Databáze Hot News 2017 November - 2017 January February March April May June July August September October November December


30.11.2017

Bugtraq

Advisory - Hipchat Data Center, Hipchat Server - CVE-2017-14585 2017-11-29
Matthew Hart (mhart atlassian com)

Advisory - Remote code execution in HipChat for Mac desktop client - CVE-2017-14586 2017-11-29
Matthew Hart (mhart atlassian com)

[SECURITY] [DSA 4050-1] xen security update 2017-11-28
Moritz Muehlenhoff (jmm debian org)

Edward Snowden free speech at JBFone - Data Security & Privacy 2017-11-23
Vulnerability Lab (research vulnerability-lab com)

Malware

MSIL/Filecoder.Fantom.A

Win32/Agent.YJF

Win32/Filecoder.Fantom.A

Win32/KillWin.NCI

Win32/Patpoopy.D

Phishing

 

Vulnerebility

Cisco WebEx Network Recording Player CVE-2017-12360 Denial of Service Vulnerability
2017-11-30
http://www.securityfocus.com/bid/102001

Cisco Email Security Appliance CVE-2017-12353 Remote Security Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/102002

cURL/libcURL CVE-2017-8816 Buffer Overflow Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101998

Cisco WebEx Meetings Server CVE-2017-12363 Remote Security Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/102000

Cisco WebEx Event Center CVE-2017-12365 Information Disclosure Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101999

EMC ScaleIO CVE-2017-8001 Local Information Disclosure Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101997

Cisco Data Center Network Manager Multiple Remote Security Vulnerabilities
2017-11-30
http://www.securityfocus.com/bid/101996

EMC ScaleIO CVE-2017-8020 Buffer Overflow Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101995

Cisco Application Policy Infrastructure Controller Local Command Injection and Privilege Escalation
2017-11-30
http://www.securityfocus.com/bid/101993

EMC ScaleIO CVE-2017-8019 Denial of Service Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101991

Cisco Jabber for Windows CVE-2017-12361 Local Information Disclosure Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101994Mozilla Firefox Prior to 57 Multiple Security Vulnerabilities
2017-11-30
http://www.securityfocus.com/bid/101832

Apple macOS CVE-2017-13872 Authentication Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101981

Cisco IOS XR Software CVE-2017-12355 Denial of Service Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101989

Cisco Unified Communications Manager CVE-2017-12357 Cross Site Scripting Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101988

Cisco Meeting Server CVE-2017-12362 Denial of Service Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101987

Cisco Secure Access Control System CVE-2017-12354 Information Disclosure Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101986Cisco WebEx Meeting Center CVE-2017-12297 URL Redirection Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101985

Cisco WebEx Meeting Center CVE-2017-12366 Cross Site Scripting Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101984

PowerDNS Authoritative Server Module Multiple Security Vulnerabilities
2017-11-30
http://www.securityfocus.com/bid/101982

OpenEMR CVE-2017-16540 Remote Privilege Escalation Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101983

Apple macOS CVE-2017-13872 Authentication Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101981

EMC RSA Authentication Agent for Web: Apache Web Server Authentication Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101980

Multiple EMC RSA products CVE-2017-14378 Authentication Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101979

Ethicon Endo-Surgery Generator G11 CVE-2017-14018 Local Authentication Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101978

Multiple Siemens SCALANCE Products Multiple Security Vulnerabilities
2017-11-30
http://www.securityfocus.com/bid/101977

IBM Rational Rhapsody Design Manager CVE-2017-1240 Information Disclosure Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101976

QEMU 'b/nbd/server.c' Stack Buffer Overflow Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101975

IBM Workload Scheduler CVE-2017-1716 Local Information Disclosure Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101974

Polycom HDX Endpoints Remote Code Execution Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101973

Cloud Foundry cf-deployment CVE-2017-14390 Multiple Security Vulnerabilities
2017-11-30
http://www.securityfocus.com/bid/101972

Red Hat OpenStack Platform CVE-2017-15114 Privilege Escalation Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101971

Multiple Cloud Foundry Products CVE-2017-8031 Denial of Service Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101967

OpenSSL CVE-2015-3196 Denial of Service Vulnerability
2017-11-30
http://www.securityfocus.com/bid/78622

OpenSSL CVE-2015-3197 Security Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/82237

OpenSSL CVE-2015-3193 Information Disclosure Vulnerability
2017-11-30
http://www.securityfocus.com/bid/78705

OpenSSL CVE-2015-3194 Denial of Service Vulnerability
2017-11-30
http://www.securityfocus.com/bid/78623

OpenSSL CVE-2015-3195 Information Disclosure Vulnerability
2017-11-30
http://www.securityfocus.com/bid/78626

Linux Kernel 'mm/pagewalk.c' Local Information Disclosure Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101969

Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101757

McAfee Network Security Manager CVE-2016-8029 Remote Authorization Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101970

Multiple TP-Link Routers CVE-2017-16957 Command Injection Vulnerability
2017-11-30
http://www.securityfocus.com/bid/101968

libxml2 CVE-2016-1762 Multiple Memory Corruption Vulnerabilities
2017-11-30
http://www.securityfocus.com/bid/85059

Libxml2 'xmlLoadEntityContent()' Function CVE-2016-4449 Security Bypass Vulnerability
2017-11-30
http://www.securityfocus.com/bid/90865

Libxml2 CVE-2016-4448 Remote Format String Vulnerability
2017-11-30
http://www.securityfocus.com/bid/90856

Apple Mac OS X APPLE-SA-2016-05-16-4 Multiple Security Vulnerabilities
2017-11-30
http://www.securityfocus.com/bid/90696

Libxml2 'xmlParseName' CVE-2016-4447 Remote Denial of Service Vulnerability
2017-11-30
http://www.securityfocus.com/bid/90864

SANS News

More Malspam pushing Emotet malware

Threatpost

Critical Apple Login Bug Puts macOS High Sierra Systems at Risk

Exploint

macOS High Sierra - Root Privilege Escalation (Metasploit)

Linux Kernel - 'The Huge Dirty Cow' Overwriting The Huge Zero Page

QEMU - NBD Server Long Export Name Stack Buffer Overflow

29.11.2017

Bugtraq

 

Malware

Exp.CVE-2017-16415

Exp.CVE-2017-16392

Exp.CVE-2017-16375

Exp.CVE-2017-16389

Exp.CVE-2017-16390

Exp.CVE-2017-16373

RANSOM_CRYPTOQKG.A

Phishing

 

Vulnerebility

IBM Rational Rhapsody Design Manager CVE-2017-1240 Information Disclosure Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101976

QEMU 'b/nbd/server.c' Stack Buffer Overflow Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101975

IBM Workload Scheduler CVE-2017-1716 Local Information Disclosure Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101974

Polycom HDX Endpoints Remote Code Execution Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101973

Cloud Foundry cf-deployment CVE-2017-14390 Multiple Security Vulnerabilities
2017-11-29
http://www.securityfocus.com/bid/101972

Red Hat OpenStack Platform CVE-2017-15114 Privilege Escalation Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101971

Multiple Cloud Foundry Products CVE-2017-8031 Denial of Service Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101967

OpenSSL CVE-2015-3196 Denial of Service Vulnerability
2017-11-29
http://www.securityfocus.com/bid/78622

OpenSSL CVE-2015-3197 Security Bypass Vulnerability
2017-11-29
http://www.securityfocus.com/bid/82237

OpenSSL CVE-2015-3193 Information Disclosure Vulnerability
2017-11-29
http://www.securityfocus.com/bid/78705

OpenSSL CVE-2015-3194 Denial of Service Vulnerability
2017-11-29
http://www.securityfocus.com/bid/78623

OpenSSL CVE-2015-3195 Information Disclosure Vulnerability
2017-11-29
http://www.securityfocus.com/bid/78626

Linux Kernel 'mm/pagewalk.c' Local Information Disclosure Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101969

Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101757

McAfee Network Security Manager CVE-2016-8029 Remote Authorization Bypass Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101970

Multiple TP-Link Routers CVE-2017-16957 Command Injection Vulnerability
2017-11-29
http://www.securityfocus.com/bid/101968

libxml2 CVE-2016-1762 Multiple Memory Corruption Vulnerabilities
2017-11-29
http://www.securityfocus.com/bid/85059

Libxml2 'xmlLoadEntityContent()' Function CVE-2016-4449 Security Bypass Vulnerability
2017-11-29
http://www.securityfocus.com/bid/90865

Libxml2 CVE-2016-4448 Remote Format String Vulnerability
2017-11-29
http://www.securityfocus.com/bid/90856

Apple Mac OS X APPLE-SA-2016-05-16-4 Multiple Security Vulnerabilities
2017-11-29
http://www.securityfocus.com/bid/90696

Libxml2 'xmlParseName' CVE-2016-4447 Remote Denial of Service Vulnerability
2017-11-29
http://www.securityfocus.com/bid/90864

Apple Mac OS X/watchOS/iOS/tvOS Multiple Security Vulnerabilities
2017-11-29
http://www.securityfocus.com/bid/90691

libxml2 CVE-2016-3705 Stack Buffer Overflow Vulnerability
2017-11-29
http://www.securityfocus.com/bid/89854

NTP CVE-2016-7433 Local Denial of Service Vulnerability
2017-11-29
http://www.securityfocus.com/bid/94455

NTP CVE-2016-7429 Local Denial of Service Vulnerability
2017-11-29
http://www.securityfocus.com/bid/94453

Libxml2 'malloc.c' CVE-2016-3627 Denial of Service Vulnerability
2017-11-29
http://www.securityfocus.com/bid/84992

OpenSSL CVE-2016-7055 Denial of Service Vulnerability
2017-11-29
http://www.securityfocus.com/bid/94242

Linux Kernel CVE-2016-5195 Local Privilege Escalation Vulnerability
2017-11-29
http://www.securityfocus.com/bid/93793

OpenSSL CVE-2017-3732 Information Disclosure Vulnerability
2017-11-29
http://www.securityfocus.com/bid/95814

OpenSSL CVE-2016-7052 Denial of Service Vulnerability
2017-11-29
http://www.securityfocus.com/bid/93171

SANS News

Apple High Sierra Uses a Passwordless Root Account

Fileless Malicious PowerShell Sample

Threatpost

Leaky AWS Storage Bucket Spills Military Secrets, Again

Google Detects and Boots Tizi Spyware Off Google Play

Critical Apple Login Bug Puts macOS High Sierra Systems at Risk

Exploint

Synology StorageManager 5.2 - Remote Root Command Execution

Android Gmail < 7.11.5.176568039 - Directory Traversal in Attachment Download

pfSense - Authenticated Group Member RCE (Metasploit)

Microsoft Windows 10 Creators Update (version 1703) (x86) - 'WARBIRD'...

28.11.2017

Bugtraq

 

Malware

 

Phishing

 

Vulnerebility

libxml2 CVE-2016-1762 Multiple Memory Corruption Vulnerabilities
2017-11-28
http://www.securityfocus.com/bid/85059

Libxml2 'xmlLoadEntityContent()' Function CVE-2016-4449 Security Bypass Vulnerability
2017-11-28
http://www.securityfocus.com/bid/90865

Libxml2 CVE-2016-4448 Remote Format String Vulnerability
2017-11-28
http://www.securityfocus.com/bid/90856

Apple Mac OS X APPLE-SA-2016-05-16-4 Multiple Security Vulnerabilities
2017-11-28
http://www.securityfocus.com/bid/90696

Libxml2 'xmlParseName' CVE-2016-4447 Remote Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/90864

Apple Mac OS X/watchOS/iOS/tvOS Multiple Security Vulnerabilities
2017-11-28
http://www.securityfocus.com/bid/90691

libxml2 CVE-2016-3705 Stack Buffer Overflow Vulnerability
2017-11-28
http://www.securityfocus.com/bid/89854

NTP CVE-2016-7433 Local Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/94455

NTP CVE-2016-7429 Local Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/94453

Libxml2 'malloc.c' CVE-2016-3627 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/84992

OpenSSL CVE-2016-7055 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/94242

Linux Kernel CVE-2016-5195 Local Privilege Escalation Vulnerability
2017-11-28
http://www.securityfocus.com/bid/93793

OpenSSL CVE-2017-3732 Information Disclosure Vulnerability
2017-11-28
http://www.securityfocus.com/bid/95814

OpenSSL CVE-2016-7052 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/93171

OpenSSL CVE-2016-6306 Local Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/93153OpenSSL CVE-2016-6304 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/93150

OpenSSL CVE-2016-6303 Integer Overflow Vulnerability
2017-11-28
http://www.securityfocus.com/bid/92984

OpenSSL CVE-2016-6302 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/92628

OpenSSL 'BN_bn2dec()' Function Out of Bounds Write Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/92557

OpenSSL CVE-2016-2181 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/92982

OpenSSL CVE-2016-2180 Local Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/92117

OpenSSL CVE-2016-2179 Multiple Denial of Service Vulnerabilities
2017-11-28
http://www.securityfocus.com/bid/92987

OpenSSL CVE-2016-2178 Side Channel Attack Information Disclosure Vulnerability
2017-11-28
http://www.securityfocus.com/bid/91081

OpenSSL CVE-2016-2177 Integer Overflow Vulnerability
2017-11-28
http://www.securityfocus.com/bid/91319

OpenSSH PAM Support Multiple Remote Code Execution Vulnerabilities
2017-11-28
http://www.securityfocus.com/bid/76317

MOXA EDS-G512E CVE-2017-13701 Information Disclosure Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101966

Multiple Siemens Products CVE-2017-12741 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101964

Huawei UMA CVE-2017-8122 Local Privilege Escalation Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101961

Huawei Smart Phones CVE-2017-8205 Integer Overflow Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101963

Huawei Smart Phones CVE-2017-8204 Buffer Overflow Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101962

Multiple HP Products CVE-2017-2750 DLL Signature Validation Remote Code Execution Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101965

Samba CVE-2017-9461 Remote Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/99455

Huawei Smart Phones CVE-2017-8203 Remote Code Execution Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101960

Huawei Smart Phones CVE-2017-8202 Buffer Overflow Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101959

TYPO3 restler Component Arbitrary File Disclosure Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101958

Drupal Custom Permissions Module DRUPAL-SA-CONTRIB-2017-083 Access Bypass Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101957

Huawei Smart Phones CVE-2017-8179 Local Privilege Escalation Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101956

Linux Kernel CVE-2017-16939 Local Privilege Escalation Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101954

Fortinet FortiOS CVE-2017-14186 URI Redirection and Cross Site Scripting Vulnerabilities
2017-11-28
http://www.securityfocus.com/bid/101955

Fortinet FortiWebManager CVE-2017-14189 Security Bypass Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101953

Multiple Huawei Products CVE-2017-8201 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101952

Multiple Huawei Products CVE-2017-8199 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101951

OpenStack Nova CVE-2017-16239 Security Bypass Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101950

Multiple Huawei Products CVE-2017-8200 Denial of Service Vulnerability
2017-11-28
http://www.securityfocus.com/bid/101948

PostgreSQL CVE-2017-12172 Remote Privilege Escalation Vulnerabilities
2017-11-28
http://www.securityfocus.com/bid/101949

SANS News

 

Threatpost

Imgur Confirms 2014 Breach of 1.7 Million User Accounts

Newly Published Exploit Code Used to Spread Mirai Variant

HP to Patch Bug Impacting 50 Enterprise Printer Models

Exploint

Android Gmail < 7.11.5.176568039 - Directory Traversal in Attachment Download

ZTE ZXDSL 831CII - Improper Access Restrictions

Diving Log 6.0 - XML External Entity Injection

27.11.2017

Bugtraq

 

Malware

Exp.CVE-2017-16393

Phishing

 

Vulnerebility

Huawei Smart Phones CVE-2017-8202 Buffer Overflow Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101959

TYPO3 restler Component Arbitrary File Disclosure Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101958

Drupal Custom Permissions Module DRUPAL-SA-CONTRIB-2017-083 Access Bypass Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101957

Huawei Smart Phones CVE-2017-8179 Local Privilege Escalation Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101956

Linux Kernel CVE-2017-16939 Local Privilege Escalation Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101954

Fortinet FortiOS CVE-2017-14186 URI Redirection and Cross Site Scripting Vulnerabilities
2017-11-27
http://www.securityfocus.com/bid/101955

Fortinet FortiWebManager CVE-2017-14189 Security Bypass Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101953

Multiple Huawei Products CVE-2017-8201 Denial of Service Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101952

