- Databáze Hot News 2015 -

Databáze Hot News 2015- 2020 2019 2018 2017 2016 2015 2014 2013

Hot News Alert APT Attacks Bugtraq CERT Crime Cryptocurrency Exploit Hacking ICS IDS/IPS Incident Malware Operation Phishing Ransom SANS Vulnerebility

2015 January February March April May June July August September October November December

31.12.2015

Bugtraq

Joomla 1.5.x to 3.4.5 Object Injection Exploit (golang) 2015-12-31
irancrash gmail com

Executable installers are vulnerable^WEVIL (case 16): Trend Micro's installers allows arbitrary (remote) code execution 2015-12-31
Stefan Kanthak (stefan kanthak nexgo de)

FTPShell Client v5.24 Buffer Overflow 2015-12-30
apparitionsec gmail com

[oCERT 2015-012] Ganeti multiple issues 2015-12-30
Daniele Bianco (danbia ocert org)

WebKitGTK+ Security Advisory WSA-2015-0002 2015-12-28
Carlos Alberto Lopez Perez (clopez igalia com)

libtiff bmp file Heap Overflow (CVE-2015-8668) 2015-12-28
riusksk qq com

Malware

Phishing

Amazon	30th December 2015
Important: Revision to Your Amazon.co.uk Account
Tesco	30th December 2015
[ACCOUNT-ALERT:857061877383318 34554-WOV]
PAY.SERVICE âœ”	30th December 2015
You must confirm your information
Microsoft	30th December 2015
[ACCOUNT-ALERT:867750623586575 68011-YRV]
Microsoft	30th December 2015
[ACCOUNT-ALERT:125474583663324 46085-DHP]
margaretabprwu	30th December 2015
FWD:COMMISSON CHECK PAYMENT ON HOLD(REF#9NG6Q5ZC)
Barclays	30th December 2015
Your account has been revoked
Accounting	30th December 2015
Your credit card has been successfully charged $995.98!

Vulnerebility

SANS News

Poetry attack?

Threatpost

Exploit

30.12.2015

Bugtraq

[oCERT 2015-012] Ganeti multiple issues 2015-12-30
Daniele Bianco (danbia ocert org)

Malware

Ransom:MSIL/Zuquitache.A

Exp.CVE-2015-6142

Exp.CVE-2015-8651

Exp.CVE-2015-6127

Phishing

PAYPAI SERVICE	30th December 2015
Were investigating a paypaI payment reversaI (Case ID #PP-003-498-237-832)
Chase	29th December 2015
Thank you for your purchase!
markecyrv	29th December 2015
HOW WAS YOUR WEEKEND

Vulnerebility

SANS News

Actor using Rig EK to deliver Qbot - update

Threatpost

Exploit

Simple Ads Manager 2.9.4.116 - SQL Injection

FTPShell Client 5.24 - Buffer Overflow

DeleGate 9.9.13 - Local Root Vulnerability

29.12.2015

Bugtraq

WebKitGTK+ Security Advisory WSA-2015-0002 2015-12-28
Carlos Alberto Lopez Perez (clopez igalia com)

libtiff bmp file Heap Overflow (CVE-2015-8668) 2015-12-28
riusksk qq com

Malware

Trojan:BAT/Zuquitache
Ransom:MSIL/Zuquitache.A

PHP.Drivdrop

Phishing

Jeff Skoll	29th December 2015
Charity Donation
S e c u r i t y A L E R T	29th December 2015
E M E R G E N C Y A L E R T
MRS. ELLAIN ELLIOT	28th December 2015
Re:Reg Order No:UN/RBSPA/09888

Vulnerebility

SANS News

New Years Resolutions

Threatpost

Exploit

28.12.2015

Bugtraq

libtiff bmp file Heap Overflow (CVE-2015-8668) 2015-12-28
riusksk qq com

Malware

Phishing

Capital One 360	28th December 2015
Account Alert: Access Suspended
Paypal	28th December 2015
ACCOUNT NOTIFICATION âœ”
Carmen Thompson	28th December 2015
1 CHRISTMAS INSTASEXTMSG WAITING
Barclays	28th December 2015
YOUR ACCOUNT HAS BEEN CLOSED
JAMES F. ENTWISTLE	28th December 2015
JAMES F. ENTWISTLE U.S AMBASSADOR TO NIGERIA
....Get paid $25 for each emai	28th December 2015
Hello ....No skills required to get started

Vulnerebility

SANS News

hashcat and oclHashcat are now open source

Threatpost

Exploit

27.12.2015

Bugtraq

libtiff: invalid write (CVE-2015-7554) 2015-12-26
Hans Jerry Illikainen (hji dyntopia com)

AccessDiver V4.301 Buffer Overflow 2015-12-26
apparitionsec gmail com

Malware

Phishing

michael swartz	27th December 2015
Executive Careers
NatWest	26th December 2015
Your account has been deactivated
Chase	25th December 2015
Account Re-Activation
Account Support	25th December 2015
YOUR ACCOUNT HAS BEEN IIMITED UNTII WE HEAR FROM YOU

Vulnerebility

SANS News

Malfunctioning Malware

Threatpost

Exploit

EasyCafe Server <= 2.2.14 Remote File Read

25.12.2015

Bugtraq

Malware

Phishing

Account Team	25th December 2015
Re-Validate Your E:howiem@loxinfo.co.th
PayPaI Inc	25th December 2015
NOTIFICATION: YOUR ACCOUNT HAS BEEN LIMITED

Vulnerebility

SANS News

Threatpost

Exploit

Rips Scanner 0.5 - (code.php) Local File Inclusion

24.12.2015

Bugtraq

[SECURITY] [DSA 3430-1] libxml2 security update 2015-12-23
Salvatore Bonaccorso (carnil debian org)

Executable installers are vulnerable^WEVIL (case 15): F-SecureOnlineScanner.exe allows arbitrary (remote) code execution and escalation of privilege 2015-12-23
Stefan Kanthak (stefan kanthak nexgo de)

[slackware-security] blueman (SSA:2015-356-01) 2015-12-23
Slackware Security Team (security slackware com)

Security advisory for Bugzilla 5.0.2, 4.4.11 and 4.2.16 2015-12-22
LpSolit gmail com

Malware

Downloader.Preft

Infostealer.Poshook

Phishing

support account	24th December 2015
YOUR ACCOUNT PAYPAL HAS BEEN LIMITED !
Tesco plc.	23rd December 2015
** Win A Free Tesco Voucher This Christmas

Vulnerebility

SANS News

Unity Makes Strength

Threatpost

Exploit

Rips Scanner 0.5 - (code.php) Local File Inclusion

23.12.2015

Bugtraq

[slackware-security] blueman (SSA:2015-356-01) 2015-12-23
Slackware Security Team (security slackware com)

Security advisory for Bugzilla 5.0.2, 4.4.11 and 4.2.16 2015-12-22
LpSolit gmail com

ESA-2015-179: EMC Secure Remote Services Virtual Edition Path Traversal Vulnerability 2015-12-22
Security Alert (Security_Alert emc com)

ESA-2015-174: EMC VPLEX Undocumented Account Vulnerability 2015-12-22
Security Alert (Security_Alert emc com)

Aeris Calandar v2.1 - Buffer Overflow Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

POP Peeper 4.0.1 - Persistent Code Execution Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

Switch v4.68 - Code Execution Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

Lithium Forum - (previewImages) Persistent Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

Wordpress Content Text Slider on Post 6.8 - Persistent Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

Malware

TrojanSpy:Win32/Nivdort.CM
TrojanDropper:Win32/Zelug.A
Backdoor:Win32/Zelug.B
TrojanDownloader:VBS/Reywals.A
Backdoor:MSIL/Medirot.A

Backdoor.Govrat

Phishing

Mia Zhang	23rd December 2015
FACTORY OF CONSTRUCTION MATERIAL FROM CHINA
ANZ BANK	23rd December 2015
View Your Online Statement

Vulnerebility

SANS News

Libraries and Dependencies - It Really is Turtles All The Way Down!

Threatpost

Juniper Backdoor Picture Getting Clearer

Yahoo to Warn Users of State-Sponsored Attacks

Exploit

Bigware Shop 2.3.01 - Multiple Local File Inclusion Vulnerabilities

Grawlix 1.0.3 - CSRF Vulnerability

Arastta 1.1.5 - SQL Injection Vulnerabilities

PhpSocial 2.0.0304_20222226 - CSRF Vulnerability

PHP 7.0.0 - Format String Vulnerability

22.12.2015

Bugtraq

ESA-2015-174: EMC VPLEX Undocumented Account Vulnerability 2015-12-22
Security Alert (Security_Alert emc com)

Aeris Calandar v2.1 - Buffer Overflow Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

POP Peeper 4.0.1 - Persistent Code Execution Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

Switch v4.68 - Code Execution Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

Lithium Forum - (previewImages) Persistent Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

Wordpress Content Text Slider on Post 6.8 - Persistent Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

Western Union CN Bug Bounty #6 - Client Side Cross Site Scripting Web Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

DELL Scrutinizer v12.0.3 - Persistent Software Vulnerability 2015-12-22
Vulnerability Lab (research vulnerability-lab com)

[RT-SA-2015-013] Symfony PHP Framework: Session Fixation In "Remember Me" Login Functionality 2015-12-22
RedTeam Pentesting GmbH (release redteam-pentesting de)

Executable installers are vulnerable^WEVIL (case 14): Rapid7's ScanNowUPnP.exe allows arbitrary (remote) code execution 2015-12-21
Stefan Kanthak (stefan kanthak nexgo de)

[security bulletin] HPSBHF03419 rev.1 - HP Network Products including H3C routers and switches, Remote Denial of Service (DoS), Unauthorized Access. 2015-12-21
security-alert hpe com

Malware

TrojanDownloader:Win32/Ponmocup.A

Phishing

Vulnerebility

SANS News

The other Juniper vulnerability - CVE-2015-7756

First Exploit Attempts For Juniper Backdoor Against Honeypot

Threatpost

Exploit

Wireshark infer_pkt_encap - Heap-Based Out-of-Bounds Read

Wireshark AirPDcapDecryptWPABroadcastKey - Heap-Based Out-of-Bounds Read

21.12.2015

Bugtraq

ESA-2015-177: RSA SecurID(r) Web Agent Authentication Bypass Vulnerability 2015-12-21
Security Alert (Security_Alert emc com)

giflib: heap overflow in giffix (CVE-2015-7555) 2015-12-21
Hans Jerry Illikainen (hji dyntopia com)

Executable installers are vulnerable^WEVIL (case 13): ESET NOD32 antivirus installer allows remote code execution with escalation of privilege 2015-12-21
Stefan Kanthak (stefan kanthak nexgo de)

Almost no resp. only some mitigation(s) for "DLL hijacking" via load-time dependencies 2015-12-21
Stefan Kanthak (stefan kanthak nexgo de)

KL-001-2015-007 : Seagate GoFlex Satellite Remote Telnet Default Password 2015-12-18
KoreLogic Disclosures (disclosures korelogic com)

Malware

TrojanSpy:Win32/Nivdort.CT
TrojanSpy:Win32/Nivdort.CS
TrojanSpy:Win32/Nivdort.CR
TrojanSpy:Win32/Nivdort.CP
TrojanSpy:Win32/Nivdort.CH
TrojanDownloader:JS/Swabfex

Phishing

USAA Online Banking	21st December 2015
YOUR ACCOUNT WILL BE SHUT DOWN; LAST WARNING
App.support	21st December 2015
Your account will expire soon
Service Inc	20th December 2015
CHECK YOUR ACCOUNT
PayPal	20th December 2015
[Important] : Update Your Account Information

Vulnerebility

SANS News

Infocon Yellow: Juniper Backdoor (CVE-2015-7755 and CVE-2015-7756)

Critical Security Controls: Getting to know the unknown

Threatpost

Exploit

Ovidentia online Module 2.8 - GLOBALS[babAddonPhpPath] Remote File Inclusion

Ovidentia Widgets 1.0.61 - Remote Command Execution Exploit

Notepad++ NPPFtp Plugin 0.26.3 - Buffer Overflow

Base64 Decoder 1.1.2 - SEH OverWrite PoC

19.12.2015

Bugtraq

[SECURITY] [DSA 3428-1] tomcat8 security update 2015-12-18
Moritz Muehlenhoff (jmm debian org)

KL-001-2015-008 : Dell Pre-Boot Authentication Driver Uncontrolled Write to Arbitrary Address 2015-12-18
KoreLogic Disclosures (disclosures korelogic com)

[slackware-security] grub (SSA:2015-351-01) 2015-12-18
Slackware Security Team (security slackware com)

