Databáze Hot News 2015 July -

Databáze Hot News 2015 July - 2015 January February March April May June July August September October November December

30.7.2015

Bugtraq

[security bulletin] HPSBGN03366 rev.1 - HP Business Process Insight with RC4 Stream Cipher, Remote Disclosure of Information 2015-07-29
security-alert hp com

Cross-Site Scripting (XSS) in qTranslate WordPress Plugin 2015-07-29
High-Tech Bridge Security Research (advisory htbridge ch)

[security bulletin] HPSBGN03367 rev.1 - HP TransactionVision with RC4 Stream Cipher, Remote Disclosure of Information 2015-07-29
security-alert hp com

phpFileManager 0.9.8 CSRF Backdoor Shell Vulnerability 2015-07-29
apparitionsec gmail com

[slackware-security] bind (SSA:2015-209-01) 2015-07-28
Slackware Security Team (security slackware com)

FreeBSD Security Advisory FreeBSD-SA-15:17.bind 2015-07-28
FreeBSD Security Advisories (security-advisories freebsd org)

FreeBSD Security Advisory FreeBSD-SA-15:16.openssh 2015-07-28
FreeBSD Security Advisories (security-advisories freebsd org)

FreeBSD Security Advisory FreeBSD-SA-15:15.tcp 2015-07-28
FreeBSD Security Advisories (security-advisories freebsd org)

FreeBSD Security Advisory FreeBSD-SA-15:14.bsdpatch 2015-07-28
FreeBSD Security Advisories (security-advisories freebsd org)

Malware

TrojanSpy:MSIL/Irstil.A
Worm:Win32/Xtrat.D
Worm:Win32/Xtrat.C
TrojanClicker:Win32/Frosparf.G
TrojanClicker:Win32/Frosparf.F
TrojanDropper:Win32/Zbot.D

Phishing

Verified by	29th July 2015
YOUR VERIFIED BY VISA PASSWORD HAS BEEN DEACTIVATED
NatWest CreditCard	29th July 2015
YOU HAVE ONE SECURITY MESSAGE FROM NATWEST CREDITCARD

Vulnerebility

SANS News

Threatpost

Click-Malware Podvod Šíření přes JavaScript Přílohy

Yahoo touts Úspěch Bug Bounty Programu

Nový Chrome rozšíření pomáhá v boji klávesnice Biometrické profilování

Výzkumníci Manipulovat pušky Precision Cílení System

Exploit

phpFileManager 0.9.8 - CSRF Vulnerability

Tendoo CMS 1.3 - XSS Vulnerabilities

Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution

29.7.2015

Bugtraq

[SECURITY] [DSA 3319-1] bind9 security update 2015-07-28
Salvatore Bonaccorso (carnil debian org)

SEC Consult SA-20150728-0 :: McAfee Application Control Multiple Vulnerabilities 2015-07-28
SEC Consult Vulnerability Lab (research sec-consult com)

Multiple unresolved vulnerabilities in Basware Banking/Maksuliikenne 2015-07-28
Samuel Lavitt - CVE-2015-0942 (CVE-2015-0942 precipice fi)

Malware

TrojanSpy:MSIL/Irstil.A
Worm:Win32/Xtrat.D
Worm:Win32/Xtrat.C
TrojanClicker:Win32/Frosparf.G
TrojanClicker:Win32/Frosparf.F
TrojanDropper:Win32/Zbot.D

Phishing

Lloyds Bank	29th July 2015
Your Llodys Online Account Has Been Blocked
Capital One	28th July 2015
RE: Important Alert
PayPal	28th July 2015
service@paypal.com

Vulnerebility

SANS News

Malicious spam continues to serve zip archives of javascript files

Guest Diary: Xavier Mertens - Integrating VirusTotal within ELK

Android Stagefright multimedia viewer prone to remote exploitation

Threatpost

White House Says No Thanks to Snowden Pardon Petition

Exploit

phpFileManager 0.9.8 - Remote Command Execution Vulnerability

28.7.2015

Bugtraq

Apple iTunes & AppStore - Filter Bypass & Persistent Invoice Vulnerability 2015-07-27
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3318-1] expat security update 2015-07-26
Laszlo Boszormenyi (gcs debian org)

