Databáze Hot News 2018 February

Databáze Hot News 2018 February - 2018 January February March April May June July August September October November December

28 .2.2018

Bugtraq

SEC Consult SA-20180228-0 :: Insecure Direct Object Reference vulnerability in TestLink Open Source Test Management 2018-02-28
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 4124-1] lucene-solr security update 2018-02-27
Moritz Muehlenhoff (jmm debian org)

[security bulletin] HPESBHF03826 rev.1 - HPE Integrated Lights-Out 3 (iLO 3) Remote Denial of Service 2018-02-27
security-alert hpe com

SEC Consult SA-20180227-0 :: OS command injection, arbitrary file upload & SQL injection in ClipBucket 2018-02-27
SEC Consult Vulnerability Lab (research sec-consult com)

ES2018-03 Asterisk pjsip sdp invalid media format description segfault 2018-02-26
Sandro Gauci (sandro enablesecurity com)

ES2018-04 Asterisk pjsip tcp segfault 2018-02-26
Sandro Gauci (sandro enablesecurity com)

ES2018-02 Asterisk pjsip sdp invalid fmtp segfault 2018-02-26
Sandro Gauci (sandro enablesecurity com)

Malware

Win32/Talkhib.A

Phishing

Vulnerebility

SANS News

How did this Memcache thing happen?

Threatpost

WordPress Users Warned of Malware Masquerading as ionCube Files

Remote Code Execution Bug Patched in Adobe Acrobat Reader DC

Revamp of ‘Pwned Passwords’ Boosts Privacy and Size of Database

Exploint

GetGo Download Manager 5.3.0.2712 - Buffer Overflow (SEH)

Concrete5 < 8.3.0 - Username / Comments Enumeration

CMS Made Simple 2.1.6 - Remote Code Execution

School Management Script 3.0.4 - Authentication Bypass

Joomla! Component K2 2.8.0 - Arbitrary File Download

MyBB My Arcade Plugin 1.3 - Cross-Site Scripting

Schools Alert Management Script 2.0.2 - Authentication Bypass

Sony Playstation 4 4.55 FW - Local Kernel

Microsoft Windows Windows 8.1/2012 R2 - SMB Denial of Service

Asterisk chan_pjsip 15.2.0 - 'SUBSCRIBE' Stack Corruption

Asterisk chan_pjsip 15.2.0 - 'SDP fmtp' Denial of Service

Asterisk chan_pjsip 15.2.0 - 'SDP' Denial of Service

Asterisk chan_pjsip 15.2.0 - 'INVITE' Denial of Service

27 .2.2018

Bugtraq

SEC Consult SA-20180227-0 :: OS command injection, arbitrary file upload & SQL injection in ClipBucket 2018-02-27
SEC Consult Vulnerability Lab (research sec-consult com)

ES2018-03 Asterisk pjsip sdp invalid media format description segfault 2018-02-26
Sandro Gauci (sandro enablesecurity com)

ES2018-04 Asterisk pjsip tcp segfault 2018-02-26
Sandro Gauci (sandro enablesecurity com)

ES2018-02 Asterisk pjsip sdp invalid fmtp segfault 2018-02-26
Sandro Gauci (sandro enablesecurity com)

ES2018-01 Asterisk pjsip subscribe stack corruption 2018-02-26
Sandro Gauci (sandro enablesecurity com)

CMS Made Simple 2.1.6 - Remote Code Execution 2018-02-26
displaymyname gmail con

[SECURITY] [DSA 4123-1] drupal7 security update 2018-02-24
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

Vulnerebility

SANS News

Malspam pushing Formbook info stealer

Threatpost

Drupal Patches Critical Bug That Leaves Platform Open to XSS Attack

Exploint

Sony Playstation 4 4.55 FW - Local Kernel

Chrome V8 - 'TranslatedState::MaterializeCapturedObjectAt' Type Confusion

Chrome V8 - 'PropertyArray' Integer Overflow

transmission - Integer Overflows Parsing Torrent Files

26 .2.2018

Bugtraq

CMS Made Simple 2.1.6 - Remote Code Execution 2018-02-26
displaymyname gmail con

[SECURITY] [DSA 4123-1] drupal7 security update 2018-02-24
Moritz Muehlenhoff (jmm debian org)

[security bulletin] MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance 2018-02-22
cyber-psrt microfocus com

Re: [CVE-2018-1000088] Stored XSS vulnerability in Doorkeeper gem v2.1.0 - v4.2.5 2018-02-22
Justin Bull (me justinbull ca)

[SECURITY] [DSA 4122-1] squid3 security update 2018-02-22
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 4120-1] linux security update 2018-02-22
Yves-Alexis Perez (corsac debian org)

Malware

Phishing

Vulnerebility

SANS News

Retrieving malware over Tor on Windows

Cracking AD Domain Passwords (Password Assessments) - Part 1 - Collecting Hashes

Threatpost

Exploint

AsusWRT LAN - Unauthenticated Remote Code Execution (Metasploit)

CloudMe Sync 1.10.9 - Stack-Based Buffer Overflow (Metasploit)

Disk Savvy Enterprise 10.4.18 - Stack-Based Buffer Overflow (Metasploit)

25 .2.2018

Bugtraq

Malware

Phishing

Vulnerebility

SANS News

Blackhole Advertising Sites with Pi-hole

Threatpost

Drupal Patches Critical Bug That Leaves Platform Open to XSS Attack

FBI Warns of Spike in W-2 Phishing Campaigns

Exploint

23.2.2018

Bugtraq

[security bulletin] MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance 2018-02-22
cyber-psrt microfocus com