[slackware-security] libpng (SSA:2015-351-02) 2015-12-18
Slackware Security Team (security slackware com)

Executable uninstallers are vulnerable^WEVIL (case 12): Avira Registry Cleaner allows arbitrary code execution with escalation of privilege 2015-12-18
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3426-1] linux security update 2015-12-17
Salvatore Bonaccorso (carnil debian org)

ESA-2015-148: EMC Isilon OneFS Security Privilege Escalation Vulnerability 2015-12-17
Security Alert (Security_Alert emc com)

[oCERT 2015-011] PyAMF input sanitization errors (XXE) 2015-12-17
Daniele Bianco (danbia ocert org)

[SECURITY] [DSA 3425-1] tryton-server security update 2015-12-17
Luciano Bello (luciano debian org)

Malware

Phishing

SERVICE PPL	19th December 2015
Account Notification !
NOTICE	19th December 2015
PLEASE UPDATE YOUR INFORMATION
Wells Fargo	19th December 2015
New message from Wellsfargo online
HSBC UK	18th December 2015
Your HSBC Bank Account Notification.
HSBC UK	18th December 2015
Your HSBC Bank Account Notification

Vulnerebility

SANS News

VMWare Security Advisory

Threatpost

Exploit

Google Chrome - Renderer Process to Browser Process Privilege Escalation

18.12.2015

Bugtraq

[slackware-security] grub (SSA:2015-351-01) 2015-12-18
Slackware Security Team (security slackware com)

[slackware-security] libpng (SSA:2015-351-02) 2015-12-18
Slackware Security Team (security slackware com)

Executable uninstallers are vulnerable^WEVIL (case 12): Avira Registry Cleaner allows arbitrary code execution with escalation of privilege 2015-12-18
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3426-1] linux security update 2015-12-17
Salvatore Bonaccorso (carnil debian org)

ESA-2015-148: EMC Isilon OneFS Security Privilege Escalation Vulnerability 2015-12-17
Security Alert (Security_Alert emc com)

[oCERT 2015-011] PyAMF input sanitization errors (XXE) 2015-12-17
Daniele Bianco (danbia ocert org)

[SECURITY] [DSA 3425-1] tryton-server security update 2015-12-17
Luciano Bello (luciano debian org)

CVE-2015-5348 - Apache Camel medium disclosure vulnerability 2015-12-17
Claus Ibsen (claus ibsen gmail com)

[SECURITY] [DSA 3337-2] gdk-pixbuf security update 2015-12-17
Salvatore Bonaccorso (carnil debian org)

[slackware-security] mozilla-firefox (SSA:2015-349-03) 2015-12-16
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3424-1] subversion security update 2015-12-16
Moritz Muehlenhoff (jmm debian org)

Malware

JS-Nemucod

Backdoor:Python/Atalag.A
TrojanSpy:Python/Basonil.A
TrojanSpy:MSIL/Ohona.A

Phishing

HSBC UK	18th December 2015
Your HSBC Bank Account Notification.
HSBC UK	18th December 2015
Your HSBC Bank Account Notification
USAA	17th December 2015
IMPORTANT INFORMATION: PLEASE UPDATE NOW
USAA	17th December 2015
VERY IMPORTANT NOTIFICATION: UPDATE NOW
Upgrade X	17th December 2015
UPDATE

Vulnerebility

SANS News

ScreenOS vulnerability affects Juniper firewalls

TeslaCrypt ransomware sent using malicious spam

Threatpost

Exploit

Joomla 1.5 - 3.4.5 - Object Injection RCE X-Forwarded-For Header

Ovidentia maillist Module 4.0 - Remote File Inclusion Exploit

PFSense <= 2.2.5 - Directory Traversal

Windows Kernel win32k!OffsetChildren - Null Pointer Dereference

win32k Desktop and Clipboard - Null Pointer Derefence

win32k Clipboard Bitmap - Use-After-Free Vulnerability

Adobe Flash TextField.antiAliasType Setter - Use-After-Free

Adobe Flash TextField.gridFitType Setter - Use-After-Free

Adobe Flash MovieClip.lineStyle - Use-After-Frees

Adobe Flash GradientFill - Use-After-Frees

Samsung Galaxy S6 Samsung Gallery - GIF Parsing Crash

Samsung Galaxy S6 Samsung Gallery - Bitmap Decoding Crash

17.12.2015

Bugtraq

ESA-2015-148: EMC Isilon OneFS Security Privilege Escalation Vulnerability 2015-12-17
Security Alert (Security_Alert emc com)

[oCERT 2015-011] PyAMF input sanitization errors (XXE) 2015-12-17
Daniele Bianco (danbia ocert org)

[SECURITY] [DSA 3425-1] tryton-server security update 2015-12-17
Luciano Bello (luciano debian org)

CVE-2015-5348 - Apache Camel medium disclosure vulnerability 2015-12-17
Claus Ibsen (claus ibsen gmail com)

[SECURITY] [DSA 3337-2] gdk-pixbuf security update 2015-12-17
Salvatore Bonaccorso (carnil debian org)

[slackware-security] mozilla-firefox (SSA:2015-349-03) 2015-12-16
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3424-1] subversion security update 2015-12-16
Moritz Muehlenhoff (jmm debian org)

[security bulletin] HPSBHF03528 rev.1 - HP Network Products running VCX, Remote Unauthorized Modification 2015-12-16
security-alert hpe com

[SECURITY] [DSA 3423-1] cacti security update 2015-12-16
Luciano Bello (luciano debian org)

[SECURITY] [DSA 3421-1] grub2 security update 2015-12-16
Luciano Bello (luciano debian org)

[SECURITY] [DSA 3422-1] iceweasel security update 2015-12-16
Moritz Muehlenhoff (jmm debian org)

Shutdown UX DLL side loading vulnerability 2015-12-16
Securify B.V. (lists securify nl)

Shockwave Flash Object DLL side loading vulnerability 2015-12-16
Securify B.V. (lists securify nl)

[security bulletin] HPSBUX03529 SSRT102967 rev.1 - HP-UX BIND service running named, Remote Denial of Service (DoS) 2015-12-16
security-alert hpe com

Event Viewer Snapin multiple DLL side loading vulnerabilities 2015-12-16
Securify B.V. (lists securify nl)

libnsbmp: heap overflow (CVE-2015-7508) and out-of-bounds read (CVE-2015-7507) 2015-12-16
Hans Jerry Illikainen (hji dyntopia com)

FreeBSD Security Advisory FreeBSD-SA-15:27.bind 2015-12-16
FreeBSD Security Advisories (security-advisories freebsd org)

SQL Injection in orion.extfeedbackform Bitrix Module 2015-12-16
High-Tech Bridge Security Research (advisory htbridge ch)

RCE in Zen Cart via Arbitrary File Inclusion 2015-12-16
High-Tech Bridge Security Research (advisory htbridge ch)

libnsgif: stack overflow (CVE-2015-7505) and out-of-bounds read (CVE-2015-7506) 2015-12-16
Hans Jerry Illikainen (hji dyntopia com)

[slackware-security] openssl (SSA:2015-349-04) 2015-12-16
Slackware Security Team (security slackware com)

[slackware-security] bind (SSA:2015-349-01) 2015-12-16
Slackware Security Team (security slackware com)

Malware

SMS/FraudBilling.A

TrojanDownloader:PowerShell/Wedinga.A

Backdoor.Avubot

Linux.Kerlisen

Trojan.Sakurel.B

Phishing

_NoReply	16th December 2015
YOUR ACCOUNT IS BLACKLISTED!
PayPal	16th December 2015
YOUR PAYPAL ACCOUNT HAS BEEN LIMITED
NatWest	16th December 2015
Online Service Secure Notification
Info Service Dpt	15th December 2015
ACCOUNT TERMINATION
PayPal	15th December 2015
Limited Account Update Please
SERVICE PPL	15th December 2015
Your Account Will Be Suspended .
MSN Incoporation	15th December 2015
YOUR ACCOUNT IS AT RISKâ€?

Vulnerebility

SANS News

When Hunting BeEF, Yara rules (Part 2)

Threatpost

Critical Flaws Found in Network Management Systems

Exploit

Easy File Sharing Web Server 7.2 - GET HTTP Request SEH Buffer Overflow

Easy File Sharing Web Server 7.2 - HEAD HTTP Request SEH Buffer Overflow

Zen Cart 1.5.4 - Local File Inclusion

Gentoo Local Priv Escalation in QEMU

16.12.2015

Bugtraq

[SECURITY] [DSA 3422-1] iceweasel security update 2015-12-16
Moritz Muehlenhoff (jmm debian org)

Shutdown UX DLL side loading vulnerability 2015-12-16
Securify B.V. (lists securify nl)

Shockwave Flash Object DLL side loading vulnerability 2015-12-16
Securify B.V. (lists securify nl)

[security bulletin] HPSBUX03529 SSRT102967 rev.1 - HP-UX BIND service running named, Remote Denial of Service (DoS) 2015-12-16
security-alert hpe com

Event Viewer Snapin multiple DLL side loading vulnerabilities 2015-12-16
Securify B.V. (lists securify nl)

libnsbmp: heap overflow (CVE-2015-7508) and out-of-bounds read (CVE-2015-7507) 2015-12-16
Hans Jerry Illikainen (hji dyntopia com)

FreeBSD Security Advisory FreeBSD-SA-15:27.bind 2015-12-16
FreeBSD Security Advisories (security-advisories freebsd org)

SQL Injection in orion.extfeedbackform Bitrix Module 2015-12-16
High-Tech Bridge Security Research (advisory htbridge ch)

RCE in Zen Cart via Arbitrary File Inclusion 2015-12-16
High-Tech Bridge Security Research (advisory htbridge ch)

libnsgif: stack overflow (CVE-2015-7505) and out-of-bounds read (CVE-2015-7506) 2015-12-16
Hans Jerry Illikainen (hji dyntopia com)

[slackware-security] openssl (SSA:2015-349-04) 2015-12-16
Slackware Security Team (security slackware com)

[slackware-security] bind (SSA:2015-349-01) 2015-12-16
Slackware Security Team (security slackware com)

[slackware-security] libpng (SSA:2015-349-02) 2015-12-16
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3420-1] bind9 security update 2015-12-15
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3419-1] cups-filters security update 2015-12-15
Salvatore Bonaccorso (carnil debian org)

Malware

TrojanDownloader:MSIL/Banload.AL
TrojanDownloader:Win32/Banload.BFX
TrojanSpy:Win32/Ursnif.HP
Backdoor:Python/Covnoo.A
Backdoor:Win32/Blackhole.AE
Backdoor:Win32/Jadow.A
Trojan:Win32/Varpes.C!plock
Trojan:Win32/Varpes.A!plock
Trojan:Win32/Varpes.D!plock
Trojan:Win32/Varpes.I!plock

Phishing

Info Service Dpt	15th December 2015
ACCOUNT TERMINATION
PayPal	15th December 2015
Limited Account Update Please
SERVICE PPL	15th December 2015
Your Account Will Be Suspended .

