Threat Outbreak Alert RuleID25413: Email Messages Distributing Malicious Software on October 4, 2016

Medium Alert ID: 49181 First Published: 2016 October 4 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25413 may contain the following files: Name |...

ManageEngine Applications Manager Build 12700 - Multiple Vulnerabilities

SPSA-2016-02/ManageEngine ApplicationsManager------------------------------ SECURITY ADVISORY: SPSA-2016-02/ManageEngine Applications Manager Build No: 12700 Affected Software: ManageEngine Applications Manager Build No: 12700 Vulnerability: Information Disclosure and Un-Authenticated SQL...

ManageEngine Applications Manager Build 12700 - Multiple Vulnerabilities

Exploit for jsp platform in category web applications Affected Software: ManageEngine Applications Manager Build No: 12700 Vulnerability: Information Disclosure and Un-Authenticated SQL injection. CVSSv3: 9.3 Severity: Critical Release Date: 2016-05-05 I. Background ManageEngine Applications...

ManageEngine Applications Manager Build 12700 - Multiple Vulnerabilities

ManageEngine Applications Manager Build 12700 - Multiple Vulnerabilities SPSA-2016-02/ManageEngine ApplicationsManager------------------------------ SECURITY ADVISORY: SPSA-2016-02/ManageEngine Applications Manager Build No: 12700 Affected Software: ManageEngine Applications Manager Build No: 127...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Multiple Security Updates (CTX206001)

A number of vulnerabilities have been identified in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that could allow a malicious, unprivileged user to perform privileged operations or execute commands. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions mig...

Wikileak's Julian Assange Could Be Set Free On Friday by United Nation

The decision of the United Nations investigation into the Julian Assange case is set to be revealed and could order the release of Wikileaks founder on February 5. "BREAKING: UN set to announce decision on Assange's release on Friday,"BREAKING: UN set to announce decision on Assange's release on...

un.org XSS vulnerability

Vulnerable URL: http://www.un.org/zh/documents/viewdoc.asp?url=javascript:alert%28/XSSPOSED/%29 Details: Description| Value ---|--- Patched:| Yes, at 18.04.2017 Latest check for patch:| 18.04.2017 17:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2680 Google...

parcelmotel.com XSS vulnerability

Vulnerable URL: http://www.parcelmotel.com/site-scripts/un-ban-me.php?typ=rec=/about-us/"=http://www.parcelmotel.com Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 113797 Google...

D-Link DGL5500 - HNAP Buffer Overflow

D-Link DGL5500 - HNAP Buffer Overflow Advisory Information Title: DGL5500 Un-Authenticated Buffer overflow in HNAP functionality Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor...

Oracle: Security Advisory (ELSA-2015-0674)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3014)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3014 advisory. - kvm: fix excessive pages un-pinning in kvmiommumap error path. Quentin Casasnovas Orabug: 20687314 CVE-2014-3601 CVE-2014-8369 CVE-2014-3601 -...

Unbreakable Enterprise kernel security update

2.6.39-400.248.3 - kvm: fix excessive pages un-pinning in kvmiommumap error path. Quentin Casasnovas Orabug: 20687314 CVE-2014-3601 CVE-2014-8369 CVE-2014-3601 - Revert 'mm: Fix NULL pointer dereference in madviseMADVWILLNEED support' Guangyu Sun Orabug: 20673281 CVE-2014-8173 2.6.39-400.248.2 -...

kernel security and bug fix update

2.6.32-504.12.2 - infiniband core: Prevent integer overflow in ibumemget address arithmetic Doug Ledford 1181173 1179327 CVE-2014-8159 2.6.32-504.12.1 - fs splice: perform generic write checks Eric Sandeen 1163798 1155900 CVE-2014-7822 2.6.32-504.11.1 - virt kvm: excessive pages un-pinning in...

N.Korea' Kim Jong Un Cartoon Appears on The Pirate Bay, HACKED or SneakyHINT?

Surprisingly, from yesterday a cartoon picture of the supreme leader of the Democratic People's Republic of Korea North Korea named Kim Jong-un appearing on The Pirate Bay website’s homepage, but WHY? At the beginning of this month, The Pirate Bay — an infamous Torrent website predominantly used ...

CVE-2014-7339

The CVE-2014-7339 entry concerns the Android application Cuanto Conoces A un Amigo (com.makeitpossible.CuantoConocesAunAmigo) version 2.0. The connected records indicate the issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof se...

Apache <= 2.0.45 APR Remote Exploit -Apache-Knacker.pl

No description provided by source. !/usr/bin/perl Apache 2.0.37 - 2.0.45 APR Exploit Written By Matthew Murphy This Perl script will successfully exploit any un-patched Apache 2.x servers. Base64 Encoder If you want authentication with the server via HTTP's lame Basic auth, put the proper string ...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:3.14.5-alt2

1:3.14.5-alt2 built June 6, 2014 Anton V. Boyarshinov in task 121000 --- June 5, 2014 Anton V. Boyarshinov - Fixes CVE-2014-3153...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:3.13.6-alt2

1:3.13.6-alt2 built March 21, 2014 Anton V. Boyarshinov in task 116742 --- March 20, 2014 Anton V. Boyarshinov - CVE-2014-2523 fixed...

[Blackhash] Audit Passwords Without Hashes

A traditional password audit typically involves extracting password hashes from systems and then sending those hashes to a third-party security auditor or an in-house security team. These security specialists have the knowledge and tools to effectively audit password hashes. They use password...

SkyBlueCanvas CMS 1.1 r248-03 Command Injection

Vulnerability in SkyBlueCanvas CMS Vulnerability Type: Remote Command Injection Version Affected: 1.1 r248-03 and probably prior versions Discovered by: Scott Parish - Center for Internet Security Vendor Information: SkyBlueCanvas is an easy-to-use Web Content Management System, that makes it...