[SECURITY] [DSA 3317-1] lxc security update 2015-07-25
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3316-1] openjdk-7 security update 2015-07-25
Moritz Muehlenhoff (jmm debian org)

Malware

Trojan.Rikamanu

Backdoor.Spedear

W97M.APMP

TrojanDropper:Win32/Zbot.D
Trojan:Win32/Blakamba.gen!A

Phishing

Chase	27th July 2015
PayPal Safety Measures Against Online Fraud!
Chase	27th July 2015
ALERT MESSAGE FROM CHASE ONLINE(SM)

Vulnerebility

SANS News

Angler's best friends

Guest Diary: Xavier Mertens - Integrating VirusTotal within ELK

Threatpost

Valve Patches Password Reset Vulnerability in Steam - See more at: https://threatpost.com/#sthash.hA8elqhb.dpuf

Census Bureau Says Breach Didn’t Compromise Sensitive Data

PHP File Manager Riddled With Vulnerabilities, Including Backdoor

Pair of Bugs Open Honeywell Home Controllers Up to Easy Hacks

Valve Patches Password Reset Vulnerability in Steam

Exploit

Hawkeye-G v3.0.1.4912 Persistent XSS & Information Leakage

WordPress Unite Gallery Lite Plugin 1.4.6 - Multiple Vulnerabilities

WordPress Count Per Day Plugin 3.4 - SQL Injection

Xceedium Xsuite - Multiple Vulnerabilities

Foxit Reader - PNG Conversion Parsing tEXt Chunk Arbitrary Code Execution

Libuser Library - Multiple Vulnerabilities

27.7.2015

Bugtraq

Malware

Worm:Win32/Gamarue.AU

Backdoor:MSIL/Povbop.A
TrojanDownloader:Win32/Codumwis.A

Phishing

Tesco Bank Plc	26th July 2015
YOUR ACCOUNT SECURITY - JULY 2015
Chase	26th July 2015
Online Banking: Reacivate your account
Barclays	25th July 2015
IMPORTANT - ONLINE BANKING UPDATE
Ebay customer service	25th July 2015
PayPal Dispute : Your Paypal payment has been held
PayPal	24th July 2015
service@paypal.com
Service PayPal	24th July 2015
YOUR ACCOUNT HAS BEEN LIMITED WE HEAR FROM YOU

Vulnerebility

SANS News

Angler's best friends

Threatpost

Car Hacking Gets the Attention of Detroit and Washington

Google Helps Lead Effort Against Automated Traffic From Data Centers

Class Action Suit Against Neiman Marcus Over Data Breach Revived

Exploit

25.7.2015

Bugtraq

Hawkeye-G v3 CSRF Vulnerability ***[UPDATED CORRECTED] 2015-07-24
apparitionsec gmail com

[SECURITY] [DSA 3315-1] chromium-browser security update 2015-07-24
Michael Gilbert (mgilbert debian org)

Hawkeye-G v3.0.1.4912 CSRF Vulnerability CVE-2015-2878 2015-07-24
apparitionsec gmail com

[SECURITY] [DSA 3314-1] typo3-src end of life 2015-07-23
Moritz Muehlenhoff (jmm debian org)

Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser 2015-07-23
Qualys Security Advisory (qsa qualys com)

Malware

Phishing

Ebay customer service	25th July 2015
PayPal Dispute : Your Paypal payment has been held
PayPal	24th July 2015
service@paypal.com
Service PayPal	24th July 2015
YOUR ACCOUNT HAS BEEN LIMITED WE HEAR FROM YOU
PayPal	23rd July 2015
LOGIN TO UPDATE YOUR ACCOUNT INFORMATIONS.