Multiple Huawei Products CVE-2017-8199 Denial of Service Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101951

OpenStack Nova CVE-2017-16239 Security Bypass Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101950

Multiple Huawei Products CVE-2017-8200 Denial of Service Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101948

PostgreSQL CVE-2017-12172 Remote Privilege Escalation Vulnerabilities
2017-11-27
http://www.securityfocus.com/bid/101949

Atlassian Hipchat for Mac CVE-2017-14586 Remote Code Execution Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101947

Jenkins Favorite Plugin CVE-2017-1000243 Security Bypass Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101946

Atlassian Hipchat Server and Data Center CVE-2017-14585 Remote Code Execution Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101945

Jenkins Favorite Plugin CVE-2017-1000244 Cross Site Request Forgery Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101943

HP Integrated Lights-Out and Moonshot RCA Unspecified Information Disclosure Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101944

GNU Binutils 'readelf.c' Heap Buffer Overflow Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101941

Jenkins Git Client Plugin CVE-2017-1000242 Insecure Temporary File Creation Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101940

Joomla! 'com_tag' Component CVE-2017-15946 SQL Injection Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101942

IBM OpenPages GRC Platform CVE-2017-1300 Cross Site Request Forgery Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101939

HP Matrix Operating Environment HPESBMU03795 Multiple Remote Security Vulnerabilities
2017-11-27
http://www.securityfocus.com/bid/101938

Google Android Local Privilege Escalation Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101937

PHPMailer 'code_generator.php' Cross Site Scripting Vulnerability
2017-11-27
http://www.securityfocus.com/bid/99293

TYPO3 Formhandler Extension Cross Site Scripting Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101935

TYPO3 Recommend Page Extension Cross Site Scripting Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101936

oVirt Engine CVE-2017-15113 Debug Logging Information Disclosure Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101933

Cisco Web Security Appliance CVE-2017-12303 Remote Security Bypass Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101932

libbpg 'cudata.cpp' Null Pointer Dereference Denial of Service Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101929

Cisco Identity Services Engine CVE-2017-12316 Brute Force Authentication Bypass Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101931Mozilla Firefox Prior to 57 Multiple Security Vulnerabilities
2017-11-27
http://www.securityfocus.com/bid/101832

Cisco Registered Envelope Service Multiple Cross Site Scripting Vulnerabilities
2017-11-27
http://www.securityfocus.com/bid/101863

Cisco Network Academy Packet Tracer DLL Loading Local Privilege Escalation Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101858

Cisco Meeting Server H.264 Decoding CVE-2017-12311 Denial of Service Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101855

FreeBSD CVE-2017-1088 Local Information Disclosure Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101857

Cisco RF Gateway 1 CVE-2017-12318 Denial of Service Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101854

Cisco Unified Communications Manager CVE-2017-12302 SQL Injection Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101853

Philips IntelliSpace Cardiovascular and Xcelera CVE-2017-14111 Information Disclosure Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101850

Oracle Tuxedo CVE-2017-10266 Remote Security Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101852

Vir.IT Explorer Anti-Virus CVE-2017-16237 Local Privilege Escalation Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101851

Drupal Permissions by Term Module Access Bypass Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101833

WPA2 Key Reinstallation Multiple Security Weaknesses
2017-11-27
http://www.securityfocus.com/bid/101274

CA Identity Governance CVE-2017-9394 HTML Injection Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101849

Linux Kernel 'drivers/media/usb/dvb-usb/dib0700_devices.c' Local Denial of Service Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101846

SAP ERP Multiple Unspecified Security Vulnerabilities
2017-11-27
http://www.securityfocus.com/bid/101848

Debian Postgresql-common CVE-2017-8806 Multiple Insecure Temporary File Handling Vulnerabilities
2017-11-27
http://www.securityfocus.com/bid/101810

SAP HANA Information Disclosure Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101847

SAP Landscape Management Information Disclosure Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101845

Apache Sling Servlets Post CVE-2017-11296 Cross Site Scripting Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101844

SAP GUI for HTML Cross Site Scripting Vulnerability
2017-11-27
http://www.securityfocus.com/bid/100788

Adobe Experience Manager CVE-2017-3111 Information Disclosure Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101843

Linux Kernel 'drivers/media/usb/hdpvr/hdpvr-core.c' Local Denial of Service Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101842

Microsoft Edge Scripting Engine CVE-2017-11841 Remote Memory Corruption Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101733

Oracle Tuxedo CVE-2017-10269 Remote Security Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101841

Oracle Fusion Middleware CVE-2017-10151 Remote Security Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101619

Microsoft Edge Scripting Engine CVE-2017-11862 Remote Memory Corruption Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101724

Adobe Digital Editions APSB17-39 Multiple Information Disclosure Vulnerabilities
2017-11-27
http://www.securityfocus.com/bid/101839

SAP Composite Application Framework Authorization Tool XML External Entity Injection Vulnerability
2017-11-27
http://www.securityfocus.com/bid/97576

Adobe InDesign CVE-2017-11302 Memory Corruption Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101840

Adobe Experience Manager CVE-2017-3109 Cross Site Scripting Vulnerability
2017-11-27
http://www.securityfocus.com/bid/101834

SANS News

9 Fast and Easy Ways To Lose Your Crypto Coins

Threatpost

 

Exploint

Microsoft Edge Chakra JIT - 'BailOutOnTaggedValue' Bailouts Type Confusion

Microsoft Edge Chakra JIT - 'Inline::InlineCallApplyTarget_Shared' does not Return the...

Microsoft Edge Chakra JIT - Incorrect Function Declaration Scope

Microsoft Edge Chakra JIT - 'GlobOpt::OptTagChecks' Must Consider IsLoopPrePass Properly

Exim 4.89 - 'BDAT' Denial of Service

25.11.2017

Bugtraq

 

Malware

 

Phishing

 

Vulnerebility

Huawei Smart Phones CVE-2017-8179 Local Privilege Escalation Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101956

Linux Kernel CVE-2017-16939 Local Privilege Escalation Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101954

Fortinet FortiOS CVE-2017-14186 URI Redirection and Cross Site Scripting Vulnerabilities
2017-11-26
http://www.securityfocus.com/bid/101955

Fortinet FortiWebManager CVE-2017-14189 Security Bypass Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101953

Multiple Huawei Products CVE-2017-8201 Denial of Service Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101952

Multiple Huawei Products CVE-2017-8199 Denial of Service Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101951

OpenStack Nova CVE-2017-16239 Security Bypass Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101950

Multiple Huawei Products CVE-2017-8200 Denial of Service Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101948

PostgreSQL CVE-2017-12172 Remote Privilege Escalation Vulnerabilities
2017-11-26
http://www.securityfocus.com/bid/101949

Atlassian Hipchat for Mac CVE-2017-14586 Remote Code Execution Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101947

Jenkins Favorite Plugin CVE-2017-1000243 Security Bypass Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101946

Atlassian Hipchat Server and Data Center CVE-2017-14585 Remote Code Execution Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101945

Jenkins Favorite Plugin CVE-2017-1000244 Cross Site Request Forgery Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101943

HP Integrated Lights-Out and Moonshot RCA Unspecified Information Disclosure Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101944

GNU Binutils 'readelf.c' Heap Buffer Overflow Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101941

Jenkins Git Client Plugin CVE-2017-1000242 Insecure Temporary File Creation Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101940

Joomla! 'com_tag' Component CVE-2017-15946 SQL Injection Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101942

IBM OpenPages GRC Platform CVE-2017-1300 Cross Site Request Forgery Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101939

HP Matrix Operating Environment HPESBMU03795 Multiple Remote Security Vulnerabilities
2017-11-26
http://www.securityfocus.com/bid/101938

Google Android Local Privilege Escalation Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101937

PHPMailer 'code_generator.php' Cross Site Scripting Vulnerability
2017-11-26
http://www.securityfocus.com/bid/99293

TYPO3 Formhandler Extension Cross Site Scripting Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101935

TYPO3 Recommend Page Extension Cross Site Scripting Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101936

oVirt Engine CVE-2017-15113 Debug Logging Information Disclosure Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101933

Cisco Web Security Appliance CVE-2017-12303 Remote Security Bypass Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101932

libbpg 'cudata.cpp' Null Pointer Dereference Denial of Service Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101929

Cisco Identity Services Engine CVE-2017-12316 Brute Force Authentication Bypass Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101931

Cisco Immunet Antimalware CVE-2017-12312 DLL Loading Local Privilege Escalation Vulnerability
2017-11-26
http://www.securityfocus.com/bid/101930

Intel Manageability Engine CVE-2017-5708 Multiple Local Privilege Escalation Vulnerabilities
2017-11-26
http://www.securityfocus.com/bid/101921

Cisco Email Security Appliance CVE-2017-12309 HTTP Response Splitting Vulnerability
2017-11-26
http://www.securityfocus.com/bid/10192

Huawei Smart Phones CVE-2017-8179 Local Privilege Escalation Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101956

Linux Kernel CVE-2017-16939 Local Privilege Escalation Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101954

Fortinet FortiOS CVE-2017-14186 URI Redirection and Cross Site Scripting Vulnerabilities
2017-11-25
http://www.securityfocus.com/bid/101955

Fortinet FortiWebManager CVE-2017-14189 Security Bypass Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101953

Multiple Huawei Products CVE-2017-8201 Denial of Service Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101952

Multiple Huawei Products CVE-2017-8199 Denial of Service Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101951

OpenStack Nova CVE-2017-16239 Security Bypass Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101950

Multiple Huawei Products CVE-2017-8200 Denial of Service Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101948

PostgreSQL CVE-2017-12172 Remote Privilege Escalation Vulnerabilities
2017-11-25
http://www.securityfocus.com/bid/101949

Atlassian Hipchat for Mac CVE-2017-14586 Remote Code Execution Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101947

Jenkins Favorite Plugin CVE-2017-1000243 Security Bypass Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101946

Atlassian Hipchat Server and Data Center CVE-2017-14585 Remote Code Execution Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101945

Jenkins Favorite Plugin CVE-2017-1000244 Cross Site Request Forgery Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101943

HP Integrated Lights-Out and Moonshot RCA Unspecified Information Disclosure Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101944

GNU Binutils 'readelf.c' Heap Buffer Overflow Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101941

Jenkins Git Client Plugin CVE-2017-1000242 Insecure Temporary File Creation Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101940

Joomla! 'com_tag' Component CVE-2017-15946 SQL Injection Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101942

IBM OpenPages GRC Platform CVE-2017-1300 Cross Site Request Forgery Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101939

HP Matrix Operating Environment HPESBMU03795 Multiple Remote Security Vulnerabilities
2017-11-25
http://www.securityfocus.com/bid/101938

Google Android Local Privilege Escalation Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101937

PHPMailer 'code_generator.php' Cross Site Scripting Vulnerability
2017-11-25
http://www.securityfocus.com/bid/99293

TYPO3 Formhandler Extension Cross Site Scripting Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101935

TYPO3 Recommend Page Extension Cross Site Scripting Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101936

oVirt Engine CVE-2017-15113 Debug Logging Information Disclosure Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101933

Cisco Web Security Appliance CVE-2017-12303 Remote Security Bypass Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101932

libbpg 'cudata.cpp' Null Pointer Dereference Denial of Service Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101929

Cisco Identity Services Engine CVE-2017-12316 Brute Force Authentication Bypass Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101931

Cisco Immunet Antimalware CVE-2017-12312 DLL Loading Local Privilege Escalation Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101930

Intel Manageability Engine CVE-2017-5708 Multiple Local Privilege Escalation Vulnerabilities
2017-11-25
http://www.securityfocus.com/bid/101921

Cisco Email Security Appliance CVE-2017-12309 HTTP Response Splitting Vulnerability
2017-11-25
http://www.securityfocus.com/bid/101928

SANS News

Exim Remote Code Exploit

Benefits associated with the use of Open Source Software

Threatpost

SAML Post-Intrusion Attack Mirrors ‘Golden Ticket’

Exploint

Linux - 'mincore()' Uninitialized Kernel Heap Page Disclosure

ALLPlayer 7.5 - Local Buffer Overflow (SEH Unicode)

24.11.2017

Bugtraq

Edward Snowden free speech at JBFone - Data Security & Privacy 2017-11-23
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 4046-1] libspring-ldap-java security update 2017-11-22
Sebastien Delafond (seb debian org)

[SECURITY] [DSA 4045-1] vlc security update 2017-11-21
Moritz Muehlenhoff (jmm debian org)

CSNC-2017-029 MyTy Blind SQL Injection 2017-11-21
Advisories (advisories compass-security com)

Malware

 

Phishing

service

23rd November 2017

Warning : Unusual activities
on your PayPal account

service

23rd November 2017

[Support Inc] : Your paypal
account has benn limited!

Natwest

23rd November 2017

Security Update

btinternet

23rd November 2017

Your btinternet account
settings are out of date.

Vulnerebility

Atlassian Hipchat for Mac CVE-2017-14586 Remote Code Execution Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101947

Jenkins Favorite Plugin CVE-2017-1000243 Security Bypass Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101946

Atlassian Hipchat Server and Data Center CVE-2017-14585 Remote Code Execution Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101945

Jenkins Favorite Plugin CVE-2017-1000244 Cross Site Request Forgery Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101943

HP Integrated Lights-Out and Moonshot RCA Unspecified Information Disclosure Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101944

GNU Binutils 'readelf.c' Heap Buffer Overflow Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101941

Jenkins Git Client Plugin CVE-2017-1000242 Insecure Temporary File Creation Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101940

Joomla! 'com_tag' Component CVE-2017-15946 SQL Injection Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101942

IBM OpenPages GRC Platform CVE-2017-1300 Cross Site Request Forgery Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101939

HP Matrix Operating Environment HPESBMU03795 Multiple Remote Security Vulnerabilities
2017-11-24
http://www.securityfocus.com/bid/101938

Google Android Local Privilege Escalation Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101937

PHPMailer 'code_generator.php' Cross Site Scripting Vulnerability
2017-11-24
http://www.securityfocus.com/bid/99293

TYPO3 Formhandler Extension Cross Site Scripting Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101935

TYPO3 Recommend Page Extension Cross Site Scripting Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101936

oVirt Engine CVE-2017-15113 Debug Logging Information Disclosure Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101933

Cisco Web Security Appliance CVE-2017-12303 Remote Security Bypass Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101932

libbpg 'cudata.cpp' Null Pointer Dereference Denial of Service Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101929

Cisco Identity Services Engine CVE-2017-12316 Brute Force Authentication Bypass Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101931

Cisco Immunet Antimalware CVE-2017-12312 DLL Loading Local Privilege Escalation Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101930

Intel Manageability Engine CVE-2017-5708 Multiple Local Privilege Escalation Vulnerabilities
2017-11-24
http://www.securityfocus.com/bid/101921

Cisco Email Security Appliance CVE-2017-12309 HTTP Response Splitting Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101928

Jenkins Delivery Pipeline Plugin CVE-2017-1000404 Cross Site Scripting Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101927

Intel Trusted Execution Engine CVE-2017-5710 Multiple Local Privilege Escalation Vulnerabilities
2017-11-24
http://www.securityfocus.com/bid/101922

OpenStack Swauth CVE-2017-16613 Authentication Bypass Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101926

Intel Manageability Engine CVE-2017-5712 Remote Buffer Overflow Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101920

EMC RSA Authentication Manager CVE-2017-14379 HTML Injection Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101925

OpenSSH 'sftp-server.c' Remote Security Bypass Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101552

FFmpeg CVE-2017-16840 Multiple Denial of Service Vulnerabilities
2017-11-24
http://www.securityfocus.com/bid/101924

QEMU 'hw/input/ps2.c' Information Disclosure Vulnerability
2017-11-24
http://www.securityfocus.com/bid/101923

Intel Trusted Execution Engine CVE-2017-5707 Multiple Local Buffer Overflow Vulnerabilities
2017-11-24
http://www.securityfocus.com/bid/101919

SANS News

 

Threatpost

 

Exploint

 

23.11.2017

Bugtraq

[SECURITY] [DSA 4046-1] libspring-ldap-java security update 2017-11-22
Sebastien Delafond (seb debian org)

[SECURITY] [DSA 4045-1] vlc security update 2017-11-21
Moritz Muehlenhoff (jmm debian org)

CSNC-2017-029 MyTy Blind SQL Injection 2017-11-21
Advisories (advisories compass-security com)

Malware

Exp.CVE-2017-11882

Win32/Agent.NDM

Exp.CVE-2017-16383

Exp.CVE-2017-16381

Exp.CVE-2017-16384

Phishing

btinternet

23rd November 2017

Your btinternet account
settings are out of date.