Re: [CVE-2018-1000088] Stored XSS vulnerability in Doorkeeper gem v2.1.0 - v4.2.5 2018-02-22
Justin Bull (me justinbull ca)

[SECURITY] [DSA 4122-1] squid3 security update 2018-02-22
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 4120-1] linux security update 2018-02-22
Yves-Alexis Perez (corsac debian org)

[SECURITY] [DSA 4121-1] gcc-6 security update 2018-02-22
Moritz Muehlenhoff (jmm debian org)

[CORE-2017-0006] Trend Micro Email Encryption Gateway Multiple Vulnerabilities 2018-02-21
Core Security Advisories Team (advisories coresecurity com)

DefenseCode Security Advisory: PureVPN Windows Privilege Escalation Vulnerability 2018-02-21
Defense Code (defensecode defensecode com)

SEC Consult SA-20180221-0 :: Hijacking of arbitrary miSafes Mi-Cam video baby monitors 2018-02-21
SEC Consult Vulnerability Lab (research sec-consult com)

Sharutils 4.15.2 Heap-Buffer-Overflow 2018-02-21
nafiez (nafiez skins gmail com) (1 replies)

Malware

Phishing

Vulnerebility

Apple iOS/tvOS/macOS CVE-2017-7154 Local Security Bypass Vulnerability
2018-02-23
http://www.securityfocus.com/bid/103134

Radiant CVE-2018-7261 Multiple HTML Injection Vulnerabilities
2018-02-21
http://www.securityfocus.com/bid/103080

Cisco Jabber CVE-2018-0201 Cross Site Scripting Vulnerability
2018-02-21
http://www.securityfocus.com/bid/103133

Atlassian Floodlight Controller CVE-2015-6569 Denial of Service Vulnerability
2018-02-21
http://www.securityfocus.com/bid/103132

Cisco Data Center Analytics Framework CVE-2018-0145 Cross Site Scripting Vulnerability
2018-02-21
http://www.securityfocus.com/bid/103131

Multiple Asterisk Products CVE-2018-7286 Denial of Service Vulnerability
2018-02-21
http://www.securityfocus.com/bid/103129

SANS News

CIS Controls Version 7

Threatpost

Cryptojacking Attack Found on Los Angeles Times Website

Exploint

Groupon Clone Script 3.0.2 - Cross-Site Scripting

Alibaba Clone Script 1.0.2 - Cross-Site Scripting

Learning and Examination Management System - Cross-Site Scripting

Armadito Antivirus 0.12.7.2 - Detection Bypass

22.2.2018

Bugtraq

[SECURITY] [DSA 4121-1] gcc-6 security update 2018-02-22
Moritz Muehlenhoff (jmm debian org)

[CORE-2017-0006] Trend Micro Email Encryption Gateway Multiple Vulnerabilities 2018-02-21
Core Security Advisories Team (advisories coresecurity com)

DefenseCode Security Advisory: PureVPN Windows Privilege Escalation Vulnerability 2018-02-21
Defense Code (defensecode defensecode com)

SEC Consult SA-20180221-0 :: Hijacking of arbitrary miSafes Mi-Cam video baby monitors 2018-02-21
SEC Consult Vulnerability Lab (research sec-consult com)

Sharutils 4.15.2 Heap-Buffer-Overflow 2018-02-21
nafiez (nafiez skins gmail com) (1 replies)

Sharutils 4.15.2 Heap-Buffer-Overflow 2018-02-21
nafiez (nafiez skins gmail com)

Multiple Persistent Cross-Site Scripting Vulnerabilities in Quarx CMS 2018-02-21
preethiknambiar gmail com

Malware

Phishing

Vulnerebility

SANS News

Passwords Part 2 - Passwords off the Wire using LLMNR

Threatpost

uTorrent Users Warned of Remote Code Execution Vulnerability

New BEC Spam Campaign Targets Fortune 500 Businesses

Year-Old Coldroot RAT Targets MacOS, Still Evades Detection

Exploint

Disk Pulse Enterprise 10.4.18 - 'Import Command' Buffer Overflow (SEH)

Disk Savvy Enterprise 10.4.18 - Buffer Overflow (SEH)

EChat Server 3.1 - 'CHAT.ghp' Buffer Overflow

Wavpack 5.1.0 - Denial of Service

Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities

Joomla! Component OS Property Real Estate 3.12.7 - SQL Injection

Joomla! Component Proclaim 9.1.1 - Arbitrary File Upload

Joomla! Component CheckList 1.1.1 - SQL Injection

Joomla! Component Alexandria Book Library 3.1.2 - 'letter' SQL Injection

Joomla! Component Ek Rishta 2.9 - SQL Injection

Joomla! Component PrayerCenter 3.0.2 - 'sessionid' SQL Injection

NoMachine x64 < 6.0.80 - 'nxfuse' Privilege Escalation

NoMachine x86 < 6.0.80 - 'nxfuse' Privilege Escalation

21.2.2018

Bugtraq

Multiple Persistent Cross-Site Scripting Vulnerabilities in Quarx CMS 2018-02-21
preethiknambiar gmail com

Multiple Persistent XSS vulnerabilities in Radiant Content Management System 2018-02-20
suparna kachru gmail com

SEC Consult SA-20180221-0 :: Hijacking of arbitrary miSafes Mi-Cam video baby monitors 2018-02-21
SEC Consult Vulnerability Lab (research sec-consult com)

Sharutils 4.15.2 Heap-Buffer-Overflow 2018-02-21
nafiez (nafiez skins gmail com) (1 replies)

Sharutils 4.15.2 Heap-Buffer-Overflow 2018-02-21
nafiez (nafiez skins gmail com)