Vulnerebility

SANS News

Playing With Sandboxes Like a Boss

Security Management vs Chaos: Understanding the Butterfly Effect to Manage Outcomes & Reduce Chaos

Threatpost

Exploit

Wireshark - iseries_parse_packet Heap-Based Buffer Overflow

Wireshark - dissect_tds7_colmetadata_token Stack-Based Buffer Overflow

Wireshark - wmem_alloc Assertion Failure

Wireshark - dissect_zcl_pwr_prof_pwrprofstatersp Static Out-of-Bounds Read

Wireshark - dissct_rsl_ipaccess_msg Static Out-of-Bounds Read

Wireshark - file_read (wtap_read_bytes_or_eof/mp2t_find_next_pcr) Stack-Based Buffer Overflow

Wireshark - memcpy (get_value / dissect_btatt) SIGSEGV

Wireshark - dissect_nbap_MACdPDU_Size SIGSEGV

Wireshark - my_dgt_tbcd_unpack Static Buffer Overflow

Wireshark - ascend_seek Static Out-of-Bounds Read

Wireshark - addresses_equal (dissect_rsvp_common) Use-After-Free

Wireshark - dissect_diameter_base_framed_ipv6_prefix Stack-Based Buffer Overflow

Wireshark - find_signature Stack-Based Out-of-Bounds Read

Wireshark - AirPDcapPacketProcess Stack-Based Buffer Overflow

Wireshark - getRate Stack-Based Out-of-Bounds Read

FireEye Wormable Remote Code Execution in MIP JAR Analysis

Ovidentia newsletter Module 2.2 - (admin.php) Remote File Inclusion Exploit

Joomla 1.5 - 3.4.5 - Object Injection Remote Command Execution

15.12.2015

Bugtraq

[SECURITY] [DSA 3419-1] cups-filters security update 2015-12-15
Salvatore Bonaccorso (carnil debian org)

Executable installers are vulnerable^WEVIL (case 10): McAfee Security Scan Plus, WebAdvisor and CloudAV (Beta) 2015-12-14
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3418-1] chromium-browser security update 2015-12-15
Michael Gilbert (mgilbert debian org)

[security bulletin] HPSBST03517 rev.1 - HP StoreOnce Backup systems, Remote Execution of Arbitrary Code with Privilege Elevation, Cross-Site Request Forgery (CSRF), Cross-Site Scripting (XSS) 2015-12-14
security-alert hpe com

Back to 28: Grub2 Authentication Bypass 0-Day [CVE-2015-8370] 2015-12-15
Hector Marco-Gisbert (hecmargi upv es)

phpback v1.1 XSS vulnerability 2015-12-15
apparitionsec gmail com

ERPSCAN Research Advisory [ERPSCAN-15-022] SAP NetWeaver 7.4 - XSS 2015-12-14
ERPScan inc (erpscan online gmail com)

[SECURITY] [DSA 3417-1] bouncycastle security update 2015-12-14
Luciano Bello (luciano debian org)

[ERPSCAN-15-021] SAP NetWeaver 7.4 - SQL Injection vulnerability 2015-12-14
ERPScan inc (erpscan online gmail com)

ECommerceMajor SQL Injection Vulnerability 2015-12-13
Rahul Pratap Singh (techno rps gmail com)

Malware

TrojanDownloader:MSIL/Genmaldow.C
TrojanDownloader:MSIL/Genmaldow.D
HackTool:MSIL/Noancooe.B
PWS:Win32/QQpass.GU

Infostealer.Zanjif

Phishing

Service	15th December 2015
[PR] Case ID : PP2996-65543-54343 12/12/2015 7:44
OFAMERICA BANK.	15th December 2015
DEAR ESTEEMED CUSTOMER,
Vodafone	14th December 2015
YOU HAVE RECEIVED A NEW MESSAGE
PayPal Service	14th December 2015
LOGIN TO YOUR ACCOUNT CONFIRM THE INFORMATION
PayPal	14th December 2015
Receipt for your payment to actmodz@gmail.com

Vulnerebility

SANS News

AD Security's Unofficial Guide to Mimikatz & Command Reference

Color My Logs: Providing Context for Your Logs Using Our Data

Threatpost

Exploit

Joomla 1.5 - 3.4.5 - Object Injection Remote Command Execution

IBM Tivoli Storage Manager FastBack Server 5.5.4.2 - Invalid Pointer Dereference

IBM Tivoli Storage Manager FastBack Server 5.5.4.2 - _FXCLI_SetConfFileChunk Stack Buffer...

IBM Tivoli Storage Manager FastBack Server 5.5.4.2 - _FXCLI_GetConfFileChunk Stack Buffer...

Microsoft Office / COM Object DLL Planting with comsvcs.dll Delay Load of mqrt.dll (MS15-132)

Legend Perl IRC Bot Remote Code Execution

Xdh / LinuxNet Perlbot / fBot IRC Bot Remote Code Execution

ECommerceMajor - (productdtl.php, prodid param) SQL Injection Vulnerability

WordPress Admin Management Xtended Plugin 2.4.0 - Privilege escalation

Polycom VVX-Series Business Media Phones - Path Traversal Vulnerability

Bitrix bitrix.mpbuilder Module 1.0.10 - Local File Inclusion

Bitrix bitrix.xscan Module 1.0.3 - Directory Traversal

Adobe Flash Type Confusion in IExternalizable.readExternal When Performing Local Serialization

Adobe Flash Type Confusion in Serialization with ObjectEncoder.dynamicPropertyWriter

14.12.2015

Bugtraq

ERPSCAN Research Advisory [ERPSCAN-15-022] SAP NetWeaver 7.4 - XSS 2015-12-14
ERPScan inc (erpscan online gmail com)

[SECURITY] [DSA 3417-1] bouncycastle security update 2015-12-14
Luciano Bello (luciano debian org)

[ERPSCAN-15-021] SAP NetWeaver 7.4 - SQL Injection vulnerability 2015-12-14
ERPScan inc (erpscan online gmail com)

ECommerceMajor SQL Injection Vulnerability 2015-12-13
Rahul Pratap Singh (techno rps gmail com)

[SECURITY] [DSA 3416-1] libphp-phpmailer security update 2015-12-13
Luciano Bello (luciano debian org)

COM+ Services DLL side loading vulnerability 2015-12-12
Securify B.V. (lists securify nl)

Malware

TrojanDropper:MSIL/Nunscant.A

Backdoor.Zelug

Phishing

HSBC	13th December 2015
HSBC Bank Account Notification.
National	13th December 2015
NatWest Bank Secure Notification.

Vulnerebility

SANS News

Color My Logs: Providing Context for Your Logs Using Our Data

Threatpost

Exploit

Windows XP-10 - Null-Free WinExec Shellcode (Python)

Siemens Simatic S7 1200 CPU Command Module (MSF)

ECommerceMajor - (productdtl.php, prodid param) SQL Injection Vulnerability

WordPress Admin Management Xtended Plugin 2.4.0 - Privilege escalation

13.12.2015

Bugtraq

COM+ Services DLL side loading vulnerability 2015-12-12
Securify B.V. (lists securify nl)

Windows Authentication UI DLL side loading vulnerability 2015-12-12
Securify B.V. (lists securify nl)

XSS Vulnerability in Synnefo Client for Synnefo IMS 2015 - CVE-2015-8247 2015-12-12
Aravind (altoarun gmail com)

[security bulletin] HPSBHF03431 rev.1 - HPE Network Switches, local Bypass of Security Restrictions, Indirect Vulnerabilities 2015-12-12
security-alert hpe com

APPLE-SA-2015-12-11-1 iTunes 12.3.2 2015-12-11
Apple Product Security (product-security-noreply lists apple com)

ORGIN STUDIOS Cms Multiple Vulnerability 2015-12-11
iedb team gmail com

Malware

Phishing

PaypaI Service	13th December 2015
WE'VE IIMITED ACCESS TO YOUR PAYPAI ACCOUNT
Paypal support	13th December 2015
YOUR PAYPAL ACCOUNT HAS BEEN LIMITED....
Bank of America	12th December 2015
Bank of America Customer Service - Sign-in to Online Banking Locked

Vulnerebility

SANS News

Use The Privilege

Threatpost

Exploit

12.12.2015

Bugtraq

[security bulletin] HPSBHF03431 rev.1 - HPE Network Switches, local Bypass of Security Restrictions, Indirect Vulnerabilities 2015-12-12
security-alert hpe com

APPLE-SA-2015-12-11-1 iTunes 12.3.2 2015-12-11
Apple Product Security (product-security-noreply lists apple com)

ORGIN STUDIOS Cms Multiple Vulnerability 2015-12-11
iedb team gmail com

Executable installers are vulnerable^WEVIL (case 7): 7z*.exe allows remote code execution with escalation of privilege 2015-12-08
Stefan Kanthak (stefan kanthak nexgo de)

WordPress <=v4.4 Username Exists Information Disclosure 2015-12-10
John SECURELI.com (john secureli com)

BFS-SA-2015-003: Internet Explorer CObjectElement Use-After-Free Vulnerability 2015-12-10
Blue Frost Security Research Lab (research bluefrostsecurity de)

Malware

Phishing

CIBC Online Banking	11th December 2015
LOGIN ALERT FOR OPERA ON WINDOWS. #621630051

Vulnerebility

SANS News

What Signs Are You Missing?

Threatpost

Exploit

11.12.2015

Bugtraq

Executable installers are vulnerable^WEVIL (case 7): 7z*.exe allows remote code execution with escalation of privilege 2015-12-08
Stefan Kanthak (stefan kanthak nexgo de)

WordPress <=v4.4 Username Exists Information Disclosure 2015-12-10
John SECURELI.com (john secureli com)

BFS-SA-2015-003: Internet Explorer CObjectElement Use-After-Free Vulnerability 2015-12-10
Blue Frost Security Research Lab (research bluefrostsecurity de)

SEC Consult SA-20151210-0 :: Skybox Platform Multiple Vulnerabilities 2015-12-10
SEC Consult Vulnerability Lab (research sec-consult com)

Cisco Security Advisory: Vulnerability in Java Deserialization Affecting Cisco Products 2015-12-09
Cisco Systems Product Security Incident Response Team (psirt cisco com)

APPLE-SA-2015-12-08-6 Xcode 7.2 2015-12-08
Apple Product Security (product-security-noreply lists apple com)

Secunia Research: Microsoft Windows usp10.dll "GetFontDesc()" Integer Underflow Vulnerability 2015-12-08
Secunia Research (remove-vuln secunia com)

APPLE-SA-2015-12-08-3 OS X El Capitan 10.11.2 and Security Update 2015-008 2015-12-08
Apple Product Security (product-security-noreply lists apple com)

[SECURITY] [DSA 3414-1] xen security update 2015-12-09
Moritz Muehlenhoff (jmm debian org)

[security bulletin] HPSBHF03432 rev.1 - HPE Networking Comware 5, Comware 5 Low Encryption SW, Comware 7, VCX Using NTP, Remote Access Restriction Bypass and Code Execution 2015-12-09
security-alert hpe com

APPLE-SA-2015-12-08-2 tvOS 9.1 2015-12-09
Apple Product Security (product-security-noreply lists apple com)

Cisco Security Advisory: Cisco Prime Collaboration Assurance Default Account Credential Vulnerability 2015-12-09
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Malware

TrojanDownloader:Win32/Banload.BFW

Phishing

Support Service	11th December 2015
NOTICE : WE HAVE MAKE SOME CHANGES ON OUR PAYPAL USERS AGREEMENT.
Microsoft	10th December 2015
Update
Support Service	10th December 2015
NOTICE : WE HAVE MAKE SOME CHANGES ON OUR PAYPAL USERS AGREEMENT.
Microsoft	10th December 2015
NatWest Credit Card Online Services - Balance Statement

Vulnerebility

SANS News

Everything old is new again - Blackhole exploit kit since November 2015

Threatpost

Banking Malware Moving Over Facebook Hosted in Cloud

Exploit

10.12.2015

Bugtraq

BFS-SA-2015-003: Internet Explorer CObjectElement Use-After-Free Vulnerability 2015-12-10
Blue Frost Security Research Lab (research bluefrostsecurity de)

SEC Consult SA-20151210-0 :: Skybox Platform Multiple Vulnerabilities 2015-12-10
SEC Consult Vulnerability Lab (research sec-consult com)

Cisco Security Advisory: Vulnerability in Java Deserialization Affecting Cisco Products 2015-12-09
Cisco Systems Product Security Incident Response Team (psirt cisco com)

APPLE-SA-2015-12-08-6 Xcode 7.2 2015-12-08
Apple Product Security (product-security-noreply lists apple com)

Secunia Research: Microsoft Windows usp10.dll "GetFontDesc()" Integer Underflow Vulnerability 2015-12-08
Secunia Research (remove-vuln secunia com)

APPLE-SA-2015-12-08-3 OS X El Capitan 10.11.2 and Security Update 2015-008 2015-12-08
Apple Product Security (product-security-noreply lists apple com)

[SECURITY] [DSA 3414-1] xen security update 2015-12-09
Moritz Muehlenhoff (jmm debian org)

APPLE-SA-2015-12-08-2 tvOS 9.1 2015-12-09
Apple Product Security (product-security-noreply lists apple com)

Cisco Security Advisory: Cisco Prime Collaboration Assurance Default Account Credential Vulnerability 2015-12-09
Cisco Systems Product Security Incident Response Team (psirt cisco com)

[CORE-2015-0014] - Microsoft Windows Media Center link file incorrectly resolved reference 2015-12-09
CORE Advisories Team (advisories coresecurity com)

[security bulletin] HPSBHF03433 SSRT102964 rev.1 - HP-UX Running Mozilla Firefox and Thunderbird, Remote Disclosure of Information 2015-12-09
security-alert hpe com

APPLE-SA-2015-12-08-5 Safari 9.0.2 2015-12-08
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-12-08-4 watchOS 2.1 2015-12-09
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-12-08-1 iOS 9.2 2015-12-08
Apple Product Security (product-security-noreply lists apple com)

