6707 matches found
Design/Logic Flaw
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory...
CVE-2014-2095
Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is not used, allows local users to gain privileges via a Trojan horse bin/catfish.pyc under the current working directory...
UBUNTU-CVE-2014-2096
Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory...
CVE-2014-2095
Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is not used, allows local users to gain privileges via a Trojan horse bin/catfish.pyc under the current working directory...
CVE-2014-2093
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory...
CVE-2014-2094
Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory...
CVE-2014-2096
CVE-2014-2096: Untrusted search path vulnerability in Catfish (versions 0.6.0–1.0.0) allows local privilege escalation via a Trojan horse bin/catfish.py in the current working directory. Several advisories confirm the issue and provide fixes/recommend upgrading: Mageia MGASA-2014-0342 and Gentoo ...
CVE-2014-2094
Catfish contains an untrusted search path vulnerability affecting versions up to 0.4.0.3, where local users can gain privileges via a Trojan horse catfish.pyc in the current working directory when a Fedora package like 0.4.0.2-2 is not used. Multiple linked advisories (OSV/Ubuntu/NVD/Gentoo GLSA)...
CVE-2014-2095
CVE-2014-2095 affects Catfish 0.6.0–1.0.0. The class of vulnerability is an untrusted search path that enables local privilege escalation when a Trojan horse bin/catfish.pyc in the current working directory is executed, if the Fedora package (e.g., 0.8.2-1) is not used. Multiple sources (NVD/NIDS...
Caphaw Banking Malware Distributed via YouTube Ads
More than one billion of unique visitor spend about 6 billion hours on YouTube to watch videos, according to monthly YouTube Stats. Security researchers from Bromium Labs recently found that YouTube advertising network has been abused by rogue advertisers to distribute malware. YouTube In-Stream...
CVE-2014-0819
Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...
Design/Logic Flaw
Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...
Design/Logic Flaw
Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...
CVE-2014-0819
Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...
CVE-2014-0819
CVE-2014-0819 affects Autodesk AutoCAD prior to 2014. The vulnerability is an insecure DLL search path: a Trojan DLL placed in the current working directory can be loaded, enabling local privilege escalation/arbitrary code execution. Affected products: AutoCAD 2013 and earlier. Root cause: untrus...
Android iBanking Trojan Source Code Leaked Online
Smartphone is the need of everyone today and so the first target of most of the Cyber Criminals. Malware authors are getting to know their market and are changing their way of operations. Since last year we have seen a rise in the number of hackers moving from the Blackhat into the Greyhat. The...
Emergency Adobe Flash Update Handles Zero Day Under Attack
Adobe rushed out an unscheduled Flash Player update today to counter exploits of a zero-day vulnerability in the software. A number of national security, foreign policy and public policy websites are hosting exploits that redirect to espionage malware, including the Peter G. Peterson Institute fo...
ZeuS Trojan variant Targets Salesforce accounts and SaaS Applications
Zeus, a financially aimed Banking Trojan that comes in many different forms and flavors, is capable to steal users' online-banking credentials once installed. This time, an infamous Zeus Trojan has turned out to be a more sophisticated piece of malware that uses web-crawling action. Instead of...
New IE Zero Day Found Targeting Military Intelligence
Attackers were able to compromise the U.S. Veterans of Foreign Wars’ website this week and serve up a previously unknown zero day exploit in Internet Explorer 10, and while motivation behind the campaign is still unclear, experts are speculating its aim was to procure military intelligence...