Vulnerebility

GNU Binutils 'readelf.c' Heap Buffer Overflow Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101941

Jenkins Git Client Plugin CVE-2017-1000242 Insecure Temporary File Creation Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101940

Joomla! 'com_tag' Component CVE-2017-15946 SQL Injection Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101942

IBM OpenPages GRC Platform CVE-2017-1300 Cross Site Request Forgery Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101939

HP Matrix Operating Environment HPESBMU03795 Multiple Remote Security Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101938

Google Android Local Privilege Escalation Vulnerability

PHPMailer 'code_generator.php' Cross Site Scripting Vulnerability
2017-11-23
http://www.securityfocus.com/bid/99293

TYPO3 Formhandler Extension Cross Site Scripting Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101935

TYPO3 Recommend Page Extension Cross Site Scripting Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101936

oVirt Engine CVE-2017-15113 Debug Logging Information Disclosure Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101933

Cisco Web Security Appliance CVE-2017-12303 Remote Security Bypass Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101932

libbpg 'cudata.cpp' Null Pointer Dereference Denial of Service Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101929

Cisco Identity Services Engine CVE-2017-12316 Brute Force Authentication Bypass Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101931

Cisco Immunet Antimalware CVE-2017-12312 DLL Loading Local Privilege Escalation Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101930

Intel Manageability Engine CVE-2017-5708 Multiple Local Privilege Escalation Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101921

Cisco Email Security Appliance CVE-2017-12309 HTTP Response Splitting Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101928

Jenkins Delivery Pipeline Plugin CVE-2017-1000404 Cross Site Scripting Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101927

Intel Trusted Execution Engine CVE-2017-5710 Multiple Local Privilege Escalation Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101922

OpenStack Swauth CVE-2017-16613 Authentication Bypass Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101926

Intel Manageability Engine CVE-2017-5712 Remote Buffer Overflow Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101920

EMC RSA Authentication Manager CVE-2017-14379 HTML Injection Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101925

OpenSSH 'sftp-server.c' Remote Security Bypass Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101552

FFmpeg CVE-2017-16840 Multiple Denial of Service Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101924

QEMU 'hw/input/ps2.c' Information Disclosure Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101923

Intel Trusted Execution Engine CVE-2017-5707 Multiple Local Buffer Overflow Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101919

Multiple Oracle Server Products Multiple Local Security Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101906

Intel Manageability Engine CVE-2017-5711 Multiple Local Buffer Overflow Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101918

Intel Manageability Engine CVE-2017-5705 Multiple Local Buffer Overflow Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101917

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
2017-11-23
http://www.securityfocus.com/bid/36935

Fortinet Fortiweb CVE-2017-7736 HTML Injection Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101916

TYPO3 T3Blog Extbase Extension Cross Site Scripting Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101913

Cisco ASA Next-Generation Firewall Services CVE-2017-12299 Remote Security Bypass Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101915

WPA2 Key Reinstallation Multiple Security Weaknesses
2017-11-23
http://www.securityfocus.com/bid/101274

Cisco Spark Board CVE-2017-12306 Local Security Bypass Vulnerability
2017-11-23
http://www.securityfocus.com/bid/101914

Magento Multiple Security Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101912

Linux kernel 'block/bio.c' Multiple Local Information Disclosure Vulnerabilities
2017-11-23
http://www.securityfocus.com/bid/101911

SANS News

Proactive Malicious Domain Search

Threatpost

HP to Patch Bug Impacting 50 Enterprise Printer Models

Exploint

WebKit - 'WebCore::FormSubmission::create' Use-After-Free

WebKit - 'WebCore::RenderObject::previousSibling' Use-After-Free

WebKit - 'WebCore::DocumentLoader::frameLoader' Use-After-Free

WebKit - 'WebCore::Style::TreeResolver::styleForElement' Use-After-Free

WebKit - 'WebCore::SVGPatternElement::collectPatternAttributes' Out-of-Bounds Read

WebKit - 'WebCore::SimpleLineLayout::RunResolver::runForPoint' Out-of-Bounds Read

WebKit - 'WebCore::RenderText::localCaretRect' Out-of-Bounds Read

22.11.2017

Bugtraq

[SECURITY] [DSA 4045-1] vlc security update 2017-11-21
Moritz Muehlenhoff (jmm debian org)

CSNC-2017-029 MyTy Blind SQL Injection 2017-11-21
Advisories (advisories compass-security com)

[security bulletin] HPESBHF03798 rev.1 - HPE Proliant Gen10 Servers, DL20 Gen9, ML30 Gen9 and Certain Apollo Servers Using Intel Server Platform Service (SPS) v4.0, Local Denial of Service and Execution of Arbitrary Code 2017-11-21
security-alert hpe com

Secunia Research: Oracle Outside In Denial of Service Vulnerability 2017-11-21
Secunia Research (remove-vuln secunia com)

[SECURITY] [DSA 4044-1] swauth security update 2017-11-21
Yves-Alexis Perez (corsac debian org)

CSNC-2017-030 MyTy Reflected Cross-Site Scripting (XSS) 2017-11-21
Advisories (advisories compass-security com)

FreeBSD Security Advisory FreeBSD-SA-17:10.kldstat [REVISED] 2017-11-21
FreeBSD Security Advisories (security-advisories freebsd org)

[CVE-2017-15044] DocuWare FullText Search - Incorrect Access Control vulnerability 2017-11-20
Graham Leggett (minfrin sharp fm)

Malware

MSH.Pushbank

Win32/TrojanDownloader.Tovkater.HB

Win32/Tapaoux.O
Android.Doublehidden

Phishing

 

Vulnerebility

Cisco Identity Services Engine CVE-2017-12316 Brute Force Authentication Bypass Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101931

Cisco Immunet Antimalware CVE-2017-12312 DLL Loading Local Privilege Escalation Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101930

Intel Manageability Engine CVE-2017-5708 Multiple Local Privilege Escalation Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101921

Cisco Email Security Appliance CVE-2017-12309 HTTP Response Splitting Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101928

Jenkins Delivery Pipeline Plugin CVE-2017-1000404 Cross Site Scripting Vulnerability

Intel Trusted Execution Engine CVE-2017-5710 Multiple Local Privilege Escalation Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101922

OpenStack Swauth CVE-2017-16613 Authentication Bypass Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101926

Intel Manageability Engine CVE-2017-5712 Remote Buffer Overflow Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101920

EMC RSA Authentication Manager CVE-2017-14379 HTML Injection Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101925

OpenSSH 'sftp-server.c' Remote Security Bypass Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101552

FFmpeg CVE-2017-16840 Multiple Denial of Service Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101924

QEMU 'hw/input/ps2.c' Information Disclosure Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101923

Intel Trusted Execution Engine CVE-2017-5707 Multiple Local Buffer Overflow Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101919Multiple Oracle Server Products Multiple Local Security Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101906

Intel Manageability Engine CVE-2017-5711 Multiple Local Buffer Overflow Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101918

Intel Manageability Engine CVE-2017-5705 Multiple Local Buffer Overflow Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101917

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
2017-11-22
http://www.securityfocus.com/bid/36935

Fortinet Fortiweb CVE-2017-7736 HTML Injection Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101916

TYPO3 T3Blog Extbase Extension Cross Site Scripting Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101913

Cisco ASA Next-Generation Firewall Services CVE-2017-12299 Remote Security Bypass Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101915

WPA2 Key Reinstallation Multiple Security Weaknesses
2017-11-22
http://www.securityfocus.com/bid/101274

Cisco Spark Board CVE-2017-12306 Local Security Bypass Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101914

Magento Multiple Security Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101912

Linux kernel 'block/bio.c' Multiple Local Information Disclosure Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101911

Moodle CVE-2017-15110 Information Disclosure Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101909

Symantec Norton Security for Mac CVE-2017-15528 Certificate Spoofing Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101796

Samba CVE-2017-15275 Information Disclosure Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101908

Infinispan 'hotrod java' Client Remote Code Execution Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101910

Samba CVE-2017-14746 Arbitrary Code Execution Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101907

IBM Tivoli Monitoring CVE-2017-1635 Remote Code Execution Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101905

IBM Rational DOORS Next Generation Multiple Cross Site Scripting Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101904

Multiple VMware Products CVE-2017-4934 Local Heap Buffer Overflow Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101903

Multiple VMware Products Out of Bounds Write Local Arbitrary Code Execution Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101902

Multiple F5 BIG-IP Products CVE-2017-6168 Information Disclosure Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101901

OpenSAML CVE-2017-16853 Multipal Security Bypass Vulnerabilites
2017-11-22
http://www.securityfocus.com/bid/101898

IBM Business Process Manager CVE-2017-1628 Denial of Service Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101900

Node.js ejs Package 'ejs.renderFile()' Function Remote Code Execution Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101897

Cisco FindIT Discovery Utility DLL Loading Local Arbitrary Code Execution Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101896

Amazon Key CVE-2017-16867 Security Weakness
2017-11-22
http://www.securityfocus.com/bid/101899

Symantec Management Console CVE-2017-15527 Directory Traversal Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101743

Multiple VMware Products Out of Bounds Read Multiple Local Arbitrary Code Execution Vulnerabilities
2017-11-22
http://www.securityfocus.com/bid/101892

Node.js ejs Package 'ejs.renderFile()' function Denial of Service Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101893

IBM WebSphere Commerce CVE-2017-1484 Information Disclosure Vulnerability
2017-11-22
http://www.securityfocus.com/bid/101894

SANS News

 

Threatpost

Uber Reveals 2016 Breach of 57 Million User Accounts

Intel Patches CPU Bugs Impacting Millions of PCs, Servers

Exploint

Vonage VDV-23 - Denial of Service

Microsoft Windows 10 - 'nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry)' Pool...

21.11.2017

Bugtraq

[CVE-2017-15044] DocuWare FullText Search - Incorrect Access Control vulnerability 2017-11-20
Graham Leggett (minfrin sharp fm)

[security bulletin] HPESBMU03794 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities 2017-11-16
security-alert hpe com

[security bulletin] HPESBMU03795 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities 2017-11-16
security-alert hpe com

Malware

JS.Kraacha
Android.Fakeyouwon

Phishing

 

Vulnerebility

WPA2 Key Reinstallation Multiple Security Weaknesses
2017-11-21
http://www.securityfocus.com/bid/101274

Linux kernel 'block/bio.c' Multiple Local Information Disclosure Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101911

Moodle CVE-2017-15110 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101909

Symantec Norton Security for Mac CVE-2017-15528 Certificate Spoofing Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101796

Samba CVE-2017-15275 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101908

Infinispan 'hotrod java' Client Remote Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101910

Samba CVE-2017-14746 Arbitrary Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101907

Multiple Oracle Server Products Multiple Local Security Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101906

IBM Tivoli Monitoring CVE-2017-1635 Remote Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101905

IBM Rational DOORS Next Generation Multiple Cross Site Scripting Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101904

Multiple VMware Products CVE-2017-4934 Local Heap Buffer Overflow Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101903

Multiple VMware Products Out of Bounds Write Local Arbitrary Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101902

Multiple F5 BIG-IP Products CVE-2017-6168 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101901

OpenSAML CVE-2017-16853 Multipal Security Bypass Vulnerabilites
2017-11-21
http://www.securityfocus.com/bid/101898

IBM Business Process Manager CVE-2017-1628 Denial of Service Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101900

Node.js ejs Package 'ejs.renderFile()' Function Remote Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101897

Cisco FindIT Discovery Utility DLL Loading Local Arbitrary Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101896

Amazon Key CVE-2017-16867 Security Weakness
2017-11-21
http://www.securityfocus.com/bid/101899

Symantec Management Console CVE-2017-15527 Directory Traversal Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101743

Multiple VMware Products Out of Bounds Read Multiple Local Arbitrary Code Execution Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101892

Node.js ejs Package 'ejs.renderFile()' function Denial of Service Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101893

IBM WebSphere Commerce CVE-2017-1484 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101894

IBM Rational DOORS Next Generation Multiple Cross Site Scripting Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101895

VMware NSX Edge CVE-2017-4929 Cross site Scripting Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101891

Intel Unite App CVE-2017-5738 Privilege Escalation Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101888

VMware Workstation DLL Loading CVE-2017-4939 Local Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101890

Node.js ejs Package 'ejs.renderFile()' function Cross Site Scripting Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101889

Varnish Cache CVE-2017-8807 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101886

Multiple VMware Products CVE-2017-4938 Denial of Service Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101887

Multiple Moxa NPort Products Multiple Denial of Service and Information Disclosure Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101885

Multiple F5 BIG-IP Products CVE-2017-6168 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101901

OpenSAML CVE-2017-16853 Multipal Security Bypass Vulnerabilites
2017-11-21
http://www.securityfocus.com/bid/101898

IBM Business Process Manager CVE-2017-1628 Denial of Service Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101900

Node.js ejs Package 'ejs.renderFile()' Function Remote Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101897

Cisco FindIT Discovery Utility DLL Loading Local Arbitrary Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101896

Amazon Key CVE-2017-16867 Security Weakness
2017-11-21
http://www.securityfocus.com/bid/101899

Symantec Management Console CVE-2017-15527 Directory Traversal Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101743

Multiple VMware Products Out of Bounds Read Multiple Local Arbitrary Code Execution Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101892

Node.js ejs Package 'ejs.renderFile()' function Denial of Service Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101893

IBM WebSphere Commerce CVE-2017-1484 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101894

IBM Rational DOORS Next Generation Multiple Cross Site Scripting Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101895

VMware NSX Edge CVE-2017-4929 Cross site Scripting Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101891

Intel Unite App CVE-2017-5738 Privilege Escalation Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101888

VMware Workstation DLL Loading CVE-2017-4939 Local Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101890

Node.js ejs Package 'ejs.renderFile()' function Cross Site Scripting Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101889

Varnish Cache CVE-2017-8807 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101886

Multiple VMware Products CVE-2017-4938 Denial of Service Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101887

Multiple Moxa NPort Products Multiple Denial of Service and Information Disclosure Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101885

Apache Camel CVE-2017-12633 Deserialization Remote Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101874

Multiple Siemens SICAM RTU Products Multiple Security Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101884

HP Insight Control CVE-2017-8969 Multiple Unspecified Input Validation Security Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101883

Node.js CVE-2017-14919 Denial of Service Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101881

Libav CVE-2017-16803 Denial of Service Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101882

Multiple TIBCO Products CVE-2017-5533 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101878

IBM Jazz Reporting Service CVE-2017-1340 Information Disclosure Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101880

Mozilla Firefox Prior to 57 Multiple Security Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101832

Cisco Umbrella Insights Virtual Appliance CVE-2017-12350 Local Privilege Escalation Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101879

Linux kernel CVE-2017-15115 Local Denial of Service Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101877

Multiple TIBCO Products CVE-2014-2542 Multiple HTML Injection Vulnerabilities
2017-11-21
http://www.securityfocus.com/bid/101873

Apache Camel CVE-2017-12634 Deserialization Remote Code Execution Vulnerability
2017-11-21
http://www.securityfocus.com/bid/101876

SANS News

Internet Wide Ethereum JSON-RPC Scans

Threatpost

US-CERT Warns of ASLR Implementation Flaw In Windows

CENTCOM Says Massive Data Cache Found on Leaky Server is Benign

Exploint

Microsoft Office - OLE Remote Code Execution

Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass

Microsoft Windows 10 - 'nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry)' Pool...