[security bulletin] HPSBMU03520 rev.1 - HP Insight Control server provisioning, Remote Disclosure of Information 2015-12-09
security-alert hpe com

Path Traversal via CSRF in bitrix.xscan Bitrix Module 2015-12-09
High-Tech Bridge Security Research (advisory htbridge ch)

APPLE-SA-2015-12-08-4 watchOS 2.1 2015-12-08
Apple Product Security (product-security-noreply lists apple com)

Advisory: Arro and Other Android Taxi Hailing Apps Did Not Use SSL (Mobile Knowledge) 2015-12-08
securityresearch shaftek biz

[CVE-2015-7706] SECURE DATA SPACE API Multiple Non-Persistent Cross-Site Scripting Vulnerabilities 2015-12-09
Vogt, Thomas (Thomas Vogt secunet com)

XSS vulnerability in Intellect Core banking software - Polaris 2015-12-09
msahu controlcase com

PHP File Inclusion in bitrix.mpbuilder Bitrix Module 2015-12-09
High-Tech Bridge Security Research (advisory htbridge ch)

WordPress Users Ultra Plugin [Blind SQL injection] - Update 2015-12-08
Panagiotis Vagenas (pan vagenas gmail com)

Executable installers are vulnerable^WEVIL (case 9): Chrome's setup.exe allows arbitrary code execution and escalation of privilege 2015-12-09
Stefan Kanthak (stefan kanthak nexgo de)

MacOS/iPhone/Apple Watch/Apple TV libc File System Buffer Overflow 2015-12-08
submit cxsec org

[SECURITY] [DSA 3415-1] chromium-browser security update 2015-12-10
Michael Gilbert (mgilbert debian org)

Malware

EXP.CVE-2015-6124

Phishing

Support Service	10th December 2015
NOTICE : WE HAVE MAKE SOME CHANGES ON OUR PAYPAL USERS AGREEMENT.
Microsoft	10th December 2015
NatWest Credit Card Online Services - Balance Statement

Vulnerebility

SANS News

New Burp Feature - ClickBandit

Uninstalling Problem Applications using Powershell

Threatpost

Exploit

iy10 Dizin Scripti - Multiple Vulnerabilities

Gökhan Balbal Script 2.0 - CSRF Vulnerability

Skybox Platform <=7.0.611 - Multiple Vulnerabilities

Rar CmdExtract::UnstoreFile Integer Truncation Memory Corruption

Avast OOB Write Decrypting PEncrypt Packed Executables

Avast JetDb::IsExploited4x - Performs Unbounded Search on Input

Avast Heap Overflow Unpacking MoleBox Archives

Avast Integer Overflow Verifying numFonts in TTC Header

9.12.2015

Bugtraq

Executable installers are vulnerable^WEVIL (case 5): JRSoft InnoSetup 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

Executable installers are vulnerable^WEVIL (case 8): vlc-*.exe allows remote code execution with escalation of privilege 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

Executable installers are vulnerable^WEVIL (case 2): NSIS allows remote code execution with escalation of privilege 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

Malware

W97M.Rovoshell

Downloader.Hinired

Phishing

Vulnerebility

SANS News

Enforcing USB Storage Policy with PowerShell

Threatpost

Internet Root Name Servers Survive Unusual DDoS Attack

Exploit

Microsoft Windows Media Center Library Parsing RCE Vulnerability aka "self-executing" MCL File

Microsoft Windows Media Center Link File Incorrectly Resolved Reference

WIMAX LX350P(WIXFMR-108) - Multiple Vulnerabilities

WIMAX MT711x - Multiple Vulnerabilities

Wordpress Plugin WP Easy Poll 1.1.3 - XSS and CSRF

IE 11.0.9600.18097 COmWindowProxy::SwitchMarkup NULL PTR

MacOS X 10.11 FTS Deep Structure of the File System Buffer Overflow

8.12.2015

Bugtraq

Executable installers are vulnerable^WEVIL (case 5): JRSoft InnoSetup 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

Executable installers are vulnerable^WEVIL (case 8): vlc-*.exe allows remote code execution with escalation of privilege 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

Executable installers are vulnerable^WEVIL (case 2): NSIS allows remote code execution with escalation of privilege 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

iScripts Multicart Cms Multiple Vulnerability 2015-12-07
iedb team gmail com

WebBoutiques Cms Cross-Site Scripting Vulnerability 2015-12-07
iedb team gmail com

Executable installers are vulnerable^WEVIL (case 6): SumatraPDF-*-installer.exe allows remote code execution with escalation of privilege 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

Malware

TrojanSpy:Win32/Nivdort.BZ
TrojanSpy:Win32/Nivdort.CI
TrojanSpy:Win32/Nivdort.CJ
TrojanSpy:Win32/Nivdort.CK
TrojanSpy:Win32/Nivdort.CO
TrojanDownloader:JS/Swabfex.A
TrojanDownloader:MSIL/Bladabindi.J
TrojanDropper:Win32/Sulunch

Win32/Ramnit.O

VBA/TrojanDownloader.Agent

VBA/TrojanDownloader.Agent.L

VBA/TrojanDownloader.Agent.EM

VBA/TrojanDownloader.Agent.VX

VBA/TrojanDownloader.Agent.WF

VBA/TrojanDownloader.Agent.WJ

VBA/TrojanDownloader.Agent.WR

VBA/TrojanDownloader.Agent.XZ

VBA/TrojanDownloader.Agent.YA

VBA/TrojanDownloader.Agent.YI

VBA/TrojanDownloader.Agent.YJ

VBA/TrojanDownloader.Agent.YK

VBA/TrojanDownloader.Agent.YL

VBA/TrojanDownloader.Agent.YP

VBA/TrojanDownloader.Agent.YW

VBA/TrojanDownloader.Agent.YX

VBA/TrojanDownloader.Agent.ZC

VBA/TrojanDownloader.Agent.ZH

VBA/TrojanDownloader.Agent.ADX

Phishing

Argos	8th December 2015
WIN Â£1500 TO SPEND AT ARGOS!
Google	7th December 2015
Problem with your Google Account
Google	7th December 2015
Google ID: Profile Inaccurate
Chase Bank	7th December 2015
CHASE BANK ONLINE NOTICE
Natwest	6th December 2015
YOUR NATWEST DEBIT CARD REFUND NOTICE

Vulnerebility

SANS News

December 2015 Microsoft Patch Tuesday

Patch Tuesday Warmup: Internet Explorer Sunset and Windows XP Embedded End of Support

Continuous Monitoring for Random Strings

Threatpost

Bitcoin Extortionist Copycats on the Rise, Experts Say

Microsoft, Law Enforcement Collaborate in Dorkbot Takedown

Exploit

phpFileManager 0.9.8 Remote Code Execution

Atlassian HipChat for Jira Plugin Velocity Template Injection

SIMOGEO FileManager 2.3.0 - Multiple Vulnerabilities

OpenMRS 2.3 (1.11.4) - XML External Entity (XXE) Processing Exploit

OpenMRS 2.3 (1.11.4) - Expression Language Injection Vulnerability

OpenMRS 2.3 (1.11.4) - Multiple Cross-Site Scripting Vulnerabilities

OpenMRS 2.3 (1.11.4) - Local File Disclosure Vulnerability

PHP Utility Belt - Remote Code Execution

WordPress Polls Widget Plugin 1.0.7 - SQL Injection Vulnerability

iniNet SpiderControl SCADA Web Server Service 2.02 - Insecure File Permissions

iniNet SpiderControl PLC Editor Simatic 6.30.04 - Insecure File Permissions

7.12.2015

Bugtraq

Executable installers are vulnerable^WEVIL (case 8): vlc-*.exe allows remote code execution with escalation of privilege 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

Executable installers are vulnerable^WEVIL (case 2): NSIS allows remote code execution with escalation of privilege 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

iScripts Multicart Cms Multiple Vulnerability 2015-12-07
iedb team gmail com

WebBoutiques Cms Cross-Site Scripting Vulnerability 2015-12-07
iedb team gmail com

Executable installers are vulnerable^WEVIL (case 6): SumatraPDF-*-installer.exe allows remote code execution with escalation of privilege 2015-12-07
Stefan Kanthak (stefan kanthak nexgo de)

Command Injection in cool-video-gallery v1.9 Wordpress plugin 2015-12-07
Larry Cashdollar (larry0 me com)

[SYSS-2015-047] sysPass - Cross-Site Scripting (CWE-79) 2015-12-07
disclosure syss de

[SYSS-2015-046] sysPass - Insecure Direct Object References (CWE-932) 2015-12-07
disclosure syss de

Edimax BR-6478AC & Others Multiple Vulnerabilites 2015-12-07
mwinstead3790 gmail com

FreeBSD Security Advisory FreeBSD-SA-15:26.openssl 2015-12-05
FreeBSD Security Advisories (security-advisories freebsd org)

Malware

TrojanDropper:MSIL/Redwer.A
Win32/Varpes
BrowserModifier:Win32/Pokki

Trojan.Chikdos.B

Trojan.Ratopak

Win32/Ramnit.O

Phishing

Google	7th December 2015
Problem with your Google Account
Google	7th December 2015
Google ID: Profile Inaccurate
Chase Bank	7th December 2015
CHASE BANK ONLINE NOTICE
Natwest	6th December 2015
YOUR NATWEST DEBIT CARD REFUND NOTICE
Discover Customer Service	6th December 2015
Discover: Account Notice For Issue #32031
Account-Service	6th December 2015
YOUR ACCOUNT WILL BE LIMITED !
Thomas Jones	6th December 2015
TO JO@AOL.COM,AWESOME. HERE ARE NEW DEALS WITH 70% OFF

Vulnerebility

SANS News

Offensive Countermeasures against stolen passswords

Continuous Monitoring for Random Strings

Threatpost

Exploit

Cyclope Employee Surveillance <= v8.6.1- Insecure File Permissions

6.12.2015

Bugtraq

[SECURITY] [DSA 3413-1] openssl security update 2015-12-04
Salvatore Bonaccorso (carnil debian org)

[security bulletin] HPSBGN03525 rev.1: HP Performance Center Virtual Table Server, Remote Code Execution 2015-12-03
security-alert hpe com

[SECURITY] [DSA 3412-1] redis security update 2015-12-03
Salvatore Bonaccorso (carnil debian org)

ESA-2015-171 EMC NetWorker Denial-of-service Vulnerability 2015-12-03
Security Alert (Security_Alert emc com)

[slackware-security] mozilla-thunderbird (SSA:2015-337-02) 2015-12-03
Slackware Security Team (security slackware com)

[slackware-security] libpng (SSA:2015-337-01) 2015-12-03
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3411-1] cups-filters security update 2015-12-02
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

PayPal	5th December 2015
PAYPAL - YOUR ACCOUNT HAS UNRESOLVED ISSUES. VERIFY YOUR IDENTITY NOW!
PayPal	5th December 2015
PAYPAL - ACCOUNT UNRESOLVED ISSUES. VERIFY YOUR IDENTITY NOW!
BT	5th December 2015
BT CHANGING STATUS - PLEASE UPGRADE YOUR ACCOUNT NOW!
Apple	5th December 2015
Important - Validate your Apple account
Google	5th December 2015
YOU HAVE A NEW DOCUMENT FROM THE BANK!
PayPal	4th December 2015
Your account has been limited !

Vulnerebility

SANS News

Are you looking to setup your own Malware Sandbox?