Multiple Persistent Cross-Site Scripting Vulnerabilities in Quarx CMS 2018-02-21
preethiknambiar gmail com

Multiple Persistent XSS vulnerabilities in Radiant Content Management System 2018-02-20
suparna kachru gmail com

APPLE-SA-2018-02-19-2 macOS High Sierra 10.13.3 Supplemental Update 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2018-02-19-3 tvOS 11.2.6 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2018-02-19-1 iOS 11.2.6 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

8-02-19-2 macOS High Sierra 10.13.3 Supplemental Update 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2018-02-19-3 tvOS 11.2.6 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2018-02-19-1 iOS 11.2.6 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2018-02-19-4 watchOS 4.2.3 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

[SECURITY] [DSA 4119-1] libav security update 2018-02-19
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

Vulnerebility

Radiant CVE-2018-7261 Multiple HTML Injection Vulnerabilities
2018-02-21
http://www.securityfocus.com/bid/103080

Apple iOS/WatchOS/macOS/tvOS CVE-2018-4124 Denial of Service Vulnerability
2018-02-20
http://www.securityfocus.com/bid/103066

Yab Quarx CVE-2018-7274 Multiple HTML Injection Vulnerabilities
2018-02-20
http://www.securityfocus.com/bid/103081

Google Chrome CVE-2018-6056 Remote Security Vulnerability
2018-02-19
http://www.securityfocus.com/bid/103003

Microsoft Windows Kernel CVE-2018-0810 Local Information Disclosure Vulnerability
2018-02-19
http://www.securityfocus.com/bid/102938

GIMP CVE-2017-17786 Heap Buffer Overflow Vulnerability
2018-02-19
http://www.securityfocus.com/bid/102765

SANS News

Should We Call it Quits for Passwords? Or, "Password Spraying for the Win!"

Threatpost

Flight Sim Labs’ ‘Heavy Handed’ Anti-Piracy Tactics Raise Hackles

Exploint

utorrent - JSON-RPC Remote Code Execution / Information Disclosure

20.2.2018

Bugtraq

Multiple Persistent XSS vulnerabilities in Radiant Content Management System 2018-02-20
suparna kachru gmail com

APPLE-SA-2018-02-19-2 macOS High Sierra 10.13.3 Supplemental Update 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2018-02-19-3 tvOS 11.2.6 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2018-02-19-1 iOS 11.2.6 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2018-02-19-4 watchOS 4.2.3 2018-02-19
Apple Product Security (product-security-noreply lists apple com)

[SECURITY] [DSA 4119-1] libav security update 2018-02-19
Moritz Muehlenhoff (jmm debian org)

Kentico CMS version 9 through 11 - Cross-Site Scripting (Reflect) 2018-02-18
displaymyname gmail com

[SECURITY] [DSA 4118-1] tomcat-native security update 2018-02-17
Salvatore Bonaccorso (carnil debian org)

Kentico CMS version 9 through 11 - Arbitrary Code Execution 2018-02-17
displaymyname gmail com

Malware

Win32/Tomyjery.A

Win32/TrojanDownloader.Agent.DVC

Phishing

Vulnerebility

Apple iOS/WatchOS/macOS/tvOS CVE-2018-4124 Denial of Service Vulnerability
2018-02-20
http://www.securityfocus.com/bid/103066

Google Chrome CVE-2018-6056 Remote Security Vulnerability
2018-02-19
http://www.securityfocus.com/bid/103003

Microsoft Windows Kernel CVE-2018-0810 Local Information Disclosure Vulnerability
2018-02-19
http://www.securityfocus.com/bid/102938

GIMP CVE-2017-17786 Heap Buffer Overflow Vulnerability
2018-02-19
http://www.securityfocus.com/bid/102765

GNU Binutils CVE-2018-7208 Remote Denial of Service Vulnerability
2018-02-17
http://www.securityfocus.com/bid/103077

SANS News

Analyzing MSI files

Statically Unpacking a Brazilian Banker Malware

Threatpost

Exploint

utorrent - JSON-RPC Remote Code Execution / Information Disclosure

Microsoft Windows - StorSvc SvcMoveFileInheritSecurity Arbitrary File Creation Privilege...

Microsoft Windows - Constrained Impersonation Capability Privilege Escalation

Microsoft Windows - NPFS Symlink Security Feature Bypass/Elevation of Privilege/Dangerous...

Microsoft Windows - Global Reparse Point Security Feature Bypass/Elevation of Privilege

Microsoft Internet Explorer 11 - 'Js::RegexHelper::RegexReplace' Use-After-Free

Microsoft Windows Kernel - 'nt!RtlpCopyLegacyContextX86' Stack Memory Disclosure

MagniComp SysInfo - mcsiwrapper Privilege Escalation (Metasploit)

19.2.2018

Bugtraq

Kentico CMS version 9 through 11 - Cross-Site Scripting (Reflect) 2018-02-18
displaymyname gmail com

[SECURITY] [DSA 4118-1] tomcat-native security update 2018-02-17
Salvatore Bonaccorso (carnil debian org)

Kentico CMS version 9 through 11 - Arbitrary Code Execution 2018-02-17
displaymyname gmail com

Malware

Phishing

Vulnerebility

Microsoft Windows Kernel CVE-2018-0810 Local Information Disclosure Vulnerability
2018-02-19
http://www.securityfocus.com/bid/102938

GIMP CVE-2017-17786 Heap Buffer Overflow Vulnerability
2018-02-19
http://www.securityfocus.com/bid/102765

Dell EMC Isilon OneFS Multiple Security Vulnerabilities
2018-02-16
http://www.securityfocus.com/bid/103033

General Electric D60 Line Distance Relay Multiple Buffer Overflow Vulnerabilities
2018-02-15
http://www.securityfocus.com/bid/103054

SANS News

Finding VBA signatures in .docm files

Threatpost

Exploint

Aastra 6755i SIP SP4 - Denial of Service

October CMS < 1.0.431 - Cross-Site Scripting

Linux/ARM - Bind TCP (4444/TCP) Shell (/bin/sh) + IP Controlled (192.168.1.190) +...