20.11.2017

Bugtraq

 

Malware

 

Phishing

 

Vulnerebility

Apache Camel CVE-2017-12633 Deserialization Remote Code Execution Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101874

Multiple Siemens SICAM RTU Products Multiple Security Vulnerabilities
2017-11-20
http://www.securityfocus.com/bid/101884

HP Insight Control CVE-2017-8969 Multiple Unspecified Input Validation Security Vulnerabilities
2017-11-20
http://www.securityfocus.com/bid/101883

Node.js CVE-2017-14919 Denial of Service Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101881

Libav CVE-2017-16803 Denial of Service Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101882

Multiple TIBCO Products CVE-2017-5533 Information Disclosure Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101878

IBM Jazz Reporting Service CVE-2017-1340 Information Disclosure Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101880

Mozilla Firefox Prior to 57 Multiple Security Vulnerabilities
2017-11-20
http://www.securityfocus.com/bid/101832

Cisco Umbrella Insights Virtual Appliance CVE-2017-12350 Local Privilege Escalation Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101879

Linux kernel CVE-2017-15115 Local Denial of Service Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101877

Multiple TIBCO Products CVE-2014-2542 Multiple HTML Injection Vulnerabilities
2017-11-20
http://www.securityfocus.com/bid/101873

Apache Camel CVE-2017-12634 Deserialization Remote Code Execution Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101876

Oracle Tuxedo CVE-2017-10267 Remote Security Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101875

Apache Karaf CVE-2014-0219 Local Denial of Service Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101872

Oracle Tuxedo CVE-2017-10278 Remote Security Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101870

Oracle Tuxedo CVE-2017-10272 Remote Security Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101871

Apache CouchDB CVE-2017-12635 Remote Privilege Escalation Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101868

Cisco IP Phone 8800 Series CVE-2017-12305 Local Command Injection Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101869

Cisco IOS and IOS XE Software CVE-2017-12304 Cross Site Scripting Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101856

Zeta Components Mail CVE-2017-15806 Arbitrary Code Execution Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101866

Cisco Voice OS CVE-2017-12337 Unauthorized Access Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101865

FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity
2017-11-20
http://www.securityfocus.com/bid/101867

Apache CXF CVE-2017-12624 Denial of Service Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101859

Cisco Firepower System Software CVE-2017-12300 Remote Security Bypass Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101862

Cisco HyperFlex System CVE-2017-12315 Local Information Disclosure Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101864

Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101757

FreeBSD CVE-2017-1086 Local Information Disclosure Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101861

Cisco Registered Envelope Service Multiple Cross Site Scripting Vulnerabilities
2017-11-20
http://www.securityfocus.com/bid/101863

Cisco Network Academy Packet Tracer DLL Loading Local Privilege Escalation Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101858

Cisco Meeting Server H.264 Decoding CVE-2017-12311 Denial of Service Vulnerability
2017-11-20
http://www.securityfocus.com/bid/101855

SANS News

One month later, Magniber ransomware is still out there

Threatpost

 

Exploint

iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 - Denial of Service

Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass

18.11.2017

Bugtraq

 

Malware

Android.Rootnik.B

Phishing

on behalf of PayPal

18th November 2017

Receipt number:
1544-7345-9265-7756

Vulnerebility

Node.js CVE-2017-14919 Denial of Service Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101881

Libav CVE-2017-16803 Denial of Service Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101882

Multiple TIBCO Products CVE-2017-5533 Information Disclosure Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101878

IBM Jazz Reporting Service CVE-2017-1340 Information Disclosure Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101880

Mozilla Firefox Prior to 57 Multiple Security Vulnerabilities
2017-11-19
http://www.securityfocus.com/bid/101832

Cisco Umbrella Insights Virtual Appliance CVE-2017-12350 Local Privilege Escalation Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101879

Linux kernel CVE-2017-15115 Local Denial of Service Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101877

Multiple TIBCO Products CVE-2014-2542 Multiple HTML Injection Vulnerabilities
2017-11-19
http://www.securityfocus.com/bid/101873

Apache Camel CVE-2017-12634 Deserialization Remote Code Execution Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101876

Apache Camel CVE-2017-12633 Deserialization Remote Code Execution Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101874

Oracle Tuxedo CVE-2017-10267 Remote Security Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101875

Apache Karaf CVE-2014-0219 Local Denial of Service Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101872

Oracle Tuxedo CVE-2017-10278 Remote Security Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101870

Oracle Tuxedo CVE-2017-10272 Remote Security Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101871

Apache CouchDB CVE-2017-12635 Remote Privilege Escalation Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101868

Cisco IP Phone 8800 Series CVE-2017-12305 Local Command Injection Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101869

Cisco IOS and IOS XE Software CVE-2017-12304 Cross Site Scripting Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101856

Zeta Components Mail CVE-2017-15806 Arbitrary Code Execution Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101866

Cisco Voice OS CVE-2017-12337 Unauthorized Access Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101865

FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity
2017-11-19
http://www.securityfocus.com/bid/101867

Apache CXF CVE-2017-12624 Denial of Service Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101859

Cisco Firepower System Software CVE-2017-12300 Remote Security Bypass Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101862

Cisco HyperFlex System CVE-2017-12315 Local Information Disclosure Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101864

Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101757

FreeBSD CVE-2017-1086 Local Information Disclosure Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101861

Cisco Registered Envelope Service Multiple Cross Site Scripting Vulnerabilities
2017-11-19
http://www.securityfocus.com/bid/101863

Cisco Network Academy Packet Tracer DLL Loading Local Privilege Escalation Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101858

Cisco Meeting Server H.264 Decoding CVE-2017-12311 Denial of Service Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101855

FreeBSD CVE-2017-1088 Local Information Disclosure Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101857

Cisco RF Gateway 1 CVE-2017-12318 Denial of Service Vulnerability
2017-11-19
http://www.securityfocus.com/bid/101854

Node.js CVE-2017-14919 Denial of Service Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101881

Libav CVE-2017-16803 Denial of Service Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101882

Multiple TIBCO Products CVE-2017-5533 Information Disclosure Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101878

IBM Jazz Reporting Service CVE-2017-1340 Information Disclosure Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101880

Mozilla Firefox Prior to 57 Multiple Security Vulnerabilities
2017-11-18
http://www.securityfocus.com/bid/101832

Cisco Umbrella Insights Virtual Appliance CVE-2017-12350 Local Privilege Escalation Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101879

Linux kernel CVE-2017-15115 Local Denial of Service Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101877

Multiple TIBCO Products CVE-2014-2542 Multiple HTML Injection Vulnerabilities
2017-11-18
http://www.securityfocus.com/bid/101873

Apache Camel CVE-2017-12634 Deserialization Remote Code Execution Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101876

Apache Camel CVE-2017-12633 Deserialization Remote Code Execution Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101874

Oracle Tuxedo CVE-2017-10267 Remote Security Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101875

Apache Karaf CVE-2014-0219 Local Denial of Service Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101872

Oracle Tuxedo CVE-2017-10278 Remote Security Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101870

Oracle Tuxedo CVE-2017-10272 Remote Security Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101871

Apache CouchDB CVE-2017-12635 Remote Privilege Escalation Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101868

Cisco IP Phone 8800 Series CVE-2017-12305 Local Command Injection Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101869

Cisco IOS and IOS XE Software CVE-2017-12304 Cross Site Scripting Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101856

Zeta Components Mail CVE-2017-15806 Arbitrary Code Execution Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101866

Cisco Voice OS CVE-2017-12337 Unauthorized Access Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101865

FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity
2017-11-18
http://www.securityfocus.com/bid/101867

Apache CXF CVE-2017-12624 Denial of Service Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101859

Cisco Firepower System Software CVE-2017-12300 Remote Security Bypass Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101862

Cisco HyperFlex System CVE-2017-12315 Local Information Disclosure Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101864

Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101757

FreeBSD CVE-2017-1086 Local Information Disclosure Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101861

Cisco Registered Envelope Service Multiple Cross Site Scripting Vulnerabilities
2017-11-18
http://www.securityfocus.com/bid/101863

Cisco Network Academy Packet Tracer DLL Loading Local Privilege Escalation Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101858

Cisco Meeting Server H.264 Decoding CVE-2017-12311 Denial of Service Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101855

FreeBSD CVE-2017-1088 Local Information Disclosure Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101857

Cisco RF Gateway 1 CVE-2017-12318 Denial of Service Vulnerability
2017-11-18
http://www.securityfocus.com/bid/101854

SANS News

BTC Pickpockets

Threatpost

Multiple Vulnerabilities in LibXL Library Open Door to RCE Attacks

Amazon Promises Fix to Stop Key Service Hack

Exploint

VX Search 10.2.14 - 'Proxy' Buffer Overflow (SEH)

17.11.2017

Bugtraq

[security bulletin] HPESBMU03794 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities 2017-11-16
security-alert hpe com

[security bulletin] HPESBMU03795 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities 2017-11-16
security-alert hpe com

[SECURITY] [DSA 4037-1] jackson-databind security update 2017-11-16
Sebastien Delafond (seb debian org)

[SECURITY] [DSA 4039-1] opensaml2 security update 2017-11-16
Salvatore Bonaccorso (carnil debian org)

[security bulletin] HPESBHF03705 rev.4 - HPE Integrated Lights-Out 4, 3, 2 and Moonshot Remote Console Administrator (iLO 4 and MRCA) Remote Disclosure of Information 2017-11-15
security-alert hpe com

Malware

Exp.CVE-2017-16396
Exp.CVE-2017-16410

Phishing

 

Vulnerebility

Mozilla Firefox Prior to 57 Multiple Security Vulnerabilities
2017-11-17
http://www.securityfocus.com/bid/101832

Apache Camel CVE-2017-12634 Deserialization Remote Code Execution Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101876

Apache Camel CVE-2017-12633 Deserialization Remote Code Execution Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101874

Oracle Tuxedo CVE-2017-10267 Remote Security Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101875

Apache Karaf CVE-2014-0219 Local Denial of Service Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101872

Oracle Tuxedo CVE-2017-10278 Remote Security Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101870

Oracle Tuxedo CVE-2017-10272 Remote Security Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101871

Apache CouchDB CVE-2017-12635 Remote Privilege Escalation Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101868

Cisco IP Phone 8800 Series CVE-2017-12305 Local Command Injection Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101869

Cisco IOS and IOS XE Software CVE-2017-12304 Cross Site Scripting Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101856

Zeta Components Mail CVE-2017-15806 Arbitrary Code Execution Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101866

Cisco Voice OS CVE-2017-12337 Unauthorized Access Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101865

FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity
2017-11-17
http://www.securityfocus.com/bid/101867

Apache CXF CVE-2017-12624 Denial of Service Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101859

Cisco Firepower System Software CVE-2017-12300 Remote Security Bypass Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101862

Cisco HyperFlex System CVE-2017-12315 Local Information Disclosure Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101864

Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101757

FreeBSD CVE-2017-1086 Local Information Disclosure Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101861

Cisco Registered Envelope Service Multiple Cross Site Scripting Vulnerabilities
2017-11-17
http://www.securityfocus.com/bid/101863

Cisco Network Academy Packet Tracer DLL Loading Local Privilege Escalation Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101858

Cisco Meeting Server H.264 Decoding CVE-2017-12311 Denial of Service Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101855

FreeBSD CVE-2017-1088 Local Information Disclosure Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101857

Cisco RF Gateway 1 CVE-2017-12318 Denial of Service Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101854

Cisco Unified Communications Manager CVE-2017-12302 SQL Injection Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101853

Philips IntelliSpace Cardiovascular and Xcelera CVE-2017-14111 Information Disclosure Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101850

Oracle Tuxedo CVE-2017-10266 Remote Security Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101852

Vir.IT Explorer Anti-Virus CVE-2017-16237 Local Privilege Escalation Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101851

Drupal Permissions by Term Module Access Bypass Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101833

WPA2 Key Reinstallation Multiple Security Weaknesses
2017-11-17
http://www.securityfocus.com/bid/101274

CA Identity Governance CVE-2017-9394 HTML Injection Vulnerability
2017-11-17
http://www.securityfocus.com/bid/101849

SANS News

Top-100 Malicious IP STIX Feed

Threatpost

Oracle Issues Emergency Patches for ‘JoltandBleed’ Vulnerabilities

White House Releases VEP Disclosure Rules

Exploint

Zeta Components Mail 1.8.1 - Remote Code Execution

Vonage VDV23 - Cross-Site Scripting

VX Search 10.2.14 - 'Proxy' Buffer Overflow (SEH)

16.11.2017

Bugtraq

CA20171114-01: Security Notice for CA Identity Governance 2017-11-14
Kotas, Kevin J (Kevin Kotas ca com)

[SECURITY] [DSA 4033-1] konversation security update 2017-11-13
Salvatore Bonaccorso (carnil debian org)

[CVE-2017-15288] A privilege escalation vulnerability in the Scala compilation daemon 2017-11-13
jason zaugg lightbend com

Symantec Endpoint Protection (SEP) v12.1 Tamper-protection Bypass CVE-2017-6331 (hyp3rlinx) 2017-11-13
apparitionsec gmail com

[SECURITY] [DSA 4032-1] imagemagick security update 2017-11-12
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4031-1] ruby2.3 security update 2017-11-11
Salvatore Bonaccorso (carnil debian org)

Malware

 

Phishing

PaypaI-Support

15th November 2017

YOUR ACCOUNT HAS BEEN IIMITED
UNTII WE HEAR FROM YOU (CASE
ID #PP-003-498-237-832)

Vulnerebility

Cisco IOS and IOS XE Software CVE-2017-12304 Cross Site Scripting Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101856

Zeta Components Mail CVE-2017-15806 Arbitrary Code Execution Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101866

Cisco Voice OS CVE-2017-12337 Unauthorized Access Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101865

FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity
2017-11-16
http://www.securityfocus.com/bid/101867

Apache CXF CVE-2017-12624 Denial of Service Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101859

Cisco Firepower System Software CVE-2017-12300 Remote Security Bypass Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101862

Cisco HyperFlex System CVE-2017-12315 Local Information Disclosure Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101864

Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101757

FreeBSD CVE-2017-1086 Local Information Disclosure Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101861

Mozilla Firefox Prior to 57 Multiple Security Vulnerabilities
2017-11-16
http://www.securityfocus.com/bid/101832

Cisco Registered Envelope Service Multiple Cross Site Scripting Vulnerabilities
2017-11-16
http://www.securityfocus.com/bid/101863

Cisco Network Academy Packet Tracer DLL Loading Local Privilege Escalation Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101858

Cisco Meeting Server H.264 Decoding CVE-2017-12311 Denial of Service Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101855

FreeBSD CVE-2017-1088 Local Information Disclosure Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101857

Cisco RF Gateway 1 CVE-2017-12318 Denial of Service Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101854

Cisco Unified Communications Manager CVE-2017-12302 SQL Injection Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101853

Philips IntelliSpace Cardiovascular and Xcelera CVE-2017-14111 Information Disclosure Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101850

Oracle Tuxedo CVE-2017-10266 Remote Security Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101852

Vir.IT Explorer Anti-Virus CVE-2017-16237 Local Privilege Escalation Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101851

Drupal Permissions by Term Module Access Bypass Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101833

WPA2 Key Reinstallation Multiple Security Weaknesses
2017-11-16
http://www.securityfocus.com/bid/101274

CA Identity Governance CVE-2017-9394 HTML Injection Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101849

Linux Kernel 'drivers/media/usb/dvb-usb/dib0700_devices.c' Local Denial of Service Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101846

SAP ERP Multiple Unspecified Security Vulnerabilities
2017-11-16
http://www.securityfocus.com/bid/101848

Debian Postgresql-common CVE-2017-8806 Multiple Insecure Temporary File Handling Vulnerabilities
2017-11-16
http://www.securityfocus.com/bid/101810

SAP HANA Information Disclosure Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101847

SAP Landscape Management Information Disclosure Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101845

Apache Sling Servlets Post CVE-2017-11296 Cross Site Scripting Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101844

SAP GUI for HTML Cross Site Scripting Vulnerability
2017-11-16
http://www.securityfocus.com/bid/100788

Adobe Experience Manager CVE-2017-3111 Information Disclosure Vulnerability
2017-11-16
http://www.securityfocus.com/bid/101843

SANS News

Suspicious Domains Tracking Dashboard

Threatpost

Cisco Warns of Critical Flaw in Voice OS-based Products

Exploint

Microsoft Edge Chakra: JIT - 'OP_Memset' Type Confusion

Microsoft Edge Chakra: JIT - 'Lowerer::LowerBoundCheck' Incorrect Integer Overflow Check

Microsoft Edge Chakra JIT - Type Confusion with switch Statements

Microsoft Edge - 'Object.setPrototypeOf' Memory Corruption

D-Link DIR605L - Denial of Service

Vonage VDV23 - Cross-Site Scripting

LanSweeper 6.0.100.75 - Cross-Site Scripting

TP-Link TL-WR740N - Cross-Site Scripting

15.11.2017

Bugtraq

[SECURITY] [DSA 4033-1] konversation security update 2017-11-13
Salvatore Bonaccorso (carnil debian org)

[CVE-2017-15288] A privilege escalation vulnerability in the Scala compilation daemon 2017-11-13
jason zaugg lightbend com

Malware

 

Phishing

BMO

14th November 2017

Action: Changes made in your
Internet Banking Profile

western union

13th November 2017

Invitation: Contacting Western
Union
email..(westernunion1087@gmail
.com)call (+229-68 99 38 19) @
Wednesday,