Threatpost

OpenSSL Patches Bring Last Update for 0.9.8 and 1.0.0 Branches

Let’s Encrypt Initiative Enters Public Beta

Exploit

Cyclope Employee Surveillance <= v8.6.1- Insecure File Permissions

4.12.2015

Bugtraq

[SECURITY] [DSA 3413-1] openssl security update 2015-12-04
Salvatore Bonaccorso (carnil debian org)

[security bulletin] HPSBGN03525 rev.1: HP Performance Center Virtual Table Server, Remote Code Execution 2015-12-03
security-alert hpe com

[SECURITY] [DSA 3412-1] redis security update 2015-12-03
Salvatore Bonaccorso (carnil debian org)

ESA-2015-171 EMC NetWorker Denial-of-service Vulnerability 2015-12-03
Security Alert (Security_Alert emc com)

[slackware-security] mozilla-thunderbird (SSA:2015-337-02) 2015-12-03
Slackware Security Team (security slackware com)

[slackware-security] libpng (SSA:2015-337-01) 2015-12-03
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3411-1] cups-filters security update 2015-12-02
Moritz Muehlenhoff (jmm debian org)

Ellucian Banner Student Vulnerability Disclosure 2015-12-02
sean dillon risksense com

WordPress Users Ultra Plugin [Persistence XSS] 2015-12-02
pan vagenas gmail com

WordPress Users Ultra Plugin [Blind SQL injection] 2015-12-02
pan vagenas gmail com

Malware

Trojan.Chikdos.B

Trojan.Browrat

JS/TrojanDownloader.Nemucod

VBA/TrojanDownloader.Agent.AEA

Win32/Ramnit.BV

TrojanSpy:MSIL/Banker.P

Phishing

PayPal	4th December 2015
Your account has been limited !
PayPal Inc	4th December 2015
WARNING! YOU MUST UPDATE ALL YOUR INFORMATIONS
PayPal Inc	4th December 2015
[ PAYPAL ] : VIEW YOUR RECENT ACTIVITY . #PP = 62218296612210384
Service Inc	4th December 2015
[PAYPAL:PLEASE CHECK YOUR ACCOUNT]
Service	4th December 2015
PAYPAL UPDATE NOW

Vulnerebility

SANS News

Automating Phishing Analysis using BRO

Threatpost

Exploit

Wordpress Plugin Advanced uploader v2.10 - Multiple Vulnerabilities

Wordpress Plugin Sell Download v1.0.16 - Local File Disclosure

Wordpress Plugin TheCartPress v1.4.7 - Multiple Vulnerabilities

3.12.2015

Bugtraq

ESA-2015-171 EMC NetWorker Denial-of-service Vulnerability 2015-12-03
Security Alert (Security_Alert emc com)

[slackware-security] mozilla-thunderbird (SSA:2015-337-02) 2015-12-03
Slackware Security Team (security slackware com)

[slackware-security] libpng (SSA:2015-337-01) 2015-12-03
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3411-1] cups-filters security update 2015-12-02
Moritz Muehlenhoff (jmm debian org)

Ellucian Banner Student Vulnerability Disclosure 2015-12-02
sean dillon risksense com

WordPress Users Ultra Plugin [Persistence XSS] 2015-12-02
pan vagenas gmail com

WordPress Users Ultra Plugin [Blind SQL injection] 2015-12-02
pan vagenas gmail com

Gnome Nautilus [Denial of Service] 2015-12-02
pan vagenas gmail com

SQLi Vulnerability in ATuter management system 2015-12-02
sirus shahini gmail com

Two Reflected XSS Vulnerabilities in Calls to Action WordPress plugin 2015-12-02
High-Tech Bridge Security Research (advisory htbridge ch)

Reflected XSS in Ultimate Member WordPress Plugin 2015-12-02
High-Tech Bridge Security Research (advisory htbridge ch)

Malware

TrojanSpy:MSIL/Banker.P
TrojanDownloader:Win32/Banload.BFM
TrojanDownloader:VBS/Banload.AS
TrojanDownloader:MSIL/Banload.AK

JS.Teslader

JS.Enigmaper

Phishing

Vulnerebility

SANS News

New variant of CryptoWall - Is it right to call it 4.0?

Threatpost

Exploit

Gnome Nautilus 3.16 - Denial of Service

Acunetix WVS 10 - Local Privilege escalation

Oracle BeeHive 2 voice-servlet processEvaluation() Vulnerability

Oracle BeeHive 2 voice-servlet prepareAudioToPlay() Arbitrary File Upload

Advantech Switch Bash Environment Variable Code Injection (Shellshock)

WordPress Users Ultra Plugin 1.5.50 - Blind SQL injection

WordPress Users Ultra Plugin 1.5.50 - Persistent XSS

WordPress Gwolle Guestbook Plugin 1.5.3 - Remote File Inclusion

Malwarebytes Antivirus 2.2.0 - DoS PoC

2.12.2015

Bugtraq

WordPress Users Ultra Plugin [Persistence XSS] 2015-12-02
pan vagenas gmail com

WordPress Users Ultra Plugin [Blind SQL injection] 2015-12-02
pan vagenas gmail com

Gnome Nautilus [Denial of Service] 2015-12-02
pan vagenas gmail com

SQLi Vulnerability in ATuter management system 2015-12-02
sirus shahini gmail com

Two Reflected XSS Vulnerabilities in Calls to Action WordPress plugin 2015-12-02
High-Tech Bridge Security Research (advisory htbridge ch)

Reflected XSS in Ultimate Member WordPress Plugin 2015-12-02
High-Tech Bridge Security Research (advisory htbridge ch)

Remote File Inclusion in Gwolle Guestbook WordPress Plugin 2015-12-02
High-Tech Bridge Security Research (advisory htbridge ch)

Reflected XSS in Role Scoper WordPress Plugin 2015-12-02
High-Tech Bridge Security Research (advisory htbridge ch)

Reflected Cross-Site Scripting (XSS) in SourceBans 2015-12-02
High-Tech Bridge Security Research (advisory htbridge ch)

[SECURITY] [DSA 3409-1] putty security update 2015-12-01
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3410-1] icedove security update 2015-12-01
Moritz Muehlenhoff (jmm debian org)

Zenphoto 1.4.10 Local File Inclusion 2015-12-02
apparitionsec gmail com

Zenphoto 1.4.10 XSS Vulnerability 2015-12-01
apparitionsec gmail com

[SECURITY] [DSA 3408-1] gnutls26 security update 2015-12-01
Salvatore Bonaccorso (carnil debian org)

Malware

Trojan:Win32/Startpage.XW
TrojanDropper:Win32/Binuflix.A
PWS:MSIL/Stimilina.N
Backdoor:MSIL/Omaneat.A

Backdoor.Boksdrop

VBA/TrojanDownloader.Agent.AIK

VBA/TrojanDownloader.Agent.AHU

MSIL/Agent.QVI

VBA/TrojanDownloader.Agent.AEA

Phishing

Vulnerebility

SANS News

Nessus and Powershell is like Chocolate and Peanut Butter!

The Perils of Vendor Bloatware

Threatpost

Exploit

Advantech Switch Bash Environment Variable Code Injection (Shellshock)

Acunetix WVS 10 - Local Privilege escalation

1.12.2015

Bugtraq

Zenphoto 1.4.10 XSS Vulnerability 2015-12-01
apparitionsec gmail com

[SECURITY] [DSA 3408-1] gnutls26 security update 2015-12-01
Salvatore Bonaccorso (carnil debian org)

Huawei Wimax routers vulnerable to multiple threats 2015-11-30
Pierre Kim (pierre kim sec gmail com)

[SE-2014-02] Errata document for Issue 42 (CVE-2015-4871 affecting Java SE 7) 2015-11-30
Security Explorations (contact security-explorations com)

LSE Leading Security Experts GmbH - LSE-2015-10-14 - HumHub SQL-Injection 2015-11-30
advisories (advisories lsexperts de)

Proftpd 1.3.5a LATEST (0-day) Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-30
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd 1.3.5a LATEST 0day Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-30
Nicholas Lemonias. (lem nikolas googlemail com)

Belkin N150 Wireless Home Router Multiple Vulnerabilities 2015-11-30
Rahul Pratap Singh (techno rps gmail com)

Malware

HackTool:Win32/Kapahyku.A
TrojanDropper:Win32/Nivdort.A
TrojanSpy:Win32/Nivdort.CE

Trojan.Otlard

JS.Nemucod

Phishing

Lloyds Bank	1st December 2015
LloydsBank.RestrictionCode 532176
PayPal Inc	1st December 2015
[ PAYPAL ] : VIEW YOUR RECENT ACTIVITY . #PP = 62218296612210384
Email Administrator	1st December 2015
Webmail Account Security!
Admin	1st December 2015
RESTORE
paypal	30th November 2015
UPDATE YOUR ACCOUNT INFORMATION

Vulnerebility

SANS News

Tracking SSL Certificates

Threatpost

Embedded Devices Share, Reuse Private SSH Keys, HTTPs Certificates

China APT Gang Targets Hong Kong Media via Dropbox

Exploit

Kodi 15 - Arbitrary File Aaccess (Web Interface)

Belkin N150 Wireless Home Router F9K1009 v1 - Multiple Vulnerabilities

Zenphoto 1.4.10 - Local File Inclusion

ntop-ng <= 2.0.151021 - Privilege Escalation

HumHub 0.11.2 and 0.20.0-beta.2 - SQL Injection

RHEL 7.0/7.1 - abrt/sosreport Local Root

Centos 7.1/Fedora 22 - abrt Local Root

30.11.2015

Bugtraq

LSE Leading Security Experts GmbH - LSE-2015-10-14 - HumHub SQL-Injection 2015-11-30
advisories (advisories lsexperts de)

Proftpd 1.3.5a LATEST (0-day) Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-30
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd 1.3.5a LATEST 0day Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-30
Nicholas Lemonias. (lem nikolas googlemail com)

Belkin N150 Wireless Home Router Multiple Vulnerabilities 2015-11-30
Rahul Pratap Singh (techno rps gmail com)

Proftpd 1.3.5a LATEST 0day Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-29
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd 1.3.5a LATEST 0day (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation Audit Report. 2015-11-29
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd 1.3.5a LATEST 0day Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-30
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd 1.3.5a LATEST 0day Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-30
lem nikolas gmail com

Proftpd 1.3.5a LATEST 0day Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-30
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd 1.3.5a LATEST 0day Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-30
aiscorp gives greetz com

Proftpd 1.3.5a LATEST 0day Follow-up report (Part 2), Patch released!! 29/11/2015 --- Advanced Information Security Corporation 2015-11-30
Nicholas Lemonias. (lem nikolas googlemail com)

[FD] Visual Paradigm Server v10.0 - Cross Site Scripting (XSS) 2015-11-27
Manuel Mancera (mmancera a2secure com)

[SECURITY] [DSA 3407-1] dpkg security update 2015-11-26
Salvatore Bonaccorso (carnil debian org)

Malware

Backdoor.Surge

Trojan.Melongad

Phishing

Support	29th November 2015
FWD: PLEASE VERIFY YOUR ACCOUNT APPLE ID FOR SECURITY REASONS !
PayPal	29th November 2015
ACCOUNT NOTIFICATIONS
IMMO USA	29th November 2015
ORLANDO , LA VILLE DU FUTUR , THE CITY OF THE FUTURE
Pay.service	28th November 2015
Please verify your account
Support	28th November 2015
FWD: PLEASE VERIFY YOUR ACCOUNT APPLE ID FOR SECURITY REASONS !
auto-confirm@amazon.com	28th November 2015
YOUR AMAZON.COM ORDER OF "PS4 SLIM BLACK+CONSOLE 2"
Keshan S. Watson	28th November 2015
PayPal Alert

Vulnerebility

SANS News

Malicious spam - Subject: RE: Bill

Known ?Good? DNS, An Observation

Threatpost

Lenovo Patches Vulnerabilities in System Update Service

Exploit

Linux x86_64 Polymorphic execve Shellcode - 31 bytes

25.11.2015

Bugtraq

[SECURITY] [DSA 3404-1] python-django security update 2015-11-25
Salvatore Bonaccorso (carnil debian org)

CIS Manager Content Management System 2015Q4 - SQL Injection Vulnerability 2015-11-25
Vulnerability Lab (research vulnerability-lab com)

[security bulletin] HPSBGN03523 rev.1 - HP Loadrunner Virtual Table Server, Remote Code Execution 2015-11-25
security-alert hpe com

[slackware-security] pcre (SSA:2015-328-01) 2015-11-25
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3403-1] libcommons-collections3-java security update 2015-11-24
Moritz Muehlenhoff (jmm debian org)

ESA-2015-164: EMC Isilon OneFS Privilege Escalation Vulnerability 2015-11-24
Security Alert (Security_Alert emc com)

[SECURITY] [DSA 3402-1] symfony security update 2015-11-24
Salvatore Bonaccorso (carnil debian org)

Steam Weak File Permissions Privilege Escalation 2015-11-23
ajs swordshield com

CVE-2015-5255: SSRF vulnerability in Apache Flex BlazeDS 4.7.1 2015-11-23
Christofer Dutz (cdutz apache org)

Malware

Worm:Win32/Conficker.B!inf
Trojan:HTML/Pdfphish.A

PHP.Filesman

VBA/TrojanDownloader.Agent.AJD

Phishing

Sonya Owens	25th November 2015
WET PUSSY REQUEST
Google Team	24th November 2015
GOOGLE ID: PROFILE INACCURATE

email update	25th November 2015
SETUP
Sonya Owens	25th November 2015
WET PUSSY REQUEST
Google Team	24th November 2015
GOOGLE ID: PROFILE INACCURATE
QuickBooks Online Payroll	23rd November 2015
Security Alert: About Your Account
QuickBooks Payroll Services	23rd November 2015
SECURITY ALERT: ACCOUNT REVIEW