17.2.2018

Bugtraq

[slackware-security] irssi (SSA:2018-046-01) 2018-02-16
Slackware Security Team (security slackware com)

[SECURITY] [DSA 4115-1] quagga security update 2018-02-15
Salvatore Bonaccorso (carnil debian org)

Vulnerability Disclosure (Web Apps)-Bravo Tejari Web Portal-Unrestricted File Upload 2018-02-15
Arvind Vishwakarma (arvind12786 gmail com)

Malware

Phishing

Vulnerebility

SANS News

Malware Delivered via Windows Installer Files

Threatpost

Apple Rushes Fix for Latest ‘Text Bomb’ Bug As Abuse Spreads

Exploint

Oracle Primavera P6 Enterprise Project Portfolio Management - HTTP Response Splitting

PSNews Website 1.0.0 - 'Keywords' SQL Injection

PHIMS - Hospital Management Information System - 'Password' SQL Injection

Front Accounting ERP 2.4.3 - Cross-Site Request Forgery

Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module < 4.25 - Denial of Service

JBoss Remoting 6.14.18 - Denial of Service

Microsoft Edge - 'UnmapViewOfFile' ACG Bypass

16.2.2018

Bugtraq

[slackware-security] irssi (SSA:2018-046-01) 2018-02-16
Slackware Security Team (security slackware com)

[SECURITY] [DSA 4115-1] quagga security update 2018-02-15
Salvatore Bonaccorso (carnil debian org)

Vulnerability Disclosure (Web Apps)-Bravo Tejari Web Portal-Unrestricted File Upload 2018-02-15
Arvind Vishwakarma (arvind12786 gmail com)

Vulnerability Disclosure (Web Apps)-Bravo Tejari Web Portal-CSRF 2018-02-15
Arvind Vishwakarma (arvind12786 gmail com)

[SECURITY] [DSA 4114-1] jackson-databind security update 2018-02-15
Sebastien Delafond (seb debian org)

[SECURITY] [DSA 4113-1] libvorbis security update 2018-02-14
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4112-1] xen security update 2018-02-14
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

PayPal	15th February 2018
Your account Has Been locked !

Vulnerebility

SANS News

Threatpost

Intel Expands Bug Bounty Program Post-Spectre and Meltdown

Reported Critical Vulnerabilities In Microsoft Software On the Rise

Exploint

EPIC MyChart - SQL Injection

ABRT - raceabrt Privilege Escalation(Metasploit)

Joomla! Component Gallery WD 1.3.6 - SQL Injection

Joomla! Component Form Maker 3.6.12 - SQL Injection

Joomla! Component File Download Tracker 3.0 - SQL Injection

Joomla! Component Fastball 2.5 - 'season' SQL Injection

Joomla! Component DT Register 3.2.7 - 'id' SQL Injection

Joomla! Component AllVideos Reloaded 1.2.x - 'divid' SQL Injection

Joomla! Component Aist 2.0 - 'id' SQL Injection

Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module < 4.25 - Denial of Service

JBoss Remoting 6.14.18 - Denial of Service

Microsoft Edge - 'UnmapViewOfFile' ACG Bypass

15.2.2018

Bugtraq

[SECURITY] [DSA 4114-1] jackson-databind security update 2018-02-15
Sebastien Delafond (seb debian org)

[SECURITY] [DSA 4113-1] libvorbis security update 2018-02-14
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4112-1] xen security update 2018-02-14
Moritz Muehlenhoff (jmm debian org)

NAT32 Build (22284) Remote Code Execution CVE-2018-6940 (hyp3rlinx / apparition security) 2018-02-14
apparitionsec gmail com

Defense in depth -- the Microsoft way (part 52): HTTP used to distribute (security) updates, not HTTPS 2018-02-14
Stefan Kanthak (stefan kanthak nexgo de)

[security bulletin] MFSBGN03800 rev.1 - Micro Focus Performance Center, Remote Arbitrary Code Execution or Remote Arbitrary File Modification 2018-02-13
cyber-psrt microfocus com

CSNC-2017-027 Microsoft Intune - App PIN Bypass 2018-02-13
Advisories (advisories compass-security com)

Malware

Phishing

Vulnerebility

SANS News

Threatpost

Dell EMC Patches Critical Flaws in VMAX Enterprise Storage Systems

Researchers Find New Twists In ‘Olympic Destroyer’ Malware

Unicode Technique Used to Deliver Cryptomining Malware Through Telegram

Exploint

Chrome V8 - 'Runtime_RegExpReplace' Integer Overflow

Pdfium - Out-of-Bounds Read with Shading Pattern Backed by Pattern Colorspace

Pdfium - Pattern Shading Integer Overflows

Microsoft Edge Chakra JIT - 'LdThis' Type Confusion

Microsoft Edge Chakra JIT - 'NewScObjectNoCtor' Array Type Confusion

Microsoft Edge Chakra JIT - 'Array.prototype.reverse' Array Type Confusion

Microsoft Edge Chakra JIT - Array Type Confusion via InitProto Instructions

Microsoft Edge Chakra JIT - ImplicitCallFlags Checks Bypass

Microsoft Edge Chakra JIT - Memory Corruption

Microsoft Edge Chakra JIT - 'GlobOpt::OptTagChecks' Must Consider IsLoopPrePass Properly...