Vulnerebility

Debian Postgresql-common CVE-2017-8806 Multiple Insecure Temporary File Handling Vulnerabilities
2017-11-15
http://www.securityfocus.com/bid/101810

SAP HANA Information Disclosure Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101847

SAP Landscape Management Information Disclosure Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101845

Apache Sling Servlets Post CVE-2017-11296 Cross Site Scripting Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101844

SAP GUI for HTML Cross Site Scripting Vulnerability
2017-11-15
http://www.securityfocus.com/bid/100788

Adobe Experience Manager CVE-2017-3111 Information Disclosure Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101843

Linux Kernel 'drivers/media/usb/hdpvr/hdpvr-core.c' Local Denial of Service Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101842

Microsoft Edge Scripting Engine CVE-2017-11841 Remote Memory Corruption Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101733

Oracle Tuxedo CVE-2017-10269 Remote Security Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101841

Oracle Fusion Middleware CVE-2017-10151 Remote Security Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101619

Microsoft Edge Scripting Engine CVE-2017-11862 Remote Memory Corruption Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101724

Adobe Digital Editions APSB17-39 Multiple Information Disclosure Vulnerabilities
2017-11-15
http://www.securityfocus.com/bid/101839

SAP Composite Application Framework Authorization Tool XML External Entity Injection Vulnerability
2017-11-15
http://www.securityfocus.com/bid/97576

Adobe InDesign CVE-2017-11302 Memory Corruption Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101840

Adobe Experience Manager CVE-2017-3109 Cross Site Scripting Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101834

Adobe Connect Multiple Security Vulnerabilities
2017-11-15
http://www.securityfocus.com/bid/101838

Adobe Flash Player APSB17-33 Multiple Remote Code Execution Vulnerabilities
2017-11-15
http://www.securityfocus.com/bid/101837

Adobe Acrobat and Reader APSB17-36 Multiple Remote Code Execution Vulnerabilities
2017-11-15
http://www.securityfocus.com/bid/101831

Microsoft Office CVE-2017-11876 Cross Site Request Forgery Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101754

Microsoft Windows GDI Component CVE-2017-11852 Local Information Disclosure Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101739

SAP NetWeaver Knowledge Management XMLForms Unspecified Cross Site Scripting Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101826

Microsoft Windows Graphics Component CVE-2017-11850 Local Information Disclosure Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101738

Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101757

Microsoft ASP.NET Core CVE-2017-8700 Information Disclosure Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101712

Microsoft Windows CVE-2017-11835 Information Disclosure Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101736

Microsoft Excel CVE-2017-11878 Memory Corruption Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101756

Microsoft ASP.NET Core CVE-2017-11883 Denial of Service Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101835

Adobe Shockwave Player CVE-2017-11294 Unspecified Memory Corruption Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101836

Microsoft ASP.NET Core CVE-2017-11879 Open Redirection Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101713

Microsoft Excel CVE-2017-11877 Security Bypass Vulnerability
2017-11-15
http://www.securityfocus.com/bid/101747

SANS News

If you want something done right, do it yourself!

Threatpost

Apple iPhone X Face ID Fooled by a Mask


Phishing Biggest Threat to Google Account Security

New IcedID Trojan Targets US Banks

Exploint

Dup Scout Enterprise 10.0.18 - 'Login' Buffer Overflow

D-Link DIR-850L - Unauthenticated OS Command Execution (Metasploit)

Ulterius Server < 1.9.5.0 - Directory Traversal

Kirby CMS < 2.5.7 - Cross-Site Scripting

PSFTPd Windows FTP Server 10.0.4 Build 729 - Log Injection / Use-After-Free

14.11.2017

Bugtraq

Symantec Endpoint Protection (SEP) v12.1 Tamper-protection Bypass CVE-2017-6331 (hyp3rlinx) 2017-11-13
apparitionsec gmail com

[SECURITY] [DSA 4032-1] imagemagick security update 2017-11-12
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4031-1] ruby2.3 security update 2017-11-11
Salvatore Bonaccorso (carnil debian org)

Bypassable authentication in SingTel / Aztech DSL8900GR(AC) router 2017-11-11
cort accelerateworkshop com

[SECURITY] [DSA 4006-2] mupdf security update 2017-11-10
Luciano Bello (luciano debian org)

Malware

 

Phishing

 

Vulnerebility

SWFTools 'swfbits.c' Remote Denial of Service Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101797

TYPO3 CAB FAL Search Extension Cross Site Scripting Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101799

ManageEngine ServiceDesk CVE-2017-11512 Arbitrary File Download Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101789

PHPUnit CVE-2017-9841 Arbitrary Code Execution Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101798

GraphicsMagick CVE-2017-16669 Heap Buffer Overflow Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101795

Symantec Endpoint Encryption CVE-2017-15526 Denial of Service Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101698

Symantec Endpoint Encryption CVE-2017-15525 Denial of Service Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101697

FRRouting CVE-2017-15865 Information Disclosure Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101794

HP Content Manager Workgroup Service CVE-2017-14360 Unspecified Denial of Service Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101792

Joomla! Kunena Extension CVE-2017-5673 Multiple Cross Site Scripting Vulnerabilities
2017-11-14
http://www.securityfocus.com/bid/101677

Linux Kernel 'drivers/net/usb/qmi_wwan.c' Local Denial of Service Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101791

Roundcube Webmail CVE-2017-16651 Information Disclosure Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101793

Linux Kernel CVE-2017-15102 Local Privilege Escalation Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101790

Hola VPN CVE-2017-16757 Local Privilege Escalation Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101787

ManageEngine ServiceDesk CVE-2017-11511 Arbitrary File Download Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101788

VMware vCenter Server CRLF Injection and Server Side Request Forgery Security Bypass Vulnerabilities
2017-11-14
http://www.securityfocus.com/bid/101785

VMware vCenter Server CVE-2017-4927 Denial of Service Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101786

Authconfig CVE-2017-7488 Information Disclosure Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101784

Linux Kernel CVE-2016-10200 Multiple Privilege Escalation Vulnerabilities
2017-11-14
http://www.securityfocus.com/bid/101783

Linux Kernel 'tty/tty_ldsem.c' Local Race Condition Vulnerability
2017-11-14
http://www.securityfocus.com/bid/74820

PostgreSQL Multipe Memory Corruption and Security Bypass Vulnerabilities
2017-11-14
http://www.securityfocus.com/bid/101781

Multiple AutomationDirect Products CVE-2017-1402 DLL Loading Local Code Execution Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101780

NetApp OnCommand Unified Manager Core Package CVE-2017-11461 Clickjacking Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101778

Multiple Schneider Electric Products CVE-2017-14024 Unspecified Stack Buffer Overflow Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101779

Bolt CVE-2017-16754 Multiple Access Bypass Vulnerabilities
2017-11-14
http://www.securityfocus.com/bid/101777

NetApp Clustered Data ONTAP CVE-2017-5201 Incomplete Fix Information Disclosure Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101776

Google Android Framework Multiple Privilege Escalation Vulnerabilities
2017-11-14
http://www.securityfocus.com/bid/101775

Google Android Qualcomm Components Multiple Security Vulnerabilities
2017-11-14
http://www.securityfocus.com/bid/101774

Jenkins Multiple Security Vulnerabilities
2017-11-14
http://www.securityfocus.com/bid/101773

Multiple IBM Products CVE-2017-1710 Remote Privilege Escalation Vulnerability
2017-11-14
http://www.securityfocus.com/bid/101770

SANS News

VBE Embeded Script (info.zip)

Threatpost

Phishing Biggest Threat to Google Account Security

New IcedID Trojan Targets US Banks

Exploint

Web Viewer 1.0.0.193 (Samsung SRN-1670D) - Unrestricted File Upload

IKARUS anti.virus 2.16.7 - 'ntguard_x64' Privilege Escalation

Xlight FTP Server 3.8.8.5 - Buffer Overflow (PoC)

13.11.2017

Bugtraq

 

Malware

Win32/NukeSped.AA

Win32/Delf.TUA

Trojan.Reaver

Phishing

western union

13th November 2017

Invitation: Contacting Western
Union
email..(westernunion1087@gmail
.com)call (+229-68 99 38 19) @
Wednesday,

Vulnerebility

Linux Kernel 'drivers/net/usb/qmi_wwan.c' Local Denial of Service Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101791

Roundcube Webmail CVE-2017-16651 Information Disclosure Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101793

Linux Kernel CVE-2017-15102 Local Privilege Escalation Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101790

Hola VPN CVE-2017-16757 Local Privilege Escalation Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101787

ManageEngine ServiceDesk CVE-2017-11511 Arbitrary File Download Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101788

VMware vCenter Server CRLF Injection and Server Side Request Forgery Security Bypass Vulnerabilities
2017-11-13
http://www.securityfocus.com/bid/101785

VMware vCenter Server CVE-2017-4927 Denial of Service Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101786

Authconfig CVE-2017-7488 Information Disclosure Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101784

Linux Kernel CVE-2016-10200 Multiple Privilege Escalation Vulnerabilities
2017-11-13
http://www.securityfocus.com/bid/101783

Linux Kernel 'tty/tty_ldsem.c' Local Race Condition Vulnerability
2017-11-13
http://www.securityfocus.com/bid/74820

PostgreSQL Multipe Memory Corruption and Security Bypass Vulnerabilities
2017-11-13
http://www.securityfocus.com/bid/101781

Multiple AutomationDirect Products CVE-2017-1402 DLL Loading Local Code Execution Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101780

NetApp OnCommand Unified Manager Core Package CVE-2017-11461 Clickjacking Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101778

Multiple Schneider Electric Products CVE-2017-14024 Unspecified Stack Buffer Overflow Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101779

Bolt CVE-2017-16754 Multiple Access Bypass Vulnerabilities
2017-11-13
http://www.securityfocus.com/bid/101777

NetApp Clustered Data ONTAP CVE-2017-5201 Incomplete Fix Information Disclosure Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101776

Google Android Framework Multiple Privilege Escalation Vulnerabilities
2017-11-13
http://www.securityfocus.com/bid/101775

Google Android Qualcomm Components Multiple Security Vulnerabilities
2017-11-13
http://www.securityfocus.com/bid/101774

Jenkins Multiple Security Vulnerabilities
2017-11-13
http://www.securityfocus.com/bid/101773

Multiple IBM Products CVE-2017-1710 Remote Privilege Escalation Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101770

Linux Kernel 'drivers/input/tablet/gtco.c' Local Denial of Service Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101769

VMware AirWatch Console Module Multiple Security Vulnerabilities
2017-11-13
http://www.securityfocus.com/bid/101772

Linux Kernel 'drivers/net/usb/asix_devices.c' Local Denial of Service Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101767

Linux Kernel 'drivers/input/misc/ims-pcu.c' Local Denial of Service Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101768

VMware AirWatch Launcher for Android CVE-2017-4932 Privilege Escalation Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101771

Multiple Asterisk Products Information Disclosure Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101765

Multiple Asterisk Products CDR Remote Buffer Overflow Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101760

Multiple Asterisk Products 'pjproject ' Buffer Overflow Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101759

Linux Kernel 'drivers/net/usb/cdc_ether.c' Local Denial of Service Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101761

Linux Kernel 'drivers/media/dvb-core/dvb_frontend.c' Local Denial of Service Vulnerability
2017-11-13
http://www.securityfocus.com/bid/101758

SANS News

 

Threatpost

AutoIt Scripting Used By Overlay Malware to Bypass AV Detection

Exploint

Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass

12.11.2017

Bugtraq

[RT-SA-2016-008] XML External Entity Expansion in Ladon Webservice 2017-11-09
RedTeam Pentesting GmbH (release redteam-pentesting de)

[SECURITY] [DSA 4029-1] postgresql-common security update 2017-11-09
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4028-1] postgresql-9.6 security update 2017-11-09
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4027-1] postgresql-9.4 security update 2017-11-09
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4026-1] bchunk security update 2017-11-09
Sebastien Delafond (seb debian org)

Malware

Win32/Filecoder.Hermes.D

Phishing

 

Vulnerebility

Authconfig CVE-2017-7488 Information Disclosure Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101784

Linux Kernel CVE-2016-10200 Multiple Privilege Escalation Vulnerabilities
2017-11-12
http://www.securityfocus.com/bid/101783

Linux Kernel 'tty/tty_ldsem.c' Local Race Condition Vulnerability
2017-11-12
http://www.securityfocus.com/bid/74820

PostgreSQL Multipe Memory Corruption and Security Bypass Vulnerabilities
2017-11-12
http://www.securityfocus.com/bid/101781

Multiple AutomationDirect Products CVE-2017-1402 DLL Loading Local Code Execution Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101780

NetApp OnCommand Unified Manager Core Package CVE-2017-11461 Clickjacking Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101778

Multiple Schneider Electric Products CVE-2017-14024 Unspecified Stack Buffer Overflow Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101779

Bolt CVE-2017-16754 Multiple Access Bypass Vulnerabilities
2017-11-12
http://www.securityfocus.com/bid/101777

NetApp Clustered Data ONTAP CVE-2017-5201 Incomplete Fix Information Disclosure Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101776

Google Android Framework Multiple Privilege Escalation Vulnerabilities
2017-11-12
http://www.securityfocus.com/bid/101775

Google Android Qualcomm Components Multiple Security Vulnerabilities
2017-11-12
http://www.securityfocus.com/bid/101774

Jenkins Multiple Security Vulnerabilities
2017-11-12
http://www.securityfocus.com/bid/101773

Multiple IBM Products CVE-2017-1710 Remote Privilege Escalation Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101770

Linux Kernel 'drivers/input/tablet/gtco.c' Local Denial of Service Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101769

VMware AirWatch Console Module Multiple Security Vulnerabilities
2017-11-12
http://www.securityfocus.com/bid/101772

Linux Kernel 'drivers/net/usb/asix_devices.c' Local Denial of Service Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101767

Linux Kernel 'drivers/input/misc/ims-pcu.c' Local Denial of Service Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101768

VMware AirWatch Launcher for Android CVE-2017-4932 Privilege Escalation Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101771

Multiple Asterisk Products Information Disclosure Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101765

Multiple Asterisk Products CDR Remote Buffer Overflow Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101760

Multiple Asterisk Products 'pjproject ' Buffer Overflow Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101759

Linux Kernel 'drivers/net/usb/cdc_ether.c' Local Denial of Service Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101761

Linux Kernel 'drivers/media/dvb-core/dvb_frontend.c' Local Denial of Service Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101758

PHP CVE-2017-16642 Heap Based Buffer Overflow Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101745

Google Android NVIDIA Components CVE-2017-6264 Privilege Escalation Vulnerability
2017-11-12
http://www.securityfocus.com/bid/101744

Apache Tomcat CVE-2017-5648 Information Disclosure Vulnerability
2017-11-12
http://www.securityfocus.com/bid/97530

Apache Tomcat CVE-2017-12617 Incomplete Fix Remote Code Execution Vulnerability
2017-11-12
http://www.securityfocus.com/bid/100954

Apache Tomcat CVE-2017-12616 Information Disclosure Vulnerability
2017-11-12
http://www.securityfocus.com/bid/100897

Apache Tomcat CVE-2017-7675 Directory Traversal Vulnerability
2017-11-12
http://www.securityfocus.com/bid/100256

Apache Tomcat CVE-2017-12615 Remote Code Execution Vulnerability
2017-11-12
http://www.securityfocus.com/bid/100901Authconfig CVE-2017-7488 Information Disclosure Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101784

Linux Kernel CVE-2016-10200 Multiple Privilege Escalation Vulnerabilities
2017-11-11
http://www.securityfocus.com/bid/101783

Linux Kernel 'tty/tty_ldsem.c' Local Race Condition Vulnerability
2017-11-11
http://www.securityfocus.com/bid/74820

PostgreSQL Multipe Memory Corruption and Security Bypass Vulnerabilities
2017-11-11
http://www.securityfocus.com/bid/101781

Multiple AutomationDirect Products CVE-2017-1402 DLL Loading Local Code Execution Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101780

NetApp OnCommand Unified Manager Core Package CVE-2017-11461 Clickjacking Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101778

Multiple Schneider Electric Products CVE-2017-14024 Unspecified Stack Buffer Overflow Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101779

Bolt CVE-2017-16754 Multiple Access Bypass Vulnerabilities
2017-11-11
http://www.securityfocus.com/bid/101777

NetApp Clustered Data ONTAP CVE-2017-5201 Incomplete Fix Information Disclosure Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101776