Vulnerebility

SANS News

Threatpost

Nuclear Exploit Kit Spreading Cryptowall 4.0 Ransomware

Exploit

SAP Sybase Adaptive Server Enterprise XML External Entity Information Disclosure Vulnerability

WP-Client 3.8.7 - Stored XSS Vulnerability

24.11.2015

Bugtraq

[SECURITY] [DSA 3402-1] symfony security update 2015-11-24
Salvatore Bonaccorso (carnil debian org)

Steam Weak File Permissions Privilege Escalation 2015-11-23
ajs swordshield com

Malware

BrowserModifier:Win32/Smudplu

Phishing

QuickBooks Online Payroll	23rd November 2015
Security Alert: About Your Account
QuickBooks Payroll Services	23rd November 2015
SECURITY ALERT: ACCOUNT REVIEW

Vulnerebility

SANS News

BizCN gate actor sends CryptoWall 4.0

Superfish 2.0: Dell Windows Systems Pre-Installed TLS Root CA

Threatpost

Backdoor In A Backdoor Identified in 600,000 Arris Modems

Stealthy GlassRAT Spies on Commercial Targets

Exploit

Windows ndis.sys IOCTL 0x170034 (ndis!ndisNsiGetIfNameForIfIndex) - Pool Buffer Overflow (MS15-117)

Windows Cursor Object Potential Memory Leak (MS15-115)

Windows Race Condition DestroySMWP Use-After-Free (MS15-115)

Windows Kernel Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115)

Joomla Content History SQLi Remote Code Execution

vBulletin 5.x - Remote Code Execution Exploit

NVIDIA Stereoscopic 3D Driver Service 7.17.13.5382 - Arbitrary Run Key Creation

23.11.2015

Bugtraq

Steam Weak File Permissions Privilege Escalation 2015-11-23
ajs swordshield com

CVE-2015-5255: SSRF vulnerability in Apache Flex BlazeDS 4.7.1 2015-11-23
Christofer Dutz (cdutz apache org)

[ERPSCAN-15-018] SAP NetWeaver 7.4 - XXE 2015-11-23
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-019] SAP Afaria - Stored XSS 2015-11-23
ERPScan inc (erpscan online gmail com)

[FD] Celoxis <= 9.5 - Cross Site Scripting (XSS) 2015-11-23
Manuel Mancera (mmancera a2secure com)

[ERPSCAN-15-020] SAP Mobile Platform 2.3 - XXE in application import 2015-11-23
ERPScan inc (erpscan online gmail com)

Proftpd v1.3.5a ZERODAY - Heap Overflows due to zero length mallocs. Advanced Information Security Corporation 2015-11-22
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd v1.3.5a ZERODAY - Malloc issues Advanced Information Security Corporation 2015-11-22
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd v1.3.5a ZERODAY - Heap Overflows due to zero length mallocs. Advanced Information Security Corporation 2015-11-22
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd ZERODAY - Malloc issues Advanced Information Security Corporation 2015-11-22
Nicholas Lemonias. (lem nikolas googlemail com)

Proftpd v1.3.5a ZERODAY - Heap Overflows due to zero length mallocs. Advanced Information Security Corporation 2015-11-23
Nicholas Lemonias. (lem nikolas googlemail com)

Fwd: CVE-2015-5257 - Weak Randomization of BridgeSecret for Apache Cordova Android 2015-11-20
Shazron (shazron apache org)

Malware

Trojan:Win32/Gatak
TrojanDropper:MSIL/Fatext.A

Trojan.Cryptolocker.AB

Unix.Ransomcrypt.B

Phishing

paypal	23rd November 2015
YOUR ACCOUNT WILL BE CLOSED
Pay'Pal@Services.com	23rd November 2015
PAYPAL -ACCOUNT NEED TO CONFIRMATION (PP-963-230-780-300) âœ”
Mail System Administrator	22nd November 2015
INCOMING MESSAGES FOR J@AOL.COM IS BLOCKED
service@intl.paypal	22nd November 2015
NOTE : TEAM PAYPAL YOU HAVE A PROBLEM WITH YOUR PAYPAL ACCOUNT ! âœ‰

Vulnerebility

SANS News

OpenDNS Research Used to Predict Threat

Automatic MIME attachments triage

Threatpost

Starwood Hotel Chain Hit By Point of Sale Malware

Exploit

vBulletin 5.x - Remote Code Execution Exploit

Acrobat Reader DC 15.008.20082.15957 - PDF Parsing Memory Corruption Vulnerability

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption Vulnerability

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption Vulnerability 2

Audacious 3.7 - ID3 Local Crash PoC

22.11.2015

Bugtraq

Fwd: CVE-2015-5257 - Weak Randomization of BridgeSecret for Apache Cordova Android 2015-11-20
Shazron (shazron apache org)

Fwd: CVE-2015-5256: Apache Cordova vulnerable to improper application of whitelist restrictions 2015-11-20
Shazron (shazron apache org)

[SECURITY] [DSA 3400-1] lxc security update 2015-11-19
Salvatore Bonaccorso (carnil debian org)

[security bulletin] HPSBUX03522 SSRT102942 rev.1 - HP-UX BIND running named, Remote Denial of Service (DoS) 2015-11-19
security-alert hpe com

NEW VMSA-2015-0008 - VMware product updates address information disclosure issue 2015-11-19
VMware Security Response Center (security vmware com)

Malware

Phishing

PayPal	22nd November 2015
Update Your PayPal Account !
PayPal	22nd November 2015
YOUR PAYPAL ACCOUNT HAS BEEN LIMITED.
National	20th November 2015
RE: ILLUMINATI CONSPIRACIES - NATIONAL LOTTERY FIXTURES
rolando moreno palos	20th November 2015
No prescription pharmacy - cheap generic medications

Vulnerebility

SANS News

Maldoc Social Engineering Trick

Threatpost

German Government Audits TrueCrypt

VMware Patches Pesky XXE Bug in Flex BlazeDS

Exploit

20.11.2015

Bugtraq

[SECURITY] [DSA 3400-1] lxc security update 2015-11-19
Salvatore Bonaccorso (carnil debian org)

[security bulletin] HPSBUX03522 SSRT102942 rev.1 - HP-UX BIND running named, Remote Denial of Service (DoS) 2015-11-19
security-alert hpe com

Malware

TrojanDownloader:MSIL/Genmaldow.A
TrojanDownloader:MSIL/Pstinb.E
TrojanDownloader:MSIL/Pstinb.J

Phishing

rolando moreno palos	20th November 2015
No prescription pharmacy - cheap generic medications
Dr.	19th November 2015
J - TRUST ME THIS WILL CURE YOUR DIABETES!
Royal Bank	19th November 2015
Online Banking (Wire Transfer )***********************Paym ent Alert From Royal Bank Of

Vulnerebility

SANS News

SIEM is not a product, its a process...

When Hunting BeEF, Yara rules.

Threatpost

Exploit

F5 iControl iCall::Script Root Command Execution

Chkrootkit Local Privilege Escalation

ZTE ADSL ZXV10 W300 Modems - Multiple Vulnerabilities

ZTE ZXHN H108N R1A, ZXV10 W300 Routers - Multiple Vulnerabilities

Cambium ePMP 1000 - Multiple Vulnerabilities

Netwin SurgeFTP Sever 23d6 - Stored Cross Site Scripting Vulnerabilities.

19.11.2015

Bugtraq

[security bulletin] HPSBUX03522 SSRT102942 rev.1 - HP-UX BIND running named, Remote Denial of Service (DoS) 2015-11-19
security-alert hpe com

NEW VMSA-2015-0008 - VMware product updates address information disclosure issue 2015-11-19
VMware Security Response Center (security vmware com)

CVE-2015-8131: Kibana CSRF vulnerability 2015-11-18
Kevin Kluge (kevin elastic co)

IBM i Access Buffer Overflow Code DOS CVE-2015-7422 2015-11-18
apparitionsec gmail com

IBM i Access Buffer Overflow Code Exec CVE-2015-2023 2015-11-18
apparitionsec gmail com

[security bulletin] HPSBGN03521 rev.2 - HP Operations Orchestration Central, Cross-Site Request Forgery (CSRF) 2015-11-18
security-alert hpe com

[SECURITY] [DSA 3399-1] libpng security update 2015-11-18
Salvatore Bonaccorso (carnil debian org)

RCE and SQL injection via CSRF in Horde Groupware 2015-11-18
High-Tech Bridge Security Research (advisory htbridge ch)

Malware

VBA/TrojanDownloader.Agent.AIU

VBA/TrojanDownloader.Agent.AIQ

VBA/TrojanDownloader.Agent.AIP

Win32/Gudra.A

Win32/Kitkiot.A

Phishing

Royal Bank	19th November 2015
Online Banking (Wire Transfer )***********************Paym ent Alert From Royal Bank Of
Chase	18th November 2015
Unverified Attempt Access Chase Online
Natwest Bank	18th November 2015
Important Information Update From Natwest Online.
VISA	18th November 2015
APPLY HERE. 1. 100 % SAFE AND SECURE WAY TO GET A JOB

Vulnerebility

SANS News

Actors using exploit kits - How they change tactics

Threatpost

VirusTotal Adds Sandbox Execution for OS X Apps

FBI Warns Public Officials of Doxing Threat

Exploit

IBM i Access 7.1 - Buffer Overflow Code Execution

F5 iControl iCall::Script Root Command Execution

Netwin SurgeFTP Sever 23d6 - Stored Cross Site Scripting Vulnerabilities.

Horde Groupware 5.2.10 - CSRF Vulnerability

WordPress Users Ultra Plugin 1.5.50 - Unrestricted File Upload

SuperScan 4.1 - Scan Hostname/IP Field Buffer Overflow

SuperScan 4.1 - Tools Hostname/IP/URL Field Buffer Overflow

SuperScan 4.1 - Windows Enumeration Hostname/IP/URL Field SEH Overflow

Sam Spade 1.14 - Decode URL Buffer Overflow Crash PoC

Chrome - open-vcdiff OOB Read in Browser Process Integer Overflow

18.11.2015

Bugtraq

RCE and SQL injection via CSRF in Horde Groupware 2015-11-18
High-Tech Bridge Security Research (advisory htbridge ch)

Adobe Premiere Clip v1.1.1 iOS - (cid:x) Filter Bypass & Persistent Software Vulnerability 2015-11-18
Vulnerability Lab (research vulnerability-lab com)

[security bulletin] HPSBGN03521 rev.1 - HP Operations Orchestration Central, Cross-Site Request Forgery (CSRF) 2015-11-17
security-alert hpe com

WordPress Users Ultra Plugin [Unrestricted File Upload] 2015-11-17
pan vagenas gmail com

ESA-2015-163: EMC VPLEX Sensitive Information Exposure Vulnerability 2015-11-17
Security Alert (Security_Alert emc com)

Open-Xchange Security Advisory 2015-11-17 2015-11-17
Martin Heiland (martin heiland lists open-xchange com)

Malware

TrojanDownloader:MSIL/Banload.AJ
Rogue:MSIL/Rustliver
TrojanProxy:Win32/Bunitu.N
PWS:HTML/Phish.GK
TrojanDownloader:Win32/Banload.BFP
TrojanDownloader:Win32/Banload.BFN
Trojan:Win32/Zlader.A
TrojanDropper:JS/Zlader.B
Trojan:Win32/Anaki.A

Phishing

VISA	18th November 2015
APPLY HERE. 1. 100 % SAFE AND SECURE WAY TO GET A JOB
Cindy Mclaughlin	17th November 2015
A THREESOME REQUEST
USAA Member Service © 2015	17th November 2015
Unsuccessful Login Attempts
iTunes Store	17th November 2015
YOUR ACCOUNT WILL EXPIRE IN 48 HOURS.