GNU binutils 2.26.1 - Integer Overflow (PoC)

Dell EMC Isilon OneFS - Multiple Vulnerabilities

userSpice 4.3 - Cross-Site Scripting

SOA School Management - 'access_login' SQL Injection

Social Oauth Login PHP - Authentication Bypass

GNU binutils 2.26.1 - Integer Overflow (POC)

14.2.2018

Bugtraq

Defense in depth -- the Microsoft way (part 52): HTTP used to distribute (security) updates, not HTTPS 2018-02-14
Stefan Kanthak (stefan kanthak nexgo de)

[security bulletin] MFSBGN03800 rev.1 - Micro Focus Performance Center, Remote Arbitrary Code Execution or Remote Arbitrary File Modification 2018-02-13
cyber-psrt microfocus com

CSNC-2017-027 Microsoft Intune - App PIN Bypass 2018-02-13
Advisories (advisories compass-security com)

[SECURITY] [DSA 4111-2] libreoffice security update 2018-02-12
Moritz Muehlenhoff (jmm debian org)

[security bulletin] HPESBHF03819 rev.1 - HPE XP Storage using HGLM, Local Authentication Bypass 2018-02-12
security-alert hpe com

CVE-2018-6892 CloudMe Sync <= v1.10.9 Unauthenticated Remote Buffer Overflow (hyp3rlinx / apparition security) 2018-02-12
apparitionsec gmail com

[SECURITY] [DSA 4111-1] libreoffice security update 2018-02-11
Moritz Muehlenhoff (jmm debian org)

Malware

Exp.CVE-2018-0841

Exp.CVE-2018-0742

Exp.CVE-2018-0756

Exp.CVE-2018-0842

Exp.CVE-2018-0834

Exp.CVE-2018-0835

Exp.CVE-2018-0837

Exp.CVE-2018-0838

Exp.CVE-2018-0840

Exp.CVE-2018-0858

Exp.CVE-2018-0860

Phishing

iTunes - Order Confirmation	13th February 2018
Confirmation Purchase Order Bigo Live, 1550 Diamond #7152022

Vulnerebility

SANS News

February 2018 Microsoft (and Adobe) Patch Tuesday

Threatpost

Two Nasty Outlook Bugs Fixed in Microsoft’s Feb. Patch Tuesday Update

Venerable Unicode Technique Used to Deliver Cryptomining Malware Through Telegram

Exploint

NAT32 2.2 Build 22284 - Cross-Site Request Forgery

NAT32 2.2 Build 22284 - Remote Command Execution

13.2.2018

Bugtraq

CSNC-2017-027 Microsoft Intune - App PIN Bypass 2018-02-13
Advisories (advisories compass-security com)

[SECURITY] [DSA 4111-2] libreoffice security update 2018-02-12
Moritz Muehlenhoff (jmm debian org)

[security bulletin] HPESBHF03819 rev.1 - HPE XP Storage using HGLM, Local Authentication Bypass 2018-02-12
security-alert hpe com

CVE-2018-6892 CloudMe Sync <= v1.10.9 Unauthenticated Remote Buffer Overflow (hyp3rlinx / apparition security) 2018-02-12
apparitionsec gmail com

[SECURITY] [DSA 4111-1] libreoffice security update 2018-02-11
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4109-1] ruby-omniauth security update 2018-02-10
Luciano Bello (luciano debian org)

Malware

Trojan.Olydestroy

OSX.Coinminer

W97M.Jelous

Downloader.Jelous

Phishing

Vulnerebility

SANS News

Threatpost

‘Olympic Destroyer’ Malware Behind Winter Olympics Cyberattack, Researchers Say

Romance Scams Drive Necurs Botnet Activity in Run Up to Valentine’s Day

Exploint

LibreOffice < 6.0.1 - '=WEBSERVICE' Remote Arbitrary File Disclosure

glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation (Metasploit)

glibc - '$ORIGIN' Expansion Privilege Escalation (Metasploit)

Juju-run Agent - Privilege Escalation (Metasploit)

Advantech WebAccess 8.3.0 - Remote Code Execution

CloudMe Sync < 1.11.0 - Buffer Overflow

News Website Script 2.0.4 - 'search' SQL Injection

TypeSetter CMS 5.1 - Cross-Site Request Forgery

TypeSetter CMS 5.1 - 'Host' Header Injection

LogicalDOC Enterprise 7.7.4 - Root Remote Code Execution

12.2.2018

Bugtraq

[SECURITY] [DSA 4111-1] libreoffice security update 2018-02-11
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 4109-1] ruby-omniauth security update 2018-02-10
Luciano Bello (luciano debian org)

KL-001-2018-005 : NetEx HyperIP Local File Inclusion Vulnerability 2018-02-09
KoreLogic Disclosures (disclosures korelogic com)

[SECURITY] [DSA 4110-1] exim4 security update 2018-02-10
Salvatore Bonaccorso (carnil debian org)

Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to SYSTEM 2018-02-09
Stefan Kanthak (stefan kanthak nexgo de)

KL-001-2018-004 : NetEx HyperIP Privilege Escalation Vulnerability 2018-02-09
KoreLogic Disclosures (disclosures korelogic com)

KL-001-2018-003 : NetEx HyperIP Post-Auth Command Execution 2018-02-09
KoreLogic Disclosures (disclosures korelogic com)

KL-001-2018-006 : Trend Micro IMSVA Management Portal Authentication Bypass 2018-02-09
KoreLogic Disclosures (disclosures korelogic com)