Google Android Framework Multiple Privilege Escalation Vulnerabilities
2017-11-11
http://www.securityfocus.com/bid/101775

Google Android Qualcomm Components Multiple Security Vulnerabilities
2017-11-11
http://www.securityfocus.com/bid/101774

Jenkins Multiple Security Vulnerabilities
2017-11-11
http://www.securityfocus.com/bid/101773

Multiple IBM Products CVE-2017-1710 Remote Privilege Escalation Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101770

Linux Kernel 'drivers/input/tablet/gtco.c' Local Denial of Service Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101769

VMware AirWatch Console Module Multiple Security Vulnerabilities
2017-11-11
http://www.securityfocus.com/bid/101772

Linux Kernel 'drivers/net/usb/asix_devices.c' Local Denial of Service Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101767

Linux Kernel 'drivers/input/misc/ims-pcu.c' Local Denial of Service Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101768

VMware AirWatch Launcher for Android CVE-2017-4932 Privilege Escalation Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101771

Multiple Asterisk Products Information Disclosure Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101765

Multiple Asterisk Products CDR Remote Buffer Overflow Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101760

Multiple Asterisk Products 'pjproject ' Buffer Overflow Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101759

Linux Kernel 'drivers/net/usb/cdc_ether.c' Local Denial of Service Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101761

Linux Kernel 'drivers/media/dvb-core/dvb_frontend.c' Local Denial of Service Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101758

PHP CVE-2017-16642 Heap Based Buffer Overflow Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101745

Google Android NVIDIA Components CVE-2017-6264 Privilege Escalation Vulnerability
2017-11-11
http://www.securityfocus.com/bid/101744

Apache Tomcat CVE-2017-5648 Information Disclosure Vulnerability
2017-11-11
http://www.securityfocus.com/bid/97530

Apache Tomcat CVE-2017-12617 Incomplete Fix Remote Code Execution Vulnerability
2017-11-11
http://www.securityfocus.com/bid/100954

Apache Tomcat CVE-2017-12616 Information Disclosure Vulnerability
2017-11-11
http://www.securityfocus.com/bid/100897

Apache Tomcat CVE-2017-7675 Directory Traversal Vulnerability
2017-11-11
http://www.securityfocus.com/bid/100256

Apache Tomcat CVE-2017-12615 Remote Code Execution Vulnerability
2017-11-11
http://www.securityfocus.com/bid/100901

SANS News

Keep An Eye on your Root Certificates

Threatpost

AutoIt Scripting Used By Overlay Malware to Bypass AV Detection

Eavesdropper Vulnerability Exposes Mobile Call, Text Data

Hundreds of Millions in Digital Currency Remains Frozen

Exploint

 

10.11.2017

Bugtraq

[RT-SA-2016-008] XML External Entity Expansion in Ladon Webservice 2017-11-09
RedTeam Pentesting GmbH (release redteam-pentesting de)

[SECURITY] [DSA 4029-1] postgresql-common security update 2017-11-09
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4028-1] postgresql-9.6 security update 2017-11-09
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4027-1] postgresql-9.4 security update 2017-11-09
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4026-1] bchunk security update 2017-11-09
Sebastien Delafond (seb debian org)

Datto Windows Agent 1.0.5.0 Remote Command Execution [CVE-2017-16673][CVE-2017-16674] 2017-11-09
brainn gmail com

AST-2017-009: Buffer overflow in pjproject header parsing can cause crash in Asterisk 2017-11-08
Asterisk Security Team (security asterisk org)

AST-2017-010: Buffer overflow in CDR's set user 2017-11-08
Asterisk Security Team (security asterisk org)

AST-2017-011: Memory leak in pjsip session resource 2017-11-08
Asterisk Security Team (security asterisk org)

[SECURITY] [DSA 4025-1] libpam4j security update 2017-11-08
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4021-1] otrs2 security update 2017-11-07
Moritz Muehlenhoff (jmm debian org)

Malware

Linux.Badbee

Backdoor.Badbee

Phishing

Chase Online

9th November 2017

Urgent! Apply for your Chase
Account Update

Vulnerebility

Linux Kernel 'tty/tty_ldsem.c' Local Race Condition Vulnerability
2017-11-10
http://www.securityfocus.com/bid/74820

NetApp OnCommand Unified Manager Core Package CVE-2017-11461 Clickjacking Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101778

Multiple Schneider Electric Products CVE-2017-14024 Unspecified Stack Buffer Overflow Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101779

Bolt CVE-2017-16754 Multiple Access Bypass Vulnerabilities
2017-11-10
http://www.securityfocus.com/bid/101777

NetApp Clustered Data ONTAP CVE-2017-5201 Incomplete Fix Information Disclosure Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101776

Google Android Framework Multiple Privilege Escalation Vulnerabilities
2017-11-10
http://www.securityfocus.com/bid/101775

Google Android Qualcomm Components Multiple Security Vulnerabilities
2017-11-10
http://www.securityfocus.com/bid/101774

Jenkins Multiple Security Vulnerabilities
2017-11-10
http://www.securityfocus.com/bid/101773

Multiple IBM Products CVE-2017-1710 Remote Privilege Escalation Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101770

Linux Kernel 'drivers/input/tablet/gtco.c' Local Denial of Service Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101769

VMware AirWatch Console Module Multiple Security Vulnerabilities
2017-11-10
http://www.securityfocus.com/bid/101772

Linux Kernel 'drivers/net/usb/asix_devices.c' Local Denial of Service Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101767

Linux Kernel 'drivers/input/misc/ims-pcu.c' Local Denial of Service Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101768

VMware AirWatch Launcher for Android CVE-2017-4932 Privilege Escalation Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101771

Multiple Asterisk Products Information Disclosure Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101765

Multiple Asterisk Products CDR Remote Buffer Overflow Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101760

Multiple Asterisk Products 'pjproject ' Buffer Overflow Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101759

Linux Kernel 'drivers/net/usb/cdc_ether.c' Local Denial of Service Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101761

Linux Kernel 'drivers/media/dvb-core/dvb_frontend.c' Local Denial of Service Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101758

PHP CVE-2017-16642 Heap Based Buffer Overflow Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101745

Google Android NVIDIA Components CVE-2017-6264 Privilege Escalation Vulnerability
2017-11-10
http://www.securityfocus.com/bid/101744

Apache Tomcat CVE-2017-5648 Information Disclosure Vulnerability
2017-11-10
http://www.securityfocus.com/bid/97530

Apache Tomcat CVE-2017-12617 Incomplete Fix Remote Code Execution Vulnerability
2017-11-10
http://www.securityfocus.com/bid/100954

Apache Tomcat CVE-2017-12616 Information Disclosure Vulnerability
2017-11-10
http://www.securityfocus.com/bid/100897

Apache Tomcat CVE-2017-7675 Directory Traversal Vulnerability
2017-11-10
http://www.securityfocus.com/bid/100256

Apache Tomcat CVE-2017-12615 Remote Code Execution Vulnerability
2017-11-10
http://www.securityfocus.com/bid/100901

Apache Tomcat CVE-2017-5651 Information Disclosure Vulnerability
2017-11-10
http://www.securityfocus.com/bid/97544

Apache Tomcat CVE-2017-5650 Denial of Service Vulnerability
2017-11-10
http://www.securityfocus.com/bid/97531

Apache Tomcat CVE-2017-5664 Security Bypass Vulnerability
2017-11-10
http://www.securityfocus.com/bid/98888

Apache Tomcat CVE-2017-7674 Security Bypass Vulnerability
2017-11-10
http://www.securityfocus.com/bid/100280

SANS News

Battling e-mail phishing

Threatpost

Eavesdropper Vulnerability Exposes Mobile Call, Text Data

Exploint

 

9.11.2017

Bugtraq

AST-2017-009: Buffer overflow in pjproject header parsing can cause crash in Asterisk 2017-11-08
Asterisk Security Team (security asterisk org)

AST-2017-010: Buffer overflow in CDR's set user 2017-11-08
Asterisk Security Team (security asterisk org)

AST-2017-011: Memory leak in pjsip session resource 2017-11-08
Asterisk Security Team (security asterisk org)

[SECURITY] [DSA 4025-1] libpam4j security update 2017-11-08
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4021-1] otrs2 security update 2017-11-07
Moritz Muehlenhoff (jmm debian org)

Malware

 

Phishing

Chase Online

9th November 2017

Urgent! Apply for your Chase
Account Update

Vulnerebility

PHP CVE-2017-16642 Heap Based Buffer Overflow Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101745

Google Android NVIDIA Components CVE-2017-6264 Privilege Escalation Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101744

Apache Tomcat CVE-2017-5648 Information Disclosure Vulnerability
2017-11-09
http://www.securityfocus.com/bid/97530

Apache Tomcat CVE-2017-12617 Incomplete Fix Remote Code Execution Vulnerability
2017-11-09
http://www.securityfocus.com/bid/100954

Apache Tomcat CVE-2017-12616 Information Disclosure Vulnerability
2017-11-09
http://www.securityfocus.com/bid/100897

Apache Tomcat CVE-2017-7675 Directory Traversal Vulnerability
2017-11-09
http://www.securityfocus.com/bid/100256

Apache Tomcat CVE-2017-12615 Remote Code Execution Vulnerability
2017-11-09
http://www.securityfocus.com/bid/100901

Apache Tomcat CVE-2017-5651 Information Disclosure Vulnerability
2017-11-09
http://www.securityfocus.com/bid/97544

Apache Tomcat CVE-2017-5650 Denial of Service Vulnerability
2017-11-09
http://www.securityfocus.com/bid/97531

Apache Tomcat CVE-2017-5664 Security Bypass Vulnerability
2017-11-09
http://www.securityfocus.com/bid/98888

Apache Tomcat CVE-2017-7674 Security Bypass Vulnerability
2017-11-09
http://www.securityfocus.com/bid/100280

Google Android Media Framework Multiple Security Vulnerabilities
2017-11-09
http://www.securityfocus.com/bid/101717

Google Android System Component Multiple Security Vulnerabilities
2017-11-09
http://www.securityfocus.com/bid/101718

Joomla! CVE-2017-16633 Information Disclosure Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101702

Joomla! CVE-2017-16634 Security Bypass Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101701

McAfee Network Data Loss Prevention CVE-2017-3934 Man in the Middle Security Bypass Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101695

Savitech USB Audio Driver CVE-2017-9758 Security Bypass Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101700

Joomla! Zh YandexMap Component CVE-2017-15966 SQL Injection Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101694

IEEE P1735 Multiple Cryptographic Local Security Weaknesses
2017-11-09
http://www.securityfocus.com/bid/101699

LibTIFF CVE-2017-16232 Multiple Local Memory Corruption Vulnerabilities
2017-11-09
http://www.securityfocus.com/bid/101696

Apple iOS/WatchOS/tvOS CVE-2017-13849 Denial of Service Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101691

Apache Hive CVE-2017-12625 Information Disclosure Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101686

MongoDB CVE-2017-15535 Memory Corruption Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101689

Google Chrome Prior to 62.0.3202.89 Stack Buffer Overflow and Denial of Service Vulnerabilities
2017-11-09
http://www.securityfocus.com/bid/101692

Linux Kernel 'arch/powerpc/kvm/powerpc.c' Local Denial of Service Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101693

IBM OpenPages GRC Platform CVE-2017-1290 Unspecified Cross Site Scripting Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101684

PCRE CVE-2017-16231 Local Stack Buffer Overflow Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101688

FFmpeg CVE-2017-15672 Out-of-Bounds Read Memory Corruption Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101690

IBM BigFix Platform CVE-2017-1221 Security Weakness
2017-11-09
http://www.securityfocus.com/bid/101683

Siemens SIMATIC PCS 7 CVE-2017-14023 Denial of Service Vulnerability
2017-11-09
http://www.securityfocus.com/bid/101680

SANS News

What is My IP Again?

Threatpost

Hundreds of Millions in Digital Currency Remains Frozen

Google Patches KRACK Vulnerability in Android

Privacy Clouds Form Over Mantistek Gaming Keyboard

Exploint

 

8.11.2017

Bugtraq

[SECURITY] [DSA 4021-1] otrs2 security update 2017-11-07
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4020-1] chromium-browser security update 2017-11-07
Michael Gilbert (mgilbert debian org)

CVE-2017-9096 iText XML External Entity Vulnerability 2017-11-06
Advisories (advisories compass-security com)

Malware

Downloader.Dydoxic

Phishing

 

Vulnerebility

Google Android Media Framework Multiple Security Vulnerabilities
2017-11-08
http://www.securityfocus.com/bid/101717

Google Android System Component Multiple Security Vulnerabilities
2017-11-08
http://www.securityfocus.com/bid/101718

Joomla! CVE-2017-16633 Information Disclosure Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101702

Joomla! CVE-2017-16634 Security Bypass Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101701

McAfee Network Data Loss Prevention CVE-2017-3934 Man in the Middle Security Bypass Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101695

Savitech USB Audio Driver CVE-2017-9758 Security Bypass Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101700

Joomla! Zh YandexMap Component CVE-2017-15966 SQL Injection Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101694

IEEE P1735 Multiple Cryptographic Local Security Weaknesses
2017-11-08
http://www.securityfocus.com/bid/101699

LibTIFF CVE-2017-16232 Multiple Local Memory Corruption Vulnerabilities
2017-11-08
http://www.securityfocus.com/bid/101696

Apple iOS/WatchOS/tvOS CVE-2017-13849 Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101691

Apache Hive CVE-2017-12625 Information Disclosure Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101686

MongoDB CVE-2017-15535 Memory Corruption Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101689

Google Chrome Prior to 62.0.3202.89 Stack Buffer Overflow and Denial of Service Vulnerabilities
2017-11-08
http://www.securityfocus.com/bid/101692

Linux Kernel 'arch/powerpc/kvm/powerpc.c' Local Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101693

IBM OpenPages GRC Platform CVE-2017-1290 Unspecified Cross Site Scripting Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101684

PCRE CVE-2017-16231 Local Stack Buffer Overflow Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101688

FFmpeg CVE-2017-15672 Out-of-Bounds Read Memory Corruption Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101690

IBM BigFix Platform CVE-2017-1221 Security Weakness
2017-11-08
http://www.securityfocus.com/bid/101683

Siemens SIMATIC PCS 7 CVE-2017-14023 Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101680

Drupal Automated Logout Module HTML Injection Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101681

Fortinet FortiOS CVE-2017-7739 Cross Site Scripting Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101679

Advantech WebAccess Multiple Remote Code Execution Vulnerabilities
2017-11-08
http://www.securityfocus.com/bid/101685

Fortinet FortiClient CVE-2016-8493 Privilege Escalation Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101682

Linux Kernel CVE-2017-12193 Null Pointer Dereference Local Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101678

Cisco IOS XE Software CVE-2017-12319 Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101676

Symantec Endpoint Protection CVE-2017-6331 Local Security Bypass Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101502

Symantec Endpoint Protection CVE-2017-13680 Arbitrary File Deletion Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101503

SchedMD Slurm CVE-2017-15566 Privilege Escalation Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101675

Avaya IP Office Contact Center CVE-2017-11309 Remote Buffer Overflow Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101674

Symantec Endpoint Protection Manager CVE-2017-13681 Local Privilege Escalation Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101504

Joomla! CVE-2017-16633 Information Disclosure Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101702

Joomla! CVE-2017-16634 Security Bypass Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101701

McAfee Network Data Loss Prevention CVE-2017-3934 Man in the Middle Security Bypass Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101695

Savitech USB Audio Driver CVE-2017-9758 Security Bypass Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101700

Joomla! Zh YandexMap Component CVE-2017-15966 SQL Injection Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101694

IEEE P1735 Multiple Cryptographic Local Security Weaknesses
2017-11-08
http://www.securityfocus.com/bid/101699

LibTIFF CVE-2017-16232 Multiple Local Memory Corruption Vulnerabilities
2017-11-08
http://www.securityfocus.com/bid/101696

Apple iOS/WatchOS/tvOS CVE-2017-13849 Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101691

Apache Hive CVE-2017-12625 Information Disclosure Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101686

MongoDB CVE-2017-15535 Memory Corruption Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101689

Google Chrome Prior to 62.0.3202.89 Stack Buffer Overflow and Denial of Service Vulnerabilities
2017-11-08
http://www.securityfocus.com/bid/101692

Linux Kernel 'arch/powerpc/kvm/powerpc.c' Local Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101693

IBM OpenPages GRC Platform CVE-2017-1290 Unspecified Cross Site Scripting Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101684

PCRE CVE-2017-16231 Local Stack Buffer Overflow Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101688

FFmpeg CVE-2017-15672 Out-of-Bounds Read Memory Corruption Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101690

IBM BigFix Platform CVE-2017-1221 Security Weakness
2017-11-08
http://www.securityfocus.com/bid/101683

Siemens SIMATIC PCS 7 CVE-2017-14023 Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101680

Drupal Automated Logout Module HTML Injection Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101681

Fortinet FortiOS CVE-2017-7739 Cross Site Scripting Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101679

Advantech WebAccess Multiple Remote Code Execution Vulnerabilities
2017-11-08
http://www.securityfocus.com/bid/101685

Fortinet FortiClient CVE-2016-8493 Privilege Escalation Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101682

Linux Kernel CVE-2017-12193 Null Pointer Dereference Local Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101678

Cisco IOS XE Software CVE-2017-12319 Denial of Service Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101676

Symantec Endpoint Protection CVE-2017-6331 Local Security Bypass Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101502

Symantec Endpoint Protection CVE-2017-13680 Arbitrary File Deletion Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101503

SchedMD Slurm CVE-2017-15566 Privilege Escalation Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101675

Avaya IP Office Contact Center CVE-2017-11309 Remote Buffer Overflow Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101674

Symantec Endpoint Protection Manager CVE-2017-13681 Local Privilege Escalation Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101504

Multiple MitraStar Routers CVE-2017-16523 Local Privilege Escalation Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101672

Multiple EMC Products CVE-2017-14375 Authentication Bypass Vulnerability
2017-11-08
http://www.securityfocus.com/bid/101673

SANS News

SSH Server "Time to Live"? Less than a cup of coffee!