Vulnerebility

SANS News

Help Wanted: Please help test our experimental PFSense Client

Threatpost

Patched Libpng Vulnerabilities Have Limited Scope

Attackers Embracing Steganography to Hide Communication

Microsoft Cracks Down on Toolbars, Unsigned DLLs with Edge Update

Exploit

WordPress Users Ultra Plugin 1.5.50 - Unrestricted File Upload

17.11.2015

Bugtraq

WordPress Users Ultra Plugin [Unrestricted File Upload] 2015-11-17
pan vagenas gmail com

ESA-2015-163: EMC VPLEX Sensitive Information Exposure Vulnerability 2015-11-17
Security Alert (Security_Alert emc com)

Open-Xchange Security Advisory 2015-11-17 2015-11-17
Martin Heiland (martin heiland lists open-xchange com)

Free WMA MP3 Converter - Buffer Overflow Exploit (SEH) 2015-11-17
Vulnerability Lab (research vulnerability-lab com)

Murgent CMS - SQL Injection Vulnerability 2015-11-17
Vulnerability Lab (research vulnerability-lab com)

Magento Bug Bounty #22 - (Profile) Persistent Vulnerability 2015-11-17
Vulnerability Lab (research vulnerability-lab com)

Magento Bug Bounty #24 - Multiple CSRF Web Vulnerabilities 2015-11-17
Vulnerability Lab (research vulnerability-lab com)

Port Scan v2.0 iOS - Command Inject Vulnerability 2015-11-17
Vulnerability Lab (research vulnerability-lab com)

LAN Scan HD v1.20 iOS - Command Inject Vulnerability 2015-11-17
Vulnerability Lab (research vulnerability-lab com)

Malware

VBA/TrojanDownloader.Agent.AIM

EK_ExploitKit

Phishing

USAA Member Service © 2015	17th November 2015
Unsuccessful Login Attempts
iTunes Store	17th November 2015
YOUR ACCOUNT WILL EXPIRE IN 48 HOURS.
BTMail Administrator	17th November 2015
Account Suspention (Nov. 2015)
Health Coverage UK	16th November 2015
Y
SunTrust Bank	16th November 2015
Important Notice For SunTrust Account Holder.

Vulnerebility

SANS News

Automatic MIME attachments triage

Threatpost

Attackers Can Use SAP to Bridge Corporate, Operational ICS Networks

Google to Warn Recipients of Unencrypted Gmail Messages

Exploit

D-Link DIR-815, DIR-850L - SSDP Command Injection

D-Link DIR-890L/R - Multiple Buffer Overflow Vulnerabilities

D-Link DIR-866L - Multiple Buffer Overflow Vulnerabilities

D-Link DIR-825 (vC) - Multiple Vulnerabilities

D-Link DIR-818W - Multiple Vulnerabilities

D-Link DIR-817LW - Multiple Vulnerabilities

D-Link DIR-815 - Multiple Vulnerabilities

D-Link DIR-645 - Multiple UPNP Vulnerabilities

D-Link DIR-615 - Multiple Buffer Overflow Vulnerabilities

D-Link DIR-601 - Command Injection Vulnerability

D-Link DIR-880L - Multiple Buffer Overflow Vulnerabilities

D-Link DGL5500 - HNAP Buffer Overflow Vulnerability

ClipperCMS 1.3.0 - Code Execution Vulnerability

XCart 5.2.6 - Code Execution Vulnerability

Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload

Idera Up.Time Monitoring Station 7.4 post2file.php Arbitrary File Upload

VLC Web Interface 2.2.1 - Metadata Title XSS Vulnerability

D-link Wireless Router DIR-816L – CSRF Vulnerability

AlegroCart 1.2.8 - Multiple SQL Injection Vulnerabilities

AlegroCart 1.2.8 - LFI/RFI Vulnerability

ClipperCMS 1.3.0 - Multiple SQL Injection Vulnerabilities

foobar2000 1.3.9 - (.asx) Local Crash PoC

Sam Spade 1.14 - Browse URL Buffer Overflow PoC

foobar2000 1.3.9 - (.pls; .m3u; .m3u8) Local Crash PoC

foobar2000 1.3.9 - (.asx) Local Crash PoC

Windows Kernel win32k.sys Malformed TrueType Program TTF Font Processing Pool-Based...

Windows Kernel win32k.sys Malformed OS/2 Table TTF Font Processing Pool-Based Buffer...

Kaspersky Antivirus - Certificate Handling Path Traversal

16.11.2015

Bugtraq

[SECURITY] [DSA 3398-1] strongswan security update 2015-11-16
Yves-Alexis Perez (corsac debian org)

CVE-2015-6357: Cisco FireSIGHT Management Center SSL Validation Vulnerability 2015-11-16
Matthew Flanagan (mattimustang gmail com)

SYSS-2015-061 Wirecard Checkout Page - Improper Validation of Integrity Check Value 2015-11-13
martin sturm syss de

Malware

Trojan:Win32/Varpes.J!plock
TrojanSpy:Win32/Nivdort.BV
TrojanSpy:Win32/Nivdort.BW
TrojanSpy:Win32/Nivdort.BX
TrojanDownloader:Win32/Banload.BFK

Phishing

SunTrust Bank	16th November 2015
Important Notice For SunTrust Account Holder.
Online	16th November 2015
BANK OF AMERICA: FINAL NOTIFICATION UPDATE
PaypaI Service	15th November 2015
Reminder: Your Paypal account will be Iimited until we hear from you

Vulnerebility

SANS News

Scanning tricks with scapy

Threatpost

Exploit

D-link Wireless Router DIR-816L – CSRF Vulnerability

CF Image Host 1.65 - CSRF Vulnerability

CF Image Host 1.65 - PHP Command Injection

TECO SG2 FBD Client 3.51 - .gfb SEH Overwrite Buffer Overflow Vulnerability

TECO TP3-PCLINK 2.1 - .tpc File Handling Buffer Overflow Vulnerability

TECO AP-PCLINK 1.094 - .tpc File Handling Buffer Overflow Vulnerability

x64 Linux egghunter in 24 bytes

TECO SG2 LAD Client 3.51 - .gen SEH Overwrite Buffer Overflow Exploit

TECO JN5 L510-DriveLink 1.482 - .lf5 SEH Overwrite Buffer Overflow Exploit

Sam Spade 1.14 - Browse URL Buffer Overflow PoC

15.11.2015

Bugtraq

OpenBSD package 'net-snmp' information disclosure 2015-11-12
Pierre Kim (pierre kim sec gmail com)

SYSS-2015-061 Wirecard Checkout Page - Improper Validation of Integrity Check Value 2015-11-13
martin sturm syss de

[security bulletin] HPSBGN03428 rev.3 - HP Asset Manager Web UI Client, Local Disclosure of Sensitive Information 2015-11-13
security-alert hpe com

Dlink DGL5500 Un-Authenticated Buffer overflow in HNAP functionality 2015-11-13
samhuntley84 gmail com

Dlink DIR-880L Buffer overflows in authenticatio and HNAP functionalities. 2015-11-13
samhuntley84 gmail com

Dlink DIR-601 Command injection in ping functionality 2015-11-13
samhuntley84 gmail com

Dlink DIR-645 UPNP Buffer Overflow 2015-11-13
samhuntley84 gmail com

Dlink DIR-815 Buffer overflows and Command injection in authentication and HNAP functionalities 2015-11-13
samhuntley84 gmail com

Dlink DIR-817LW Buffer overflows and Command injection in authentication and HNAP functionalities 2015-11-13
samhuntley84 gmail com

Dlink DIR-818W Buffer overflows and Command injection in authentication and HNAP functionalities 2015-11-13
samhuntley84 gmail com

Dlink DIR-615 Authenticated Buffer overflow in Ping and Send email functionality 2015-11-13
samhuntley84 gmail com

Dlink DIR-890L/R Buffer overflows in authentication and HNAP functionalities. 2015-11-13
samhuntley84 gmail com

Dlink DIR-825 (vC) Buffer overflows in authentication,HNAP and ping functionalities and also directory traversal issue exists 2015-11-13
samhuntley84 gmail com

Dlink DIR-880L Buffer overflows in authenticatio and HNAP functionalities. 2015-11-13
samhuntley84 gmail com

Dlink SSDP command injection using UDP for a lot of Dlink routers including DIR-815, DIR-850L 2015-11-13
samhuntley84 gmail com

Dlink DIR-866L Buffer overflows in HNAP and send email functionalities 2015-11-13
samhuntley84 gmail com

CF Image Host XSS 2015-11-14
apparitionsec gmail com

CF Image Host CSRF 2015-11-14
apparitionsec gmail com

CF Image Host PHP Command Injection 2015-11-14
apparitionsec gmail com

PHP Address Book SQL Injection Vulnerability 2015-11-14
Rahul Pratap Singh (techno rps gmail com)

[SECURITY] [DSA 3208-2] freexl regression update 2015-11-14
Salvatore Bonaccorso (carnil debian org)

/tmp race condition in IBM Installation Manager V1.8.1 install script 2015-11-14
larry0 me com

D-link wireless router DIR-816L Cross-Site Request Forgery (CSRF) vulnerability 2015-11-14
bhadresh patel helpag com

[slackware-security] seamonkey (SSA:2015-318-01) 2015-11-15
Slackware Security Team (security slackware com)

Malware

Trojan.Cryptodefense.B

Phishing

Vulnerebility

SANS News

Analyze of a malicious Word document with an embedded payload

Threatpost

Researchers Discover Two New Strains of POS Malware

CSRF Flaw Patched in Popular Spring Social Core Library

Exploit

b374k Web Shell - CSRF Command Injection

13.11.2015

Bugtraq

OpenBSD package 'net-snmp' information disclosure 2015-11-12
Pierre Kim (pierre kim sec gmail com)

[SECURITY] [DSA 3395-2] krb5 security update 2015-11-12
Salvatore Bonaccorso (carnil debian org)

Secunia Research: Google Picasa CAMF Section Integer Overflow Vulnerability 2015-11-11
Secunia Research (remove-vuln secunia com)

Malware

TrojanDownloader:MSIL/Dowjamal.A
SoftwareBundler:Win32/Xiazai
TrojanSpy:MSIL/Aconstel.A
TrojanDropper:MSIL/Fatext.A
PWS:Win32/Fareit.AG
Backdoor:Win32/Wencho.A

Exp.CVE-2015-6078

Phishing

HSBC Bank	13th November 2015
INTERNET BANKING: HSBC ACCOUNT ACCESS NOTIFICATION
Natwest Bank	13th November 2015
YOU HAVE 1 NEW SECURE MESSAGE

Vulnerebility

SANS News

Google Reconnaissance, Sprinter-style

Threatpost

Tor: FBI Paid CMU $1 Million to De-Anonymize Users

Exploit Writing and Mitigation Going Hand in Hand

Exploit

b374k Web Shell - CSRF Command Injection

R-Scripts Vacation Rental Script 7R - Multiple Vulnerabilities

TACK 1.07 - Local Stack-Based Buffer Overflow

TUDU 0.82 - Local Stack-Based Buffer Overflow

Sam Spade 1.14 - S-Lang Command Field SEH Overflow

12.11.2015

Bugtraq

Secunia Research: Google Picasa CAMF Section Integer Overflow Vulnerability 2015-11-11
Secunia Research (remove-vuln secunia com)

[security bulletin] HPSBGN03507 rev.2 - HP Arcsight Management Center, Arcsight Logger, Remote Cross-Site Scripting (XSS) 2015-11-10
security-alert hpe com

Malware

Backdoor:Win32/Wencho.A
PWS:MSIL/Stimilina.M
TrojanDownloader:MSIL/Genmaldow

Infostealer.Predet

Infostealer.Hawket

VBA/TrojanDownloader.Agent.AFW

Phishing

Security Center Pay Pal	12th November 2015
Your Pay Pal account need verification
PayPal	12th November 2015
Verify your account today to avoid any interruption
Smith	11th November 2015
RE: INTERESTED?

Vulnerebility

SANS News

Cisco Cloud Web Security DNS Hijack

Oracle WebLogic Server: CVE-2015-4852 patched

Microsoft Patch Tuesday followup: KB3097877 re-issued!

Threatpost

Exploit

11.11.2015

Bugtraq

Secunia Research: Google Picasa CAMF Section Integer Overflow Vulnerability 2015-11-11
Secunia Research (remove-vuln secunia com)

[security bulletin] HPSBGN03507 rev.2 - HP Arcsight Management Center, Arcsight Logger, Remote Cross-Site Scripting (XSS) 2015-11-10
security-alert hpe com

[SECURITY] [DSA 3397-1] wpa security update 2015-11-10
Salvatore Bonaccorso (carnil debian org)

Microsoft .NET Framework XSS / Elevation of Privilege CVE-2015-6099 2015-11-11
apparitionsec gmail com

[SECURITY] [DSA 3396-1] linux security update 2015-11-10
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3386-2] unzip regression update 2015-11-09
Salvatore Bonaccorso (carnil debian org)

Malware

TrojanDownloader:Win32/Banload.BFH
TrojanDownloader:Win32/Banload.BFI
TrojanDropper:Win32/Bancos.N
SoftwareBundler:Win32/Dowadmin

Unix.Ransomcrypt

Phishing

National	11th November 2015
New online banking authentication
PayPal	11th November 2015
WE'VE IIMITED ACCESS TO YOUR PAYPAI ACCOUNT !
PayPal	11th November 2015
Update your account information !

