.de XSS vulnerability

Vulnerable URL: http://www.thomas-mahlberg.de/index.php Details: Description| Value ---|--- Patched:| Yes, at 26.04.2017 Latest check for patch:| 26.04.2017 10:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Cris Thomas on Cyberwar Rhetoric

Cris Thomas of Tenable Networks, aka Space Rogue of the L0pht, talks to Mike Mimoso during RSA Conference about the rhetoric and hype surrounding cyberwar, as well as a quick trip down memory lane with the L0pht and its famous 1998 testimony before Congress. Download:...

[SECURITY] [DSA 3784-1] viewvc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3784-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 09, 2017 https://www.debian.org/security/faq -...

OpenLucius - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-004

OpenLucius is a work management platform for social communication, documentation, and projects. The distribution doesn't sufficiently use tokens when marking messages for users as read thereby exposing a Cross Site Request Forgery CSRF vulnerability. The distribution does not sufficiently filter...

thomascook.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-184958 Security Researcher tbm Helped patch 2374 vulnerabilities Received 6 Coordinated Disclosure badges Received 6 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting thomascook.com website and its...

BREAKING! Another NSA Contractor Arrested For Stealing 'Secret' Documents

Another Edward Snowden? The FBI has secretly busted another National Security Agency NSA contractor over a massive secret data theft. The United States Justice Department charged Harold Thomas Martin, 51, with theft of highly classified government material, including "source codes" developed by t...

Missing CRL sanity check

This issue only affects OpenSSL 1.0.2i, released on 22nd September 2016. A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0 but was omitted from OpenSSL 1.0.2i. As a result any attempt to use CRLs in OpenSSL 1.0.2i will crash with a null pointer exception...

notes.de.thomascook.com XSS vulnerability

Vulnerable URL: https://notes.de.thomascook.com/fb-db/finance/runz.nsf/webAnmeldung?OpenForm=ES=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.08.2016 Latest check for patch:| 19.08.2016 13:59 GMT Vulnerability type:| XSS Vulnerability...

alpha.thomascook.com XSS vulnerability

Vulnerable URL: http://alpha.thomascook.com/travel-money/buy-australian-dollars/?dbTrail==%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 20:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cruise.thomascook.com XSS vulnerability

Vulnerable URL: https://cruise.thomascook.com/emailus.rvlx?message=%3C/select%3E%3Cbody/onpageshow=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 11.10.2016 Latest check for patch:| 11.10.2016 13:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

thomascook.com XSS vulnerability

Vulnerable URL: http://www.thomascook.com/tv/category/featured-destinations/canary-islands/?orderby=comment=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 05.08.2016 Latest check for patch:| 05.08.2016 11:42 GMT Vulnerability type:| XSS...