Vulnerebility

SANS News

Patching in 2 days? - "tell him he's dreaming"

Threatpost

Stakeholders Argue Against Restrictive Wassennaar Proposal - See more at: https://threatpost.com/#sthash.0U326EDO.dpuf

Zúčastněné strany argumentovat proti omezujících Wassennaar Návrh

Fiat Chrysler připomíná, 1,4 milionů automobilů Po Software Bug je Odhalení

Exploit

Hawkeye-G v3.0.1.4912 CSRF Vulnerability

24.7.2015

Bugtraq

Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser 2015-07-23
Qualys Security Advisory (qsa qualys com)

ThaiWeb CMS 2015Q3 - SQL Injection Web Vulnerability 2015-07-23
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3313-1] linux security update 2015-07-23
Salvatore Bonaccorso (carnil debian org)

Cisco Security Advisory: Cisco IOS Software TFTP Server Denial of Service Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Unified MeetingPlace Unauthorized Password Change Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Application Policy Infrastructure Controller Access Control Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

ESA-2015-118: EMC Avamar Directory Traversal Vulnerability 2015-07-22
Security Alert (Security_Alert emc com)

Multiple (remote and local) Vulnerabilities in Xceedium Xsuite [MZ-15-02] 2015-07-22
modzero (security modzero ch)

Malware

TrojanSpy:MSIL/Tese.A
TrojanSpy:MSIL/Nitwil.A
TrojanDownloader:Win32/Banload.BCM
TrojanDownloader:Win32/Banload.BCL
TrojanDownloader:Win32/Banload.BCH
TrojanDownloader:Win32/Banload.BCA
TrojanSpy:Win32/Bholog.B
Backdoor:Win32/PcClient.CQ
Backdoor:Win32/Zegost.C
Backdoor:Win32/Dodiw.A

Phishing

PayPal	23rd July 2015
LOGIN TO UPDATE YOUR ACCOUNT INFORMATIONS.
PayPal	22nd July 2015
Your PayPal account has been temporarily closed!
PayPal	21st July 2015
Order confirmation:Thank you for your purchase. for security reason update or cancel your verification

Vulnerebility

SANS News

Searching Through the VirusTotal Database

Threatpost

Several Critical Flaws Patched in Drupal Module

WordPress Patches Critical XSS Vulnerability in All Builds

Four Zero Days Disclosed in Internet Explorer Mobile

Bartalex Variants Spotted Dropping Pony, Dyre Malware

Exploit

23.7.2015

Bugtraq

Cisco Security Advisory: Cisco IOS Software TFTP Server Denial of Service Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Unified MeetingPlace Unauthorized Password Change Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Application Policy Infrastructure Controller Access Control Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

ESA-2015-118: EMC Avamar Directory Traversal Vulnerability 2015-07-22
Security Alert (Security_Alert emc com)

Multiple (remote and local) Vulnerabilities in Xceedium Xsuite [MZ-15-02] 2015-07-22
modzero (security modzero ch)

Multiple XSS Vulnerabilities in Paid Memberships Pro WordPress Plugin 2015-07-22
High-Tech Bridge Security Research (advisory htbridge ch)

SQL Injection in Count Per Day WordPress Plugin 2015-07-22
High-Tech Bridge Security Research (advisory htbridge ch)

[SECURITY] [DSA 3312-1] cacti security update 2015-07-22
Alessandro Ghedini (ghedo debian org)

NetCracker Resource Management 8.0 - SQL Injection Vulnerability 2015-07-22
jychia sec gmail com

NetCracker Resource Management 8.0 - XSS Vulnerability 2015-07-22
jychia sec gmail com

Open-Web-Analytics-1.5.7 Cryptographic, Password Disclosure & XSS Vulnerabilities 2015-07-22
apparitionsec gmail com

FreeBSD Security Advisory FreeBSD-SA-15:13.tcp 2015-07-22
FreeBSD Security Advisories (security-advisories freebsd org)

Malware

TrojanDownloader:Win32/Banload.BCM
TrojanDownloader:Win32/Banload.BCL
TrojanDownloader:Win32/Banload.BCH
TrojanDownloader:Win32/Banload.BCA
TrojanSpy:Win32/Bholog.B
Backdoor:Win32/PcClient.CQ
Backdoor:Win32/Zegost.C
Backdoor:Win32/Dodiw.A
TrojanSpy:MSIL/Grelog.A
PWS:Win32/Zbot!VM

Phishing

PayPal	23rd July 2015
LOGIN TO UPDATE YOUR ACCOUNT INFORMATIONS.
PayPal	22nd July 2015
Your PayPal account has been temporarily closed!