Threatpost

Texas Shooter’s Phone Encrypted


Assessing Weaknesses in Public Key Infrastructure

Brother Printers Susceptible to Remote Denial of Service Attacks

Exploint

ManageEngine Applications Manager 13 - SQL Injection

pfSense 2.3.1_1 - Command Execution

7.11.2017

Bugtraq

[SECURITY] [DSA 4020-1] chromium-browser security update 2017-11-07
Michael Gilbert (mgilbert debian org)

CVE-2017-9096 iText XML External Entity Vulnerability 2017-11-06
Advisories (advisories compass-security com)

Call for papers - WorldCIST'18 - Naples, Italy - Extended deadline: November 22 2017-11-05
ML (marialemos72 gmail com)

Malware

RANSOM_BADRABBIT.SMA

RANSOM_BADRABBIT.A

Phishing

PayPal

6th November 2017

Your Monthly Payment was
recently declined.

Vulnerebility

Symantec Endpoint Protection CVE-2017-6331 Local Security Bypass Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101502

Symantec Endpoint Protection CVE-2017-13680 Arbitrary File Deletion Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101503

SchedMD Slurm CVE-2017-15566 Privilege Escalation Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101675

Avaya IP Office Contact Center CVE-2017-11309 Remote Buffer Overflow Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101674

Symantec Endpoint Protection Manager CVE-2017-13681 Local Privilege Escalation Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101504

Multiple MitraStar Routers CVE-2017-16523 Local Privilege Escalation Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101672

Multiple EMC Products CVE-2017-14375 Authentication Bypass Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101673

GNU Emacs CVE-2017-1000383 Local Information Disclosure Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101671

Foxit Reader CVE-2017-10948 Use After Free Remote Code Execution Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101670

Avaya IP Office Contact Center CVE-2017-12969 Remote Buffer Overflow Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101667

OpenSSL CVE-2017-3736 Information Disclosure Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101666

IBM OpenPages GRC Platform CVE-2017-1148 Information Disclosure Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101668

Tor Browser CVE-2017-16541 Information Disclosure Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101665

Splunk Multiple Local Privilege Escalation Vulnerabilities
2017-11-07
http://www.securityfocus.com/bid/101664

Ayukov NFTPD CVE-2017-15222 Stack Buffer Overflow Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101602

Mura CMS 'tasks/feed/readRSS.cfm' XML External Entity Injection Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101603

WordPress Ultimate Form Builder Lite Plugin 'wp-admin/admin-ajax.php' SQL Injection Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101604

GNU wget CVE-2017-13090 Heap Buffer Overflow Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101590

GNU wget CVE-2017-13089 Stack Buffer Overflow Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101592

IBM OpenPages CVE-2017-1147 Cross Site Scripting Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101663

HP Performance Center CVE-2017-14359 Unspecified Cross Site Scripting Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101659

IBM OpenPages CVE-2016-3048 Cross Site Scripting Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101660

ABB FOX515T CVE-2017-14025 Local Information Disclosure Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101662

GraphicsMagick CVE-2017-16352 Heap Buffer Overflow Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101658

Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101661

Cisco Wireless LAN Controller CVE-2017-12275 Denial of Service Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101657

WordPress 'wpdb::prepare()' Method SQL Injection Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101638

IBM OpenPages GRC Platform CVE-2017-1333 Information Disclosure Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101656

Cisco Aironet Access Points CVE-2017-12273 Denial of Service Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101655

Cisco WebEx Meetings Server CVE-2017-12294 Cross Site Scripting Vulnerability
2017-11-07
http://www.securityfocus.com/bid/101654

SANS News

Interesting VBA Dropper

Threatpost

US-CERT Warns of Crypto Bugs in IEEE Standard

Cisco Patches DoS Flaw in BGP over Ethernet VPN Implementation

1M Downloads Later, Google Pulls Phony WhatsApp From Google Play

Exploint

Linux Kernel 4.13 (Ubuntu 17.10) - 'waitid()' SMEP/SMAP Privilege Escalation

SMPlayer 17.11.0 - '.m3u' Buffer Overflow (PoC)  

Logitech Media Server 7.9.0 - 'Radio URL' Cross-Site Scripting

Logitech Media Server 7.9.0 - 'favorites' Cross-Site Scripting

SMPlayer 17.11.0 - '.m3u' Buffer Overflow (PoC)

Avaya OfficeScan (IPO) < 10.1 - ActiveX Buffer Overflow

6.11.2017

Bugtraq

Call for papers - WorldCIST'18 - Naples, Italy - Extended deadline: November 22 2017-11-05
ML (marialemos72 gmail com)

Webmin v1.850 Remote Code Execution (hyp3rlinx / apparitionsec) 2017-11-05
apparitionsec gmail com

[SECURITY] [DSA 4019-1] imagemagick security update 2017-11-05
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4016-1] irssi security update 2017-11-03
Salvatore Bonaccorso (carnil debian org)

KL-001-2017-022 : Splunk Local Privilege Escalation 2017-11-03
KoreLogic Disclosures (disclosures korelogic com)

[SECURITY] [DSA 4015-1] openjdk-8 security update 2017-11-02
Moritz Muehlenhoff (jmm debian org)

Malware

 

Phishing

PayPal

6th November 2017

Your Monthly Payment was
recently declined.

Bank of America

5th November 2017

Bank of America Alert: Account
Suspicious

Vulnerebility

GNU Emacs CVE-2017-1000383 Local Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101671

Foxit Reader CVE-2017-10948 Use After Free Remote Code Execution Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101670

Avaya IP Office Contact Center CVE-2017-12969 Remote Buffer Overflow Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101667

OpenSSL CVE-2017-3736 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101666

IBM OpenPages GRC Platform CVE-2017-1148 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101668

Tor Browser CVE-2017-16541 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101665

Splunk Multiple Local Privilege Escalation Vulnerabilities
2017-11-06
http://www.securityfocus.com/bid/101664

Ayukov NFTPD CVE-2017-15222 Stack Buffer Overflow Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101602

Mura CMS 'tasks/feed/readRSS.cfm' XML External Entity Injection Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101603

WordPress Ultimate Form Builder Lite Plugin 'wp-admin/admin-ajax.php' SQL Injection Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101604

GNU wget CVE-2017-13090 Heap Buffer Overflow Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101590

GNU wget CVE-2017-13089 Stack Buffer Overflow Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101592

IBM OpenPages CVE-2017-1147 Cross Site Scripting Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101663

HP Performance Center CVE-2017-14359 Unspecified Cross Site Scripting Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101659

IBM OpenPages CVE-2016-3048 Cross Site Scripting Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101660

ABB FOX515T CVE-2017-14025 Local Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101662

GraphicsMagick CVE-2017-16352 Heap Buffer Overflow Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101658

Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101661

Cisco Wireless LAN Controller CVE-2017-12275 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101657

WordPress 'wpdb::prepare()' Method SQL Injection Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101638

IBM OpenPages GRC Platform CVE-2017-1333 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101656

Cisco Aironet Access Points CVE-2017-12273 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101655

Cisco WebEx Meetings Server CVE-2017-12294 Cross Site Scripting Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101654

GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101653

Cisco Wireless LAN Controller CVE-2017-12282 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101650

Cisco WebEx Meetings Server CVE-2017-12295 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101651

Multiple Cisco Products CVE-2017-12243 Local Command Injection Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101652

Cisco Aironet CVE-2017-12281 Authentication Bypass Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101649

Cisco Application Policy Infrastructure Controller Enterprise Module Access Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101647

Cisco Aironet Access Points CVE-2017-12274 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101648

IBM OpenPages CVE-2017-1147 Cross Site Scripting Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101663

HP Performance Center CVE-2017-14359 Unspecified Cross Site Scripting Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101659

IBM OpenPages CVE-2016-3048 Cross Site Scripting Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101660

ABB FOX515T CVE-2017-14025 Local Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101662

GraphicsMagick CVE-2017-16352 Heap Buffer Overflow Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101658

Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101661

Cisco Wireless LAN Controller CVE-2017-12275 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101657

WordPress 'wpdb::prepare()' Method SQL Injection Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101638

IBM OpenPages GRC Platform CVE-2017-1333 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101656

Cisco Aironet Access Points CVE-2017-12273 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101655

Cisco WebEx Meetings Server CVE-2017-12294 Cross Site Scripting Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101654

GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101653

Cisco Wireless LAN Controller CVE-2017-12282 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101650

Cisco WebEx Meetings Server CVE-2017-12295 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101651

Multiple Cisco Products CVE-2017-12243 Local Command Injection Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101652

Cisco Aironet CVE-2017-12281 Authentication Bypass Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101649

Cisco Application Policy Infrastructure Controller Enterprise Module Access Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101647

Cisco Aironet Access Points CVE-2017-12274 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101648

Cisco Aironet 3800 Series Access Points CVE-2017-12283 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101645

Cisco Wireless LAN Controller CVE-2017-12280 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101646

Cisco IOS Software for Aironet Access Points CVE-2017-12279 Information Disclosure Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101643

Apache Wicket CVE-2012-5636 Cross Site Scripting Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101644

Cisco Wireless LAN Controller CVE-2017-12278 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101642

Cisco Identity Services Engine CVE-2017-12261 Privilege Escalation Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101641

Apple macOS and macOS Server CVE-2017-13826 Multiple Unspecified Security Vulnerabilities
2017-11-06
http://www.securityfocus.com/bid/101637

Cisco Prime Collaboration Provisioning CVE-2017-12276 SQL Injection Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101640

OpenText Documentum Content Server Multiple Security Vulnerabilities
2017-11-06
http://www.securityfocus.com/bid/101639

Multiple F5 BIG-IP Products CVE-2017-6161 Security Bypass Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101636

Multiple F5 BIG-IP Products CVE-2017-6162 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101635

Multiple F5 BIG-IP Products CVE-2017-6159 Denial of Service Vulnerability
2017-11-06
http://www.securityfocus.com/bid/101633

SANS News

Extracting the text from PDF documents

Threatpost

 

Exploint

Actiontec C1000A Modem - Backdoor Account

WordPress Plugin Userpro < 4.9.17.1 - Authentication Bypass

Ipswitch WS_FTP Professional < 12.6.0.3 - Local Buffer Overflow (SEH)

Avaya OfficeScan (IPO) < 10.1 - 'SoftConsole' Buffer Overflow (SEH)

Avaya OfficeScan (IPO) < 10.1 - ActiveX Buffer Overflow

Debut Embedded httpd 1.20 - Denial of Service

5.11.2017

Bugtraq

[SECURITY] [DSA 4015-1] openjdk-8 security update 2017-11-02
Moritz Muehlenhoff (jmm debian org)

Malware

 

Phishing

Netflix Inc.

3rd November 2017

SECURITY ALERT : ABOUT YOUR
ACCOUNT !!

Vulnerebility

HP Performance Center CVE-2017-14359 Unspecified Cross Site Scripting Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101659

IBM OpenPages CVE-2016-3048 Cross Site Scripting Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101660

ABB FOX515T CVE-2017-14025 Local Information Disclosure Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101662

GraphicsMagick CVE-2017-16352 Heap Buffer Overflow Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101658

Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101661

Cisco Wireless LAN Controller CVE-2017-12275 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101657

WordPress 'wpdb::prepare()' Method SQL Injection Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101638

IBM OpenPages GRC Platform CVE-2017-1333 Information Disclosure Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101656

Cisco Aironet Access Points CVE-2017-12273 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101655

Cisco WebEx Meetings Server CVE-2017-12294 Cross Site Scripting Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101654

GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101653

Cisco Wireless LAN Controller CVE-2017-12282 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101650

Cisco WebEx Meetings Server CVE-2017-12295 Information Disclosure Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101651

Multiple Cisco Products CVE-2017-12243 Local Command Injection Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101652

Cisco Aironet CVE-2017-12281 Authentication Bypass Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101649

Cisco Application Policy Infrastructure Controller Enterprise Module Access Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101647

Cisco Aironet Access Points CVE-2017-12274 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101648

Cisco Aironet 3800 Series Access Points CVE-2017-12283 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101645

Cisco Wireless LAN Controller CVE-2017-12280 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101646

Cisco IOS Software for Aironet Access Points CVE-2017-12279 Information Disclosure Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101643

Apache Wicket CVE-2012-5636 Cross Site Scripting Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101644

Cisco Wireless LAN Controller CVE-2017-12278 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101642

Cisco Identity Services Engine CVE-2017-12261 Privilege Escalation Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101641

Apple macOS and macOS Server CVE-2017-13826 Multiple Unspecified Security Vulnerabilities
2017-11-05
http://www.securityfocus.com/bid/101637

Cisco Prime Collaboration Provisioning CVE-2017-12276 SQL Injection Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101640

OpenText Documentum Content Server Multiple Security Vulnerabilities
2017-11-05
http://www.securityfocus.com/bid/101639

Multiple F5 BIG-IP Products CVE-2017-6161 Security Bypass Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101636

Multiple F5 BIG-IP Products CVE-2017-6162 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101635

Multiple F5 BIG-IP Products CVE-2017-6159 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101633

Multiple F5 BIG-IP Products CVE-2017-6160 Denial of Service Vulnerability
2017-11-05
http://www.securityfocus.com/bid/101632

HP Performance Center CVE-2017-14359 Unspecified Cross Site Scripting Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101659

IBM OpenPages CVE-2016-3048 Cross Site Scripting Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101660

ABB FOX515T CVE-2017-14025 Local Information Disclosure Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101662

GraphicsMagick CVE-2017-16352 Heap Buffer Overflow Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101658

Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101661

Cisco Wireless LAN Controller CVE-2017-12275 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101657

WordPress 'wpdb::prepare()' Method SQL Injection Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101638

IBM OpenPages GRC Platform CVE-2017-1333 Information Disclosure Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101656

Cisco Aironet Access Points CVE-2017-12273 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101655

Cisco WebEx Meetings Server CVE-2017-12294 Cross Site Scripting Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101654

GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101653

Cisco Wireless LAN Controller CVE-2017-12282 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101650

Cisco WebEx Meetings Server CVE-2017-12295 Information Disclosure Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101651

Multiple Cisco Products CVE-2017-12243 Local Command Injection Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101652

Cisco Aironet CVE-2017-12281 Authentication Bypass Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101649

Cisco Application Policy Infrastructure Controller Enterprise Module Access Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101647

Cisco Aironet Access Points CVE-2017-12274 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101648

Cisco Aironet 3800 Series Access Points CVE-2017-12283 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101645

Cisco Wireless LAN Controller CVE-2017-12280 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101646

Cisco IOS Software for Aironet Access Points CVE-2017-12279 Information Disclosure Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101643

Apache Wicket CVE-2012-5636 Cross Site Scripting Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101644

Cisco Wireless LAN Controller CVE-2017-12278 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101642

Cisco Identity Services Engine CVE-2017-12261 Privilege Escalation Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101641

Apple macOS and macOS Server CVE-2017-13826 Multiple Unspecified Security Vulnerabilities
2017-11-04
http://www.securityfocus.com/bid/101637

Cisco Prime Collaboration Provisioning CVE-2017-12276 SQL Injection Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101640

OpenText Documentum Content Server Multiple Security Vulnerabilities
2017-11-04
http://www.securityfocus.com/bid/101639

Multiple F5 BIG-IP Products CVE-2017-6161 Security Bypass Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101636

Multiple F5 BIG-IP Products CVE-2017-6162 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101635

Multiple F5 BIG-IP Products CVE-2017-6159 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101633

Multiple F5 BIG-IP Products CVE-2017-6160 Denial of Service Vulnerability
2017-11-04
http://www.securityfocus.com/bid/101632

SANS News

PDF documents & URLs

Threatpost

Tor Browser Users Urged to Patch Critical ‘TorMoil’ Vulnerability

Poisoned Search Results Deliver Banking Malware

Siemens Update Patches SIMATIC PCS 7 Bug in Some Versions

Exploint

Oracle PeopleSoft Enterprise PeopleTools < 8.55 - Remote Code Execution Via Blind...