KL-001-2018-002 : NetEx HyperIP Authentication Bypass 2018-02-09
KoreLogic Disclosures (disclosures korelogic com)

[SECURITY] [DSA 4108-1] mailman security update 2018-02-09
Thijs Kinkhorst (thijs debian org)

Malware

Phishing

Apple	11th February 2018
[APPLE LOCKED #CASE 800000947] VERIFICATION REQUEST
Support Account	8th February 2018
[REMINDER] : YOUR APPLE ID WAS JUST MAKE PURCHASES VIA ITUNES STORES

Vulnerebility

SANS News

Analyzing compressed shellcode

Threatpost

Exploint

11.2.2018

Bugtraq

[SECURITY] [DSA 4108-1] mailman security update 2018-02-09
Thijs Kinkhorst (thijs debian org)

Advisory - Fisheye and Crucible - CVE-2017-16861 2018-02-09
David Black (dblack atlassian com)

[SECURITY] [DSA 4105-2] mpv security update 2018-02-09
Luciaon Bello (luciano debian org)

SEC Consult SA-20180208-0 :: Multiple Cross-Site Scripting Vulnerabilities in Sonatype Nexus Repository Manager OSS/Pro 2018-02-08
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 4107-1] django-anymail security update 2018-02-07
Salvatore Bonaccorso (carnil debian org)

[security bulletin] HPSBHF02981 rev.2 - HPE Integrated Lights-Out 2, 3, 4 (iLO2, iLO3, iLO4) and HPE Superdome Flex RMC - IPMI 2.0 RCMP+ Authentication Remote Password Hash Vulnerability (RAKP) 2018-02-07

Malware

Win32/Filecoder.Sigma.A

Win32/Filecoder.GandCrab.A

Win64/Gadoopt.AA

Phishing

Support Account	8th February 2018
[REMINDER] : YOUR APPLE ID WAS JUST MAKE PURCHASES VIA ITUNES STORES
Bank of America	7th February 2018
Security Validation Alert

Vulnerebility

SANS News

An autograph from the Dridex gang

Increase in port 2580 probe sources

Threatpost

Cisco Confirms Critical Firewall Software Bug Is Under Attack

Exploint

JBoss 4.2.x/4.3.x - Information Disclosure

Multi Language Olx Clone Script - Cross-Site Scripting

Multi religion Responsive Matrimonial 4.7.2 - Cross-Site Scripting

Select Your College Script 2.0.2 - Authentication Bypass

Bitcoin MLM Software 1.0.2 - Cross-Site Scripting

Lawyer Search Script 1.0.2 - Cross-Site Scripting

Schools Alert Management Script 2.0.2 - Arbitrary File Upload

Facebook Clone Script 1.0.5 - Cross-Site Scripting

macOS Kernel - Use-After-Free Due to Lack of Locking in...

9.2.2018

Bugtraq

[SECURITY] [DSA 4108-1] mailman security update 2018-02-09
Thijs Kinkhorst (thijs debian org)

Advisory - Fisheye and Crucible - CVE-2017-16861 2018-02-09
David Black (dblack atlassian com)

[SECURITY] [DSA 4105-2] mpv security update 2018-02-09
Luciaon Bello (luciano debian org)

SEC Consult SA-20180208-0 :: Multiple Cross-Site Scripting Vulnerabilities in Sonatype Nexus Repository Manager OSS/Pro 2018-02-08
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 4107-1] django-anymail security update 2018-02-07
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 4106-1] libtasn1-6 security update 2018-02-07
Salvatore Bonaccorso (carnil debian org)

SEC Consult SA-20180207-0 :: Multiple buffer overflow vulnerabilities in InfoZip UnZip 2018-02-07
SEC Consult Vulnerability Lab (research sec-consult com)

[slackware-security] Slackware 14.2 kernel (SSA:2018-037-01) 2018-02-07
Slackware Security Team (security slackware com)

Malware

MSIL.Vermrat

Exp.CVE-2018-4877

Linux.Duckbot

Trojan.Dragonrat

Phishing

Vulnerebility

SANS News

An autograph from the Dridex gang

Threatpost

Exploint

HPE iLO 4 < 2.53 - Add New Administrator User

Marked2 - Local File Disclosure

macOS Kernel - Use-After-Free Due to Lack of Locking in...

8.2.2018

Bugtraq

[SECURITY] [DSA 4107-1] django-anymail security update 2018-02-07
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 4106-1] libtasn1-6 security update 2018-02-07
Salvatore Bonaccorso (carnil debian org)

SEC Consult SA-20180207-0 :: Multiple buffer overflow vulnerabilities in InfoZip UnZip 2018-02-07
SEC Consult Vulnerability Lab (research sec-consult com)

[slackware-security] Slackware 14.2 kernel (SSA:2018-037-01) 2018-02-07
Slackware Security Team (security slackware com)

[SE-2011-01] A security issue with a Multiroom service of NC+ SAT TV platform 2018-02-07
Security Explorations (contact security-explorations com)

[SECURITY] [DSA 4105-1] mpv security update 2018-02-07
Luciano Bello (luciano debian org)

Malware

Phishing

Support Account	8th February 2018
[REMINDER] : YOUR APPLE ID WAS JUST MAKE PURCHASES VIA ITUNES STORES
Bank of America	7th February 2018
Security Validation Alert

Vulnerebility

SANS News

GandCrab Ransomware: Now Coming From Malspam

SQL injection and division by zero exceptions

Threatpost

Insurance Customers’ Personal Data Exposed Due to Misconfigured NAS Server

Gojdue Variant Eludes Microsoft, Google Cloud Protection, Researchers Say

Hotspot Shield Vulnerability Could Reveal ‘Juicy’ Info About Users, Researcher Claims

Leaky Amazon S3 Bucket Exposes Personal Data of 12,000 Social Media Influencers

Exploint

Adobe Coldfusion 11.0.03.292866 - BlazeDS Java Object Deserialization Remote Code...