Vulnerebility

SANS News

Some more 0-days from ZDI

Threatpost

Exploit

OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation

Counter-Strike 1.6 'GameInfo' Query Reflection DoS PoC

22.7.2015

Bugtraq

WorldCIST'2016 - Brazil: Call for Workshops Proposals - Best Papers published by ISI/SCI Journals 2015-07-21
Maria Lemos (marialemos72 gmail com)

CVE-2015-5379: Axigen XSS vulnerability for html attachments 2015-07-21
Ioan Indreias (ioan indreias axigen com)

[security bulletin] HPSBMU03380 rev.1 - HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabilities 2015-07-20
security-alert hp com

Malware

Backdoor:Win32/Dodiw.A
TrojanSpy:MSIL/Grelog.A
PWS:Win32/Zbot!VM
TrojanDownloader:MSIL/Bassit.A
Backdoor:Win32/Venik.L
TrojanProxy:MSIL/Mictanort.A
TrojanSpy:Win32/Flancos.A
TrojanProxy:Win32/Mediana
TrojanDownloader:Win32/Mytonel.D
Backdoor:Win32/Chaapt.A

Phishing

PayPal	21st July 2015
Order confirmation:Thank you for your purchase. for security reason update or cancel your verification
H0rnyBuddyAlert	21st July 2015
NEW FIND F#CKFRIENDS ALERT
Natwest Bank	21st July 2015
Natwest Bank Alert: Unauthorised Access
Support-TeamÂ™	21st July 2015
[ WARNING ] CONFIRM YOU ACCOUNT PAYPAL OUR NEW SYSTEM ,
PayPal	21st July 2015
YOUR ACCOUNT PAYPAL IS LIMITED YOU HAVE TO SOLVE THE PROBLEM IN 24 HOURS !
Barclays Online	21st July 2015
Access to your Barclays accounts has been temporarily suspended.

Vulnerebility

SANS News

Bartalex malspam pushing Pony/Dyre

Searching Through the VirusTotal Database

Exploit

SysAid Help Desk 'rdslogs' Arbitrary File Upload

Internet Download Manager - OLE Automation Array Remote Code Execution

Joomla! Helpdesk Pro Plugin < 1.4.0 - Multiple Vulnerabilities

win32/xp[TR] sp3 MessageBox - 24Bytes

21.7.2015

Bugtraq

[security bulletin] HPSBMU03377 rev.1 - HP Release Control running RC4, Remote Disclosure of Information 2015-07-20
security-alert hp com

[security bulletin] HPSBUX03379 SSRT101976 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) 2015-07-20
security-alert hp com

[SECURITY] [DSA 3311-1] mariadb-10.0 security update 2015-07-20
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3310-1] freexl security update 2015-07-19
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3309-1] tidy security update 2015-07-18
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3308-1] mysql-5.5 security update 2015-07-18
Salvatore Bonaccorso (carnil debian org)

Malware

TrojanSpy:Win32/BrobanMos.A
TrojanDownloader:Win32/Banload.BBL
TrojanDownloader:Win32/Banload.BBN
TrojanDownloader:Win32/Banload.BBM
Adware:MSIL/Bawswerps
TrojanSpy:MSIL/Keylogger.BP
TrojanDownloader:Win32/Inexsmar.A
TrojanSpy:Win32/Aneatop.A
TrojanDropper:MSIL/Golbla.C
TrojanDownloader:Win32/Nefhop.A

Phishing

Vulnerebility

SANS News

Special Microsoft Bulletin Patching Remote Code Execution Flaw in OpenType Font Drivers

Exploit

Microsoft Word Local Machine Zone Remote Code Execution Vulnerability

TcpDump rpki_rtr_pdu_print Out-of-Bounds Denial of Service

20.7.2015

Bugtraq

AirDroid ID - Client Side JSONP Callback Vulnerability 2015-07-17
Vulnerability Lab (research vulnerability-lab com)

FoxyCart Bug Bounty #1 - Filter Bypass & Persistent Vulnerability 2015-07-17
Vulnerability Lab (research vulnerability-lab com)

UDID+ v2.5 iOS - Mail Command Inject Vulnerability 2015-07-17
Vulnerability Lab (research vulnerability-lab com)

Oracle E-Business Suite Servlet URL Redirection Vulnerability 2015-07-17
owais md khan gmail com

Novell GroupWise 2014 WebAccess vulnerable to XSS attacks 2015-07-17
adrian vollmer syss de