3.11.2017

Bugtraq

 

Malware

 

Phishing

Netflix Inc.

3rd November 2017

SECURITY ALERT : ABOUT YOUR
ACCOUNT !!

Apple Security Alert

3rd November 2017

Your receipt from Apple.

AOL

2nd November 2017

Info

Vulnerebility

WordPress 'wpdb::prepare()' Method SQL Injection Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101638

Cisco Aironet Access Points CVE-2017-12273 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101655

Cisco WebEx Meetings Server CVE-2017-12294 Cross Site Scripting Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101654

GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101653

Cisco Wireless LAN Controller CVE-2017-12282 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101650

Cisco WebEx Meetings Server CVE-2017-12295 Information Disclosure Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101651

Multiple Cisco Products CVE-2017-12243 Local Command Injection Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101652

Cisco Aironet CVE-2017-12281 Authentication Bypass Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101649

Cisco Application Policy Infrastructure Controller Enterprise Module Access Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101647

Cisco Aironet Access Points CVE-2017-12274 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101648

Cisco Aironet 3800 Series Access Points CVE-2017-12283 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101645

Cisco Wireless LAN Controller CVE-2017-12280 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101646

Cisco IOS Software for Aironet Access Points CVE-2017-12279 Information Disclosure Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101643

Apache Wicket CVE-2012-5636 Cross Site Scripting Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101644

Cisco Wireless LAN Controller CVE-2017-12278 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101642

Cisco Identity Services Engine CVE-2017-12261 Privilege Escalation Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101641

Apple macOS and macOS Server CVE-2017-13826 Multiple Unspecified Security Vulnerabilities
2017-11-03
http://www.securityfocus.com/bid/101637

Cisco Prime Collaboration Provisioning CVE-2017-12276 SQL Injection Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101640

OpenText Documentum Content Server Multiple Security Vulnerabilities
2017-11-03
http://www.securityfocus.com/bid/101639

Multiple F5 BIG-IP Products CVE-2017-6161 Security Bypass Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101636

Multiple F5 BIG-IP Products CVE-2017-6162 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101635

Multiple F5 BIG-IP Products CVE-2017-6159 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101633

Multiple F5 BIG-IP Products CVE-2017-6160 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101632

Multiple F5 BIG-IP Products CVE-2017-6157 Remote Command Execution Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101634

Apache Traffic Server CVE-2015-3249 Multiple Remote Code Execution Vulnerabilities
2017-11-03
http://www.securityfocus.com/bid/101631

GNU Wget CVE-2016-7098 Security Bypass Vulnerability
2017-11-03
http://www.securityfocus.com/bid/93157

Apache Traffic Server CVE-2014-3624 Access Bypass Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101630

HP ArcSight ESM and ArcSight ESM Express CVE-2017-14356 SQL Injection Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101627

McAfee Network Data Loss Prevention CVE-2017-3933 Unspecified Cross Site Scripting Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101628

Trihedral Engineering Limited VTScada ICSA-17-304-02 Multiple Local Security Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101629WordPress 'wpdb::prepare()' Method SQL Injection Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101638

Cisco Aironet Access Points CVE-2017-12273 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101655

Cisco WebEx Meetings Server CVE-2017-12294 Cross Site Scripting Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101654

GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101653

Cisco Wireless LAN Controller CVE-2017-12282 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101650

Cisco WebEx Meetings Server CVE-2017-12295 Information Disclosure Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101651

Multiple Cisco Products CVE-2017-12243 Local Command Injection Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101652

Cisco Aironet CVE-2017-12281 Authentication Bypass Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101649

Cisco Application Policy Infrastructure Controller Enterprise Module Access Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101647

Cisco Aironet Access Points CVE-2017-12274 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101648

Cisco Aironet 3800 Series Access Points CVE-2017-12283 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101645

Cisco Wireless LAN Controller CVE-2017-12280 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101646

Cisco IOS Software for Aironet Access Points CVE-2017-12279 Information Disclosure Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101643

Apache Wicket CVE-2012-5636 Cross Site Scripting Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101644

Cisco Wireless LAN Controller CVE-2017-12278 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101642

Cisco Identity Services Engine CVE-2017-12261 Privilege Escalation Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101641

Apple macOS and macOS Server CVE-2017-13826 Multiple Unspecified Security Vulnerabilities
2017-11-03
http://www.securityfocus.com/bid/101637

Cisco Prime Collaboration Provisioning CVE-2017-12276 SQL Injection Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101640

OpenText Documentum Content Server Multiple Security Vulnerabilities
2017-11-03
http://www.securityfocus.com/bid/101639

Multiple F5 BIG-IP Products CVE-2017-6161 Security Bypass Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101636

Multiple F5 BIG-IP Products CVE-2017-6162 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101635

Multiple F5 BIG-IP Products CVE-2017-6159 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101633

Multiple F5 BIG-IP Products CVE-2017-6160 Denial of Service Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101632

Multiple F5 BIG-IP Products CVE-2017-6157 Remote Command Execution Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101634

Apache Traffic Server CVE-2015-3249 Multiple Remote Code Execution Vulnerabilities
2017-11-03
http://www.securityfocus.com/bid/101631

GNU Wget CVE-2016-7098 Security Bypass Vulnerability
2017-11-03
http://www.securityfocus.com/bid/93157

Apache Traffic Server CVE-2014-3624 Access Bypass Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101630

HP ArcSight ESM and ArcSight ESM Express CVE-2017-14356 SQL Injection Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101627

McAfee Network Data Loss Prevention CVE-2017-3933 Unspecified Cross Site Scripting Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101628

Trihedral Engineering Limited VTScada ICSA-17-304-02 Multiple Local Security Vulnerability
2017-11-03
http://www.securityfocus.com/bid/101629

SANS News

Attacking SSH Over the Wire - Go Red Team!

Simple Analysis of an Obfuscated JAR File

Threatpost

Taking HTTPS Denial to an Absurd Level

Chain of 11 Bugs Takes Down Galaxy S8 at Mobile Pwn2Own

WordPress Delivers Second Patch For SQL Injection Bug

Exploint

Vir.IT eXplorer Anti-Virus - Privilege Escalation

tnftp - 'savefile' Arbitrary Command Execution (Metasploit)

Ladon Framework for Python 0.9.40 - XML External Entity Expansion

WordPress Plugin JTRT Responsive Tables 4.1 - SQL Injection

GraphicsMagick - Memory Disclosure / Heap Overflow

2.11.2017

Bugtraq

 

Malware

 

Phishing

AOL

2nd November 2017

Info

AOL

1st November 2017

More @Aol 2017
 

Vulnerebility

Multiple Cisco Products CVE-2017-12243 Local Command Injection Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101652

Cisco Aironet CVE-2017-12281 Authentication Bypass Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101649

Cisco Application Policy Infrastructure Controller Enterprise Module Access Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101647

Cisco Aironet Access Points CVE-2017-12274 Denial of Service Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101648

Cisco Aironet 3800 Series Access Points CVE-2017-12283 Denial of Service Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101645

Cisco Wireless LAN Controller CVE-2017-12280 Denial of Service Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101646

Cisco IOS Software for Aironet Access Points CVE-2017-12279 Information Disclosure Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101643

Apache Wicket CVE-2012-5636 Cross Site Scripting Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101644

Cisco Wireless LAN Controller CVE-2017-12278 Denial of Service Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101642

Cisco Identity Services Engine CVE-2017-12261 Privilege Escalation Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101641

Apple macOS and macOS Server CVE-2017-13826 Multiple Unspecified Security Vulnerabilities
2017-11-02
http://www.securityfocus.com/bid/101637

WordPress 'wpdb::prepare()' Method SQL Injection Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101638

Cisco Prime Collaboration Provisioning CVE-2017-12276 SQL Injection Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101640

OpenText Documentum Content Server Multiple Security Vulnerabilities
2017-11-02
http://www.securityfocus.com/bid/101639

Multiple F5 BIG-IP Products CVE-2017-6161 Security Bypass Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101636

Multiple F5 BIG-IP Products CVE-2017-6162 Denial of Service Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101635

Multiple F5 BIG-IP Products CVE-2017-6159 Denial of Service Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101633

Multiple F5 BIG-IP Products CVE-2017-6160 Denial of Service Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101632

Multiple F5 BIG-IP Products CVE-2017-6157 Remote Command Execution Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101634

Apache Traffic Server CVE-2015-3249 Multiple Remote Code Execution Vulnerabilities
2017-11-02
http://www.securityfocus.com/bid/101631

GNU Wget CVE-2016-7098 Security Bypass Vulnerability
2017-11-02
http://www.securityfocus.com/bid/93157

Apache Traffic Server CVE-2014-3624 Access Bypass Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101630

HP ArcSight ESM and ArcSight ESM Express CVE-2017-14356 SQL Injection Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101627

McAfee Network Data Loss Prevention CVE-2017-3933 Unspecified Cross Site Scripting Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101628

Trihedral Engineering Limited VTScada ICSA-17-304-02 Multiple Local Security Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101629

EMC AppSync CVE-2017-14376 Local Hardcoded Credentials Information Disclosure Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101626

Joomla! NS Download Shop Component CVE-2017-15965 SQL Injection Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101624

Apache jUDDI CVE-2009-1197 Security Bypass Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101625

D-Link DSL-2740E ADSL Router Multiple HTML Injection Vulnerabilities
2017-11-02
http://www.securityfocus.com/bid/101622

Apache jUDDI CVE-2009-1198 Cross Site Scripting Vulnerability
2017-11-02
http://www.securityfocus.com/bid/101623

SANS News

 

Threatpost

WordPress Delivers Second Patch For SQL Injection Bug

Silence Gang Borrows From Carbanak To Steal From Banks

Exploint

ZyXEL PK5001Z Modem - Backdoor Account

Ingenious School Management System 2.3.0 - 'friend_index' SQL injection

OctoberCMS 1.0.426 (Build 426) - Cross-Site Request Forgery

Easy MPEG/AVI/DIVX/WMV/RM to DVD - 'Enter User Name' Buffer Overflow (SEH)

WhatsApp 2.17.52 - Memory Corruption

1.11.2017

Bugtraq

APPLE-SA-2017-10-31-11 Additional information for APPLE-SA-2017-09-20-3 tvOS 11 2017-10-31
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-10-31-2 macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, Security Update 2017-004 El Capitan 2017-10-31
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-10-31-12 Additional information for APPLE-SA-2017-09-25-9 macOS Server 5.4 2017-10-31
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-10-31-3 tvOS 11.1 2017-10-31
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-10-31-10 Additional information for APPLE-SA-2017-09-20-2 watchOS 4 2017-10-31
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-10-31-7 iCloud for Windows 7.1 2017-10-31
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-10-31-9 Additional information for APPLE-SA-2017-09-19-1 iOS 11 2017-10-31
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-10-31-4 watchOS 4.1 2017-10-31
Apple Product Security (product-security-noreply lists apple com)

[security bulletin] HPESBHF03785 rev.1 - HPE B-Series SAN Network Advisor Software, Multiple Remote Vulnerabilities 2017-10-30
HPE Product Security Response Team (security-alert hpe com)

[SECURITY] [DSA 4009-1] shadowsocks-libev security update 2017-10-29
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4012-1] libav security update 2017-10-30
Moritz Muehlenhoff (jmm debian org)

Malware

 

Phishing

U.S Bank Online

1st November 2017

[News] Message From U.S Bank
Online

Munk, Allison

1st November 2017

Your Reagan Account Has been
compromised

Vulnerebility

Apache Traffic Server CVE-2015-3249 Multiple Remote Code Execution Vulnerabilities
2017-11-01
http://www.securityfocus.com/bid/101631

GNU Wget CVE-2016-7098 Security Bypass Vulnerability
2017-11-01
http://www.securityfocus.com/bid/93157

Apache Traffic Server CVE-2014-3624 Access Bypass Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101630

HP ArcSight ESM and ArcSight ESM Express CVE-2017-14356 SQL Injection Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101627

McAfee Network Data Loss Prevention CVE-2017-3933 Unspecified Cross Site Scripting Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101628

Trihedral Engineering Limited VTScada ICSA-17-304-02 Multiple Local Security Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101629

EMC AppSync CVE-2017-14376 Local Hardcoded Credentials Information Disclosure Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101626

Joomla! NS Download Shop Component CVE-2017-15965 SQL Injection Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101624

Apache jUDDI CVE-2009-1197 Security Bypass Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101625

D-Link DSL-2740E ADSL Router Multiple HTML Injection Vulnerabilities
2017-11-01
http://www.securityfocus.com/bid/101622

Apache jUDDI CVE-2009-1198 Cross Site Scripting Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101623

Linux kernel CVE-2017-15951 Local Denial of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101621

Apache Subversion 'libsvn_fs_fs/fs_fs.c' Denial of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101620

JBoss KeyCloak CVE-2017-12158 Cross Site Scripting Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101618

Cisco Expressway Series and Cisco TelePresence VCS CVE-2017-12287 Denial of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101525

Multiple Barco ClickShare Base Units CVE-2017-9377 Multiple Command Injection Vulnerabilities
2017-11-01
http://www.securityfocus.com/bid/101617

JanTek JTC-200 Cross-Site Request Forgery and Authentication Bypass Vulnerabilities
2017-11-01
http://www.securityfocus.com/bid/101224

Oracle Fusion Middleware CVE-2017-10151 Remote Security Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101619

EyesOfNetwork CVE-2017-15933 SQL Injection Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101615

radare2 'libr/bin/format/elf/elf.c' Remote Denial Of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101614

IBM RSA DM CVE-2017-1295 Unspecified Information Disclosure Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101616

Multiple F5 BIG-IP Products CVE-2017-0303 Denial of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101612

radare2 'libr/bin/format/elf/elf.c' Remote Denial Of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101609

GraphicsMagick CVE-2017-15930 Denial of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101607

Apache Struts 'TextParseUtil.translateVariables()' Method Remote Code Execution Vulnerability
2017-11-01
http://www.securityfocus.com/bid/85131

GNU Binutils CVE-2017-15939 Incomplete Fix Remote Denial of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101613

GNU Binutils CVE-2017-15023 Remote Denial of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101611

GNU Binutils CVE-2017-15938 Remote Denial of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101610

GNU Binutils CVE-2017-15996 Multiple Denial of Service Vulnerabilities
2017-11-01
http://www.securityfocus.com/bid/101608

Multiple F5 BIG-IP Products CVE-2017-6163 Denial of Service Vulnerability
2017-11-01
http://www.securityfocus.com/bid/101606

SANS News

Securing SSH Services - Go Blue Team!!

Threatpost

Popular ‘Circle with Disney’ Parental Control System Riddled With 23 Vulnerabilities

Firefox Bolsters Privacy, Pulls Plug on Browser Canvas Fingerprinting

Exploint

 

31.10.2017

Bugtraq

 

Malware

W97M.Downloader.P

Phishing

 

Vulnerebility

 

SANS News

Some Powershell Malicious Code

Threatpost

Google’s reCaptcha Cracked Again

Flaw in Google Bug Tracker Exposed Reports About Unpatched Vulnerabilities

Malicious Chrome Extension Steals Data Posted to Any Website

Exploint

Oracle Java SE - Web Start jnlp XML External Entity Processing Information...

Ingenious 2.3.0 - Arbitrary File Upload