HPE iLO4 < 2.53 - Add New Administrator User

Geovision Inc. IP Camera & Video - Remote Command Execution

Geovision Inc. IP Camera/Video/Access Control - Multiple Remote Command Execution / Stack...

Entrepreneur Dating Script 2.0.2 - Authentication Bypass

Online Test Script 2.0.7 - 'cid' SQL Injection

Hot Scripts Clone Script Classified - Persistent Cross-Site Scripting

Naukri Clone Script - Persistent Cross-Site Scripting

MalwareFox AntiMalware 2.74.0.150 - Privilege Escalation

Android - 'getpidcon' Permission Bypass in KeyStore Service

Cisco ASA - Crash PoC

7.2.2018

Bugtraq

SEC Consult SA-20180207-0 :: Multiple buffer overflow vulnerabilities in InfoZip UnZip 2018-02-07
SEC Consult Vulnerability Lab (research sec-consult com)

[slackware-security] Slackware 14.2 kernel (SSA:2018-037-01) 2018-02-07
Slackware Security Team (security slackware com)

[SE-2011-01] A security issue with a Multiroom service of NC+ SAT TV platform 2018-02-07
Security Explorations (contact security-explorations com)

[SECURITY] [DSA 4105-1] mpv security update 2018-02-07
Luciano Bello (luciano debian org)

[CORE-2017-0010] - Kaspersky Secure Mail Gateway Multiple Vulnerabilities 2018-02-05
Core Security Advisories Team (advisories coresecurity com)

[SECURITY] [DSA 4104-1] p7zip security update 2018-02-04
Salvatore Bonaccorso (carnil debian org)

Malware

Exp.CVE-2018-4878

MSH.Bluwimps

Trojan.ChaoPZ

Phishing

Vulnerebility

SANS News

3 examples of malspam pushing Loki-Bot malware

Threatpost

Hotspot Shield Vulnerability Could Reveal ‘Juicy’ Info About Users, Researcher Claims

Cisco Issues New Patches for Critical Firewall Software Vulnerability

Exploint

Adobe Coldfusion 11.0.03.292866 - BlazeDS Java Object Deserialization Remote Code...

Geovision Inc. IP Camera & Video - Remote Command Execution

Geovision Inc. IP Camera/Video/Access Control - Multiple Remote Command Execution / Stack...

Entrepreneur Dating Script 2.0.2 - Authentication Bypass

Online Test Script 2.0.7 - 'cid' SQL Injection

Hot Scripts Clone Script Classified - Persistent Cross-Site Scripting

Naukri Clone Script - Persistent Cross-Site Scripting

Multilanguage Real Estate MLM Script - Persistent Cross-Site Scripting

Doctor Search Script 1.0.2 - Persistent Cross-Site Scripting

Android - 'getpidcon' Permission Bypass in KeyStore Service

Asterisk 13.17.2 - 'chan_skinny' Remote Memory Corruption

Cisco ASA - Crash PoC

6.2.2018

Bugtraq

[CORE-2017-0010] - Kaspersky Secure Mail Gateway Multiple Vulnerabilities 2018-02-05
Core Security Advisories Team (advisories coresecurity com)

[SECURITY] [DSA 4104-1] p7zip security update 2018-02-04
Salvatore Bonaccorso (carnil debian org)

[slackware-security] php (SSA:2018-034-01) 2018-02-04
Slackware Security Team (security slackware com)

Malware

Phishing

Vulnerebility

SANS News

Analyzing an HTA file: Update

Threatpost

Cisco Issues New Patches for Critical Firewall Software Vulnerability

Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs

New Monero Crypto Mining Botnet Leverages Android Debugging Tool

Exploint

Netis WF2419 Router - Cross-Site Scripting

Student Profile Management System Script 2.0.6 - Authentication Bypass

Joomla! Component JSP Tickets 1.1 - SQL Injection

Joomla! Component jLike 1.0 - Information Leak

Joomla! Component Zh GoogleMap 8.4.0.0 - SQL Injection

Joomla! Component Zh YandexMap 6.2.1.0 - 'id' SQL Injection

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection

5.2.2018

Bugtraq

[SECURITY] [DSA 4104-1] p7zip security update 2018-02-04
Salvatore Bonaccorso (carnil debian org)

[slackware-security] php (SSA:2018-034-01) 2018-02-04
Slackware Security Team (security slackware com)

[security bulletin] MFSBGN03797 rev.1 - Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), XML External Entity Injection 2018-02-01
cyber-psrt microfocus com A

SEC Consult SA-20180201-0 :: Multiple critical vulnerabilities in Whole Vibratissimo Smart Sex Toy product range 2018-02-01
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 4103-1] chromium-browser security update 2018-02-01
Michael Gilbert (mgilbert debian org)

Advisory - Sourcetree - CVE-2017-14592 CVE-2017-14593 CVE-2017-14592 CVE-2017-17831 2018-02-01
Atlassian (security atlassian com)

Malware

Phishing

Vulnerebility

SANS News

Threatpost

Exploint

Windows - 'EternalRomance'/'EternalSynergy'/'EternalChampion' SMB Remote Code Execution...