Malware

JS/Exploit.Agent.NJY

VBA/TrojanDownloader.Agent.WJ

VBA/TrojanDownloader.Agent.WR

Phishing

METROBANKDIRECT	19th July 2015
Account Blocked
Navy Federal	19th July 2015
Security Preferences

Vulnerebility

SANS News

Autoruns and VirusTotal

Sigcheck and VirusTotal

The Value a "Fresh Set Of Eyes" (FSOE)

Exploit

19.7.2015

Bugtraq

Oracle E-Business Suite Servlet URL Redirection Vulnerability 2015-07-17
owais md khan gmail com

Novell GroupWise 2014 WebAccess vulnerable to XSS attacks 2015-07-17
adrian vollmer syss de

SEC Consult SA-20150716-0 :: Permanent Cross-Site Scripting in Oracle Application Express 2015-07-16
SEC Consult Vulnerability Lab (research sec-consult com)

Elasticsearch CVE-2015-5531 2015-07-16
Kevin Kluge (kevin elastic co)

Elasticsearch CVE-2015-5377 2015-07-16
Kevin Kluge (kevin elastic co)

Malware

Phishing

Dropbox	18th July 2015
IMPORTANT DROPBOX DOCUMENT ENCLOSED
LateNightFriend	18th July 2015
HUNGRY FOR A F&CK FRIEND
USAA	17th July 2015
YOUR USAA ONLINE CONFIRMATION ALERT

Vulnerebility

SANS News

Exploit

18.7.2015

Bugtraq

Oracle E-Business Suite Servlet URL Redirection Vulnerability 2015-07-17
owais md khan gmail com

Novell GroupWise 2014 WebAccess vulnerable to XSS attacks 2015-07-17
adrian vollmer syss de

SEC Consult SA-20150716-0 :: Permanent Cross-Site Scripting in Oracle Application Express 2015-07-16
SEC Consult Vulnerability Lab (research sec-consult com)

Elasticsearch CVE-2015-5531 2015-07-16
Kevin Kluge (kevin elastic co)

Elasticsearch CVE-2015-5377 2015-07-16
Kevin Kluge (kevin elastic co)

ESA-2015-123: EMC Documentum WebTop Open Redirect Vulnerability 2015-07-16
Security Alert (Security_Alert emc com)

ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability 2015-07-16
Security Alert (Security_Alert emc com)

[CVE-2015-3253] Apache Groovy Zero-Day Vulnerability Disclosure 2015-07-16
CÃ©dric Champeau (cedric champeau gmail com)

Malware

Phishing

USAA	17th July 2015
YOUR USAA ONLINE CONFIRMATION ALERT
Royal Bank Support	17th July 2015
ROYAL BANK \| PLEASE UPDATE YOUR RBC ACOUNT INFORMATION .

Vulnerebility

SANS News

Exploit

D-Link Cookie Command Execution

WordPress BuddyPress Activity Plus Plugin 1.5 - CSRF Vulnerability

17.7.2015

Bugtraq

SEC Consult SA-20150716-0 :: Permanent Cross-Site Scripting in Oracle Application Express 2015-07-16
SEC Consult Vulnerability Lab (research sec-consult com)

Elasticsearch CVE-2015-5531 2015-07-16
Kevin Kluge (kevin elastic co)

Elasticsearch CVE-2015-5377 2015-07-16
Kevin Kluge (kevin elastic co)

ESA-2015-123: EMC Documentum WebTop Open Redirect Vulnerability 2015-07-16
Security Alert (Security_Alert emc com)

ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability 2015-07-16
Security Alert (Security_Alert emc com)

[CVE-2015-3253] Apache Groovy Zero-Day Vulnerability Disclosure 2015-07-16
CÃ©dric Champeau (cedric champeau gmail com)

Malware

TrojanDownloader:Win32/Upatre.BR
TrojanDropper:Win32/Plimrost.A
TrojanProxy:Win32/Poindampa.A
TrojanDropper:AutoIt/Jenxcus
Backdoor:Win32/Zegost.DV
TrojanDownloader:Win32/Zegost.C
Worm:Win32/Imafly.B
TrojanDownloader:MSIL/Prardrukat.A
Backdoor:Win32/Venik.I
Backdoor:Win32/Venik.J

Phishing

Metrobankdirect	16th July 2015
Account Blocked

Vulnerebility

SANS News

Exploit

15 TOTOLINK Router Models - Multiple RCE Vulnerabilities

4 TOTOLINK Router Models - CSRF and XSS Vulnerabilities

4 TOTOLINK Router Models - Backdoor Credentials

8 TOTOLINK Router Models - Backdoor and RCE

16.7.2015

Bugtraq

Backdoor credentials found in 4 TOTOLINK router models 2015-07-15
Pierre Kim (pierre kim sec gmail com)

4 TOTOLINK router models vulnerable to CSRF and XSS attacks 2015-07-15
Pierre Kim (pierre kim sec gmail com)

15 TOTOLINK router models vulnerable to multiple RCEs 2015-07-15
Pierre Kim (pierre kim sec gmail com)

Cisco Security Advisory: Cisco Videoscape Delivery System Denial of Service Vulnerability 2015-07-15
Cisco Systems Product Security Incident Response Team (psirt cisco com)

XSS, Code Execution, DOS, Password Leak, Weak Authentication in GetSimpleCMS 3.3.5 2015-07-15
Tim Coen (tc coen gmail com)

XSS vulnerability in OFBiz forms 2015-07-15
lilian_iatco yahoo com

Malware

TrojanDownloader:MSIL/Prardrukat.A
Backdoor:Win32/Venik.I
Backdoor:Win32/Venik.J

Phishing

Lloyds Bank	15th July 2015
UPDATE NOTICE
Storage Limit	15th July 2015
howiem@bigfoot.com Mailbox Exceeded Limit,Verify Your Password

Vulnerebility

SANS News

After Flash, what will exploit kits focus on next?

Exploit

Kaseya Virtual System Administrator - Multiple Vulnerabilities

Joomla DOCman Component - Multiple Vulnerabilities

15.7.2015

Bugtraq

Malware

TrojanDropper:MSIL/Golbla.B
VirTool:MSIL/Injector.EW
TrojanSpy:Win32/Nivdort.BO
TrojanSpy:Win32/Nivdort.BN
Trojan:Win32/Kovter.C!reg
TrojanSpy:Win32/Bradop.E
TrojanDownloader:Win32/Travalork.A
TrojanSpy:Win32/Bradop.G
Trojan:Win32/Apmit.A!plock
Trojan:Win32/Banload.E

Phishing

Storage Limit	15th July 2015
howiem@bigfoot.com Mailbox Exceeded Limit,Verify Your Password

Vulnerebility

SANS News

July 2015 Microsoft Patch Tuesday

Adobe Updates Flash Player, Shockwave and PDF Reader

PHP 5.x Security Updates

freq.py super powers?

VMware Security Bulletins

OPENSSL update fixes Certificate Verification issue

Cisco PSIRT reporting Customers affected by ASA VPN DoS attacks

Detecting Random - Finding Algorithmically chosen DNS names (DGA)

SSL, SSL - Where Art Thou SSL?

BizCN gate actor changes from Fiesta to Nuclear exploit kit

Working with base64

A .BUP File Is An OLE File

Analyzing Quarantine Files

Another example of Angler exploit kit pushing CryptoWall 3.0

Apple "Patch Tuesday"

Exploit

Impero Education Pro - SYSTEM Remote Command Execution

Pimcore CMS Build 3450 - Directory Traversal

Internet Download Manager - (.ief) Crash PoC

Internet Download Manager - (Find Download) Crash PoC

ZOC Terminal Emulator 7 - (Quick Connection) Crash PoC

14.7.2015

Bugtraq

CFP: Passwords 2015, Dec 7-9, Cambridge, UK 2015-07-10
Per Thorsheim (per thorsheim net)

CVE-2015-4670 - AjaxControlToolkit File Upload Directory Traversal 2015-07-13
Brian Cardinale (brian cardinaleconsulting com)

[SYSS-2015-031] sysPass - SQL Injection 2015-07-13
disclosure syss de

phpSQLiteCMS CSRF, Unrestricted File Type Upload, Privilege Escalation & XSS CSRF, Unrestricted File Type Upload, Privilege Escalation & XSS 2015-07-13
apparitionsec gmail com