Online Voting System - Authentication Bypass

NixCMS 1.0 - 'category_id' SQL Injection

Matrimonial Website Script 2.1.6 - 'uid' SQL Injection

MalwareFox AntiMalware 2.74.0.150 - Privilege Escalation

Apport/ABRT - 'chroot' Local Privilege Escalation (Metasploit)

Claymore Dual GPU Miner 10.5 - Format String

WordPress Core - 'load-scripts.php' Denial of Service

Wonder CMS 2.3.1 - 'Host' Header Injection

Wonder CMS 2.3.1 - Unrestricted File Upload

4.2.2018

Bugtraq

Malware

Phishing

Account PayPaI	4th February 2018
Account Status : Update Your PayPal Profile Information

Vulnerebility

SANS News

Analyzing an HTA file

Threatpost

JenX Botnet Has Grand Theft Auto Hook

New Western Digital My Cloud Bugs Give Local Attackers Root on NAS Devices

Exploint

2.2.2018

Bugtraq

SEC Consult SA-20180201-0 :: Multiple critical vulnerabilities in Whole Vibratissimo Smart Sex Toy product range 2018-02-01
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 4103-1] chromium-browser security update 2018-02-01
Michael Gilbert (mgilbert debian org)

Advisory - Sourcetree - CVE-2017-14592 CVE-2017-14593 CVE-2017-14592 CVE-2017-17831 2018-02-01
Atlassian (security atlassian com)

KonaKart Path Traversal Vulnerability 2018-02-01
ajcraggs gmail com

Recon Montreal 2018 Call For Papers - 0xE - Registration - Training - Conference - Submit! - PGP key 2018-01-31
cfpmontreal2018 recon cx

SEC Consult SA-20180131-0 :: Multiple Vulnerabilities in Sprecher Automation SPRECON-E-C, PU-2433 2018-01-31
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 4094-2] smarty3 security update 2018-01-30
Luciano Bello (luciano debian org)

Malware

Phishing

Vulnerebility

SANS News

Adobe Flash 0-Day Used Against South Korean Targets

Simple but Effective Malicious XLS Sheet

Threatpost

Oracle MICROS POS Vulnerability Puts 300,000 Systems at Risk

Crypto Miners May Be the ‘New Payload of Choice’ for Attackers

Massive Smominru Cryptocurrency Botnet Rakes In Millions

Google Booted 700,000 Bad Apps From Its Marketplace in 2017

Exploint

Microsoft Windows Subsystem for Linux - Local Privilege Escalation

FiberHome AN5506 - Unauthenticated Remote DNS Change

Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 - Directory Traversal

Joomla! Component JMS Music 1.1.1 - SQL Injection

Joomla! Component Jimtawl 2.1.6 - Arbitrary File Upload

Joomla! Component JEXTN Classified 1.0.0 - 'sid' SQL Injection

Joomla! Component JEXTN Reverse Auction 3.1.0 - SQL Injection

Event Manager 1.0 - SQL Injection

Joomla! Component JE PayperVideo 3.0.0 - 'usr_plan' SQL Injection

IPSwitch MOVEit 8.1 < 9.4 - Cross-Site Scripting

Advance Loan Management System - 'id' SQL Injection

Real Estate Custom Script - 'route' SQL Injection

Fancy Clone Script - 'search_browse_product' SQL Injection

Joomla! Component JEXTN Membership 3.1.0 - 'usr_plan' SQL Injection

BMC Server Automation RSCD Agent - NSH Remote Command Execution (Metasploit)

WebKit - 'WebCore::FrameView::clientToLayoutViewportPoint' Use-After-Free

WebKit - 'detachWrapper' Use-After-Free

Linux/x64 - Bind TCP (4444/TCP) Shell (/bin/sh) + Password (1234567) Shellcode (136 bytes)

Linux/x64 - Twofish Encoded + DNS (CNAME) Password + execve(/bin/sh) Shellcode

1.2.2018

Bugtraq

SEC Consult SA-20180201-0 :: Multiple critical vulnerabilities in Whole Vibratissimo Smart Sex Toy product range 2018-02-01
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 4103-1] chromium-browser security update 2018-02-01
Michael Gilbert (mgilbert debian org)

Advisory - Sourcetree - CVE-2017-14592 CVE-2017-14593 CVE-2017-14592 CVE-2017-17831 2018-02-01
Atlassian (security atlassian com)

KonaKart Path Traversal Vulnerability 2018-02-01
ajcraggs gmail com

Recon Montreal 2018 Call For Papers - 0xE - Registration - Training - Conference - Submit! - PGP key 2018-01-31
cfpmontreal2018 recon cx

SEC Consult SA-20180131-0 :: Multiple Vulnerabilities in Sprecher Automation SPRECON-E-C, PU-2433 2018-01-31
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 4094-2] smarty3 security update 2018-01-30
Luciano Bello (luciano debian org)

Defense in depth -- the Microsoft way (part 49): fun with application manifests 2018-01-30
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 4098-1] curl security update 2018-01-26
Alessandro Ghedini (ghedo debian org)

Malware

Backdoor.Kuyama

Ransom.GandCrab

Trojan.Trensil.B
Win32/Agent.SMB
Win64/Gadoopt.AA

Phishing

eBay	1st February 2018
Help us protect your account - #4569845212 (lindacj1@aol.com)
Apple	31st January 2018
IMPORTANT: ACTIVATE YOUR ACCOUNT NOW
App Store	28th January 2018
APPLE PURCHASE SUCCESSFULLY PAYMENT CONFIRMATION SPOTIFY PREMIUM

Vulnerebility

SANS News

Adaptive Phishing Kit

Threatpost

Exploint

Sync Breeze Enterprise 10.4.18 - Remote Buffer Overflow (SEH)

systemd (systemd-tmpfiles) < 236 - 'fs.protected_hardlinks=0' Local Privilege Escalation