[slackware-security] mozilla-thunderbird (SSA:2015-192-01) 2015-07-12
Slackware Security Team (security slackware com)

SQL Injection, Reflected XSS, Path Traversal, Function Execution in ZenPhoto 1.4.8 2015-07-10
Tim Coen (tc coen gmail com)

[security bulletin] HPSBGN03373 rev.1 - HP Release Control running TLS, Remote Disclosure of Information 2015-07-10
security-alert hp com

Cisco Security Advisory: OpenSSL Alternative Chains Certificate Forgery Vulnerability (July 2015) Affecting Cisco Products 2015-07-10
Cisco Systems Product Security Incident Response Team (psirt cisco com)

ESA-2015-115: EMC RecoverPoint for Virtual Machines (VMs) Restriction Bypass Vulnerability 2015-07-10
Security Alert (Security_Alert emc com)

CVE-2014-7952, Android ADB backup APK injection vulnerability 2015-07-10
Imre RAD (imre rad search-lab hu)

[security bulletin] HPSBGN03351 rev.2 - HP IceWall SSO Dfw, SSO Certd, MCRP, and Federation Agent running OpenSSL, Remote Disclosure of Information 2015-07-10
security-alert hp com

[security bulletin] HPSBGN03371 rev.1 - HP IceWall Products running OpenSSL, Remote Denial of Service (DoS) 2015-07-10
security-alert hp com

NEW VMSA-2015-0005 : VMware Workstation, Player and Horizon View Client for Windows updates address a host privilege escalation vulnerability 2015-07-10
VMware Security Response Center (security vmware com)

[SECURITY] [DSA 3307-1] pdns-recursor security update 2015-07-09
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3306-1] pdns security update 2015-07-09
Alessandro Ghedini (ghedo debian org)

[slackware-security] openssl (SSA:2015-190-01) 2015-07-09
Slackware Security Team (security slackware com)

FreeBSD Security Advisory FreeBSD-SA-15:12.openssl 2015-07-09
FreeBSD Security Advisories (security-advisories freebsd org)

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software 2015-07-09
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Extra information for CVE-2014-2513 - EMC Documentum Content Server: arbitrary code execution 2015-07-08
andrew panfilov tel

[SECURITY] [DSA 3305-1] python-django security update 2015-07-08
Alessandro Ghedini (ghedo debian org)

[CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection 2015-07-08
CORE Advisories Team (advisories coresecurity com)

[security bulletin] HPSBUX03363 rev.1 - HP-UX Apache Web Server running OpenSSL, Remote Disclosure of Information 2015-07-08
security-alert hp com

Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution 2015-07-08
hdau deloitte fr

SQL Injection in easy2map-photos wordpress plugin v1.09 2015-07-08
Larry W. Cashdollar (larry0 me com)

Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5 2015-07-08
Larry W. Cashdollar (larry0 me com)

Symantec EP 12.1.4013 Disabling Vulnerability 2015-07-08
apparitionsec gmail com

[slackware-security] bind (SSA:2015-188-04) 2015-07-08
Slackware Security Team (security slackware com)

[slackware-security] ntp (SSA:2015-188-03) 2015-07-08
Slackware Security Team (security slackware com)

[slackware-security] cups (SSA:2015-188-01) 2015-07-08
Slackware Security Team (security slackware com)

[slackware-security] mozilla-firefox (SSA:2015-188-02) 2015-07-08
Slackware Security Team (security slackware com)

Malware

Phishing

USAA	14th July 2015
New Message From Usaa Bank
Paypal service	12th July 2015
YOUR ACCOUNT WILL BE LIMITED
Mail User	11th July 2015
INCOMING EMAILS
Virgin Money UK	11th July 2015
VIRGIN E-MAIL ALERT !
PayPal	11th July 2015
WE'RE INVESTIGATING A PAYPAI PAYMENT REVERSAI (CASE ID #PP-003-498-237-832)
Chase	10th July 2015
ACTION NEEDED: ONLINE BANKING ALERT!?

Vulnerebility

SANS News

Jump List Files Are OLE Files

Exploit

Accellion FTA getStatus verify_oauth_token Command Execution

VNC Keyboard Remote Code Execution

Adobe Flash opaqueBackground Use After Free

Western Digital Arkeia Remote Code Execution

phpSQLiteCMS - Multiple Vulnerabilities

FreiChat 9.6 - SQL Injection

Arab Portal 3 - SQL Injection Vulnerability

phpVibe - Aribtrary File Disclosure ArticleFR 3.0.6 - Multiple Vulnerabilities

WordPress Swim Team Plugin 1.44.10777 - Arbitrary File Download

ZenPhoto 1.4.8 - Multiple Vulnerabilities

Full Player 8.2.1 - Memory Corruption PoC

2.7.2015

Bugtraq

iTunes 12.2 and QuickTime 7.7.7 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:\Program Files\... 2015-07-01
Stefan Kanthak (stefan kanthak nexgo de)

Exploit Code for ipTIME firmwares < 9.58 (root RCE against 127 router models) 2015-07-01
Pierre Kim (pierre kim sec gmail com)

ESA-2015-112: EMC Isilon OneFS Command Injection Vulnerability 2015-07-01
Security Alert (Security_Alert emc com)

Path Traversal in BlackCat CMS 2015-07-01
High-Tech Bridge Security Research (advisory htbridge ch)

Blueberry Express v5.9.x - SEH Buffer Overflow Vulnerability 2015-07-01
Vulnerability Lab (research vulnerability-lab com)

ESA-2015-108: EMC Documentum D2 Multiple DQL Injection Vulnerabilities 2015-07-01
Security Alert (Security_Alert emc com)

ESA-2015-111: EMC Documentum WebTop Client Products Multiple Vulnerabilities 2015-07-01
Security Alert (Security_Alert emc com)

FCS Scanner v1.0 & v1.4 - Command Inject Vulnerability 2015-07-01
Vulnerability Lab (research vulnerability-lab com)

Ebay Magento Bug Bounty #14 - Persistent Description Vulnerability 2015-07-01
Vulnerability Lab (research vulnerability-lab com)

Pinterest Bug Bounty #1 - Persistent contact_name Vulnerability 2015-07-01
Vulnerability Lab (research vulnerability-lab com)

Extra information for CVE-2014-4626 - EMC Documentum Content Server: authenticated user is able to elevate privileges, hijack Content Server filesystem, execute arbitrary commands by creating malicious dm_job objects 2015-07-01

Malware

Infostealer.Bancos.BE

W97M.Downloader.E

W97M.Downloader.D

W97M.Downloader.C

Phishing

Apple	1st July 2015
[ APPLE ] : VIEW YOUR RECENT SECURITY-ACCOUNT
Mail User	30th June 2015
INCOMING MAIL
iTunes	30th June 2015
ITUNES ACCOUNT HAS BEEN FROZEN ID1381A4C512582B66FF55
Dear Valued Member	30th June 2015
WARNINGS!!
Mr. Martin	30th June 2015
APPROVED PAYMENT.
Microsoft	29th June 2015
You just need to confirm your billing address.

Vulnerebility

Exploit

D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities

McAfee SiteAdvisor 3.7.2 (firefox) Use After Free PoC

1.7.2015

Bugtraq

APPLE-SA-2015-06-30-3 Mac EFI Security Update 2015-001 2015-06-30
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-06-30-4 Safari 8.0.7, Safari 7.1.7, and Safari 6.2.7 2015-06-30
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005 2015-06-30
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-06-30-1 iOS 8.4 2015-06-30
Apple Product Security (product-security-noreply lists apple com)

Google Chrome Address Spoofing (Request For Comment) 2015-06-30
David Leo (david leo deusen co uk)

CVE-2015-4674 - TimeDoctor autoupdate over plain-HTTP 2015-06-29
Fernando MuÃ±oz (fernando null-life com)

Malware

Trojan:Win32/Lodbak

Boot.Pitou

Trojan.Pitou

Phishing

Mail User	30th June 2015
INCOMING MAIL
iTunes	30th June 2015
ITUNES ACCOUNT HAS BEEN FROZEN ID1381A4C512582B66FF55
Dear Valued Member	30th June 2015
WARNINGS!
Mr. Martin	30th June 2015
APPROVED PAYMENT.
Microsoft	29th June 2015
You just need to confirm your billing address.

Vulnerebility

Exploit