Vulnerebility

SANS News

November 2015 Microsoft Patch Tuesday

Protecting Users and Enterprises from the Mobile Malware Threat

November 2015 Microsoft Patch Tuesday

Threatpost

Comodo Issues Eight Forbidden Certificates

Exploit

Wordpress Ajax Load More PHP Upload Vulnerability

Huawei HG630a and HG630a-50 - Default SSH Admin Password on ADSL Modems

Jenkins 1.633 - Unauthenticated Credential Recovery

YESWIKI 0.2 - Path Traversal Vulnerability

9.11.2015

Bugtraq

TestLink 1.9.14 CSRF Vulnerability 2015-11-08
Aravind (altoarun gmail com)

TestLink 1.9.14 Persistent XSS 2015-11-08
Aravind (altoarun gmail com)

[SECURITY] [DSA 3395-1] krb5 security update 2015-11-06
Salvatore Bonaccorso (carnil debian org)

[ANNOUNCE] CVE-2014-3576 - Apache ActiveMQ vulnerabilities 2015-11-06
Timothy Bish (tabish121 gmail com)

[slackware-security] mozilla-firefox (SSA:2015-310-01) 2015-11-06
Slackware Security Team (security slackware com)

[slackware-security] mozilla-nss (SSA:2015-310-02) 2015-11-06
Slackware Security Team (security slackware com)

Malware

Trojan:Win32/Peals.D!plock
Trojan:Win32/Deefy!plock
Worm:Win32/Vitchit.A
Worm:Win32/Mothyfil.B
PWS:MSIL/Stimilini.T

Phishing

Wells Fargo Online	8th November 2015
Account Verification Required.
National	8th November 2015
Required Information
PayPal Team	8th November 2015
NOREPLY : YOUR ACCOUNT HAS BEEN LIMITED âœ”
service@paypal.intl.com	8th November 2015
We need your help resolving an issue with your account

Vulnerebility

SANS News

ICYMI: Widespread Unserialize Vulnerability in Java

Threatpost

High-Risk SAP HANA Vulnerabilities Patched

ProtonMail Back Online Following Six-Day DDoS Attack

Exploit

Arris TG1682G Modem - Stored XSS Vulnerability

Wordpress Ajax Load More PHP Upload Vulnerability

TestLink 1.9.14 - CSRF Vulnerability

POP Peeper 4.0.1 - SEH Over-Write

FreeType 2.6.1 TrueType tt_sbit_decoder_load_bit_aligned Heap-Based Out-of-Bounds Read

7.11.2015

Bugtraq

[SECURITY] [DSA 3395-1] krb5 security update 2015-11-06
Salvatore Bonaccorso (carnil debian org)

[ANNOUNCE] CVE-2014-3576 - Apache ActiveMQ vulnerabilities 2015-11-06
Timothy Bish (tabish121 gmail com)

[slackware-security] mozilla-firefox (SSA:2015-310-01) 2015-11-06
Slackware Security Team (security slackware com)

[slackware-security] mozilla-nss (SSA:2015-310-02) 2015-11-06
Slackware Security Team (security slackware com)

Malware

Win32/Brolux.A

Win32/Kovter.C

Phishing

PayPal Team	8th November 2015
NOREPLY : YOUR ACCOUNT HAS BEEN LIMITED âœ”
service@paypal.intl.com	8th November 2015
We need your help resolving an issue with your account
service@paypal.intl.com	7th November 2015
WE NEED YOUR HELP RESOLVING AN ISSUE WITH YOUR ACCOUNT
Amazon	7th November 2015
additional information on the amazon site.
PayPal	7th November 2015
Unusual Sign-In Activities

Vulnerebility

SANS News

Ransomware & Entropy: Your Turn -> Solution

Malicious spam with links to CryptoWall 3.0 - Subject: Domain [name] Suspension Notice

Threatpost

Shuanet Adware Rooting Android Devices Via Trojanized Apps - See more at: https://threatpost.com/#sthash.Ox1iuvx1.dpuf

Chinese Mobile Ad Library Backdoored to Spy on iOS Devices

New Tinba Variant Seen Targeting Russian, Japanese Banks

Exploit

Cryptocat Arbitrary Script Injection Vulnerability

vBulletin 5.1.x - PreAuth 0day Remote Code Execution Exploit

JSSE SKIP-TLS Exploit

OpenSSL Alternative Chains Certificate Forgery

4.11.2015

Bugtraq

FreeBSD Security Advisory FreeBSD-SA-15:25.ntp [REVISED] 2015-11-04
FreeBSD Security Advisories (security-advisories freebsd org)

[SECURITY] [DSA 3392-1] freeimage security update 2015-11-04
Sebastien Delafond (seb debian org)

[security bulletin] HPSBGN03429 rev.2 - HP Arcsight Logger, Remote Disclosure of Information 2015-11-03
security-alert hpe com

[security bulletin] HPSBGN03425 rev.1 - HP ArcSight SmartConnectors, Remote Disclosure of Information, Local Escalation of Privilege 2015-11-03
security-alert hpe com

[security bulletin] HPSBGN03430 rev.1 - HP ArcSight products, Local Elevation of Privilege 2015-11-03
security-alert hpe com

[SECURITY] [DSA 3391-1] php-horde security update 2015-11-03
Florian Weimer (fw deneb enyo de)

[security bulletin] HPSBGN03386 rev.2 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit Risk Control, Roaming Fraud Control, Subscription Fraud Prevention, Remote Disclosure of Information, Local Disclosure 2015-11-03
security-alert hpe com

[security bulletin] HPSBGN03426 rev.1 - HP Mobility Software, Remote Execution of Arbitrary Code 2015-11-02
security-alert hpe com

[SECURITY] [DSA 3355-2] libvdpau regression update 2015-11-02
Alessandro Ghedini (ghedo debian org)

Malware

Win32/Upatre
TrojanDropper:O97M/Farheyt.A
TrojanDownloader:Win32/Banload.BFB

Phishing

PayPaI Service	4th November 2015
UPDATE YOUR INFORMATION NOW
Royal Bank	4th November 2015
*****Online Banking (Wire Transfer )***********************Paym ent Alert From Royal Bank Of
RBC Royal Bank	2nd November 2015
PLEASE RESTORE YOUR ACCOUNT

Vulnerebility

SANS News

Application Aware and Critical Control 2

Threatpost

Google Project Zero Turns Over 11 Bugs in Galaxy S6 Edge

Updated XcodeGhost Adds iOS9 Support

PageFair Hack Serves Up Fake Flash Update to 500 Sites

Exploit

vBulletin 5 PreAuth Remote Code Execution

FreeType 2.6.1 TrueType tt_cmap14_validate Parsing Heap-Based Out-of-Bounds Reads

3.11.2015

Bugtraq

[security bulletin] HPSBGN03426 rev.1 - HP Mobility Software, Remote Execution of Arbitrary Code 2015-11-02
security-alert hpe com

[SECURITY] [DSA 3355-2] libvdpau regression update 2015-11-02
Alessandro Ghedini (ghedo debian org)

[security bulletin] HPSBMU03518 rev.1 - HP Vertica, Remote Code Execution 2015-11-02
security-alert hpe com

[SECURITY] [DSA 3390-1] xen security update 2015-11-02
Salvatore Bonaccorso (carnil debian org)

CVE-2015-7326 (XXE vulnerability in Milton Webdav) 2015-11-02
0ang3el gmail com

Accentis Content Resource Management System - XSS 2015-11-02
GalaxyCVEcollector gmail com

Accentis Content Resource Management System - SQL 2015-11-02
GalaxyCVEcollector gmail com

Malware

Win32/Keco.B

Win32/TrojanDownloader.Bredolab.CB

Win32/Grifwin.I

Linux.Spalooki

Linux.Groundhog

Phishing

RBC Royal Bank	2nd November 2015
PLEASE RESTORE YOUR ACCOUNT
PayPal service	2nd November 2015
IMPORTANT - WE NOTICED UNUSUAL ACTIVITY IN YOUR PAYPAL ACCOUNT.

Vulnerebility

SANS News

Enhancing pentesting recon with nmap

Threatpost

Latest EMET Bypass Targets WoW64 Windows Subsystem

Vulnerability Identified in Genomic Data Sharing Network

Exploit

Samsung Galaxy S6 Samsung Gallery - GIF Parsing Crash

Samsung Galaxy S6 - android.media.process Face Recognition Memory Corruption

Samsung Galaxy S6 - libQjpeg DoIntegralUpsample Crash

Samsung Galaxy S6 - Samsung Gallery Bitmap Decoding Crash

Samsung libQjpeg Image Decoding Memory Corruption

Python 2.7 hotshot Module - pack_string Heap Buffer Overflow

Python 2.7 array.fromstring Method - Use After Free

Python 2.7 strop.replace() Method - Integer Overflow

Python 3.3 - 3.5 product_setstate() Function - Out-of-bounds Read

actiTIME 2015.2 - Multiple Vulnerabilities

Sam Spade 1.14 - (Crawl website) Buffer OverFlow

Sam Spade 1.14 - (Scan Addresses) Buffer Overflow Exploit

TCPing 2.1.0 - Buffer Overflow

2.11.2015

Bugtraq

CVE-2015-7326 (XXE vulnerability in Milton Webdav) 2015-11-02
0ang3el gmail com

Accentis Content Resource Management System - XSS 2015-11-02
GalaxyCVEcollector gmail com

Accentis Content Resource Management System - SQL 2015-11-02
GalaxyCVEcollector gmail com

Cross-Site Scripting | Zeuscart V4 2015-11-02
ITAS Team (itas team itas vn)

[SECURITY] [DSA 3389-1] elasticsearch end-of-life 2015-11-01
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3381-2] openjdk-7 security update 2015-11-01
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3388-1] ntp security update 2015-11-01
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3387-1] openafs security update 2015-11-01
Florian Weimer (fw deneb enyo de)

TCPing 2.1.0 Buffer Overflow 2015-11-01
apparitionsec gmail com

[SECURITY] [DSA 3386-1] unzip security update 2015-10-31
Laszlo Boszormenyi $GCS$ (gcs debian org)

[SECURITY] [DSA 3385-1] mariadb-10.0 security update 2015-10-31
Salvatore Bonaccorso (carnil debian org)

Malware

Exp.CVE-2015-5876

Phishing

PayPal service	2nd November 2015
IMPORTANT - WE NOTICED UNUSUAL ACTIVITY IN YOUR PAYPAL ACCOUNT.
Security Apple	1st November 2015
YOUR APPLE ACCOUNT WAS USED .
AOL	1st November 2015
Aol Notification

Vulnerebility

SANS News

Ransomware & Entropy: Your Turn

Disaster Recovery Starts with a Plan

Threatpost

Exploit

30.10.2015

Bugtraq

[slackware-security] jasper (SSA:2015-302-02) 2015-10-29
Slackware Security Team (security slackware com)

PHP Server Monitor 3.1.1 Privilege Escalation 2015-10-30
apparitionsec gmail com

PHP Server Monitor 3.1.1 CSRF 2015-10-30
apparitionsec gmail com

[slackware-security] curl (SSA:2015-302-01) 2015-10-29
Slackware Security Team (security slackware com)

[slackware-security] ntp (SSA:2015-302-03) 2015-10-29
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3384-1] virtualbox security update 2015-10-29
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3383-1] wordpress security update 2015-10-29
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3332-2] wordpress regression update 2015-10-29
Salvatore Bonaccorso (carnil debian org)

Malware

Infostealer.Banload

Exp.CVE-2015-5876

Phishing

Brayden	30th October 2015
BUSINESS IS CRAZY
MRS. JODI REULAND	30th October 2015
Ofornelas-F R_E..E..___A-C C-E_S_S_- T-O..__-L..O_C A..L___S-L..U T S..!
Yahoo.com	29th October 2015
PLEASE HELP ME.

Vulnerebility

SANS News

USB cleaning device for the masses

This Article is Brought to You By the Letter ノ

Threatpost

Web Hosting Service 000webhost Hacked, Information of 13 Million Leaked

Exploit

Sam Spade 1.14 - Scan From IP Address Field SEH Overflow Crash PoC

PHP Server Monitor 3.1.1- Multiple CSRF Vulnerabilities

PHP Server Monitor 3.1.1- CSRF Privilege Escalation

eBay Magento <= 1.9.2.1 - PHP FPM XML eXternal Entity Injection

Hitron Router CGN3ACSMR 4.5.8.16 - Arbitrary Code Execution

Pligg CMS 2.0.2 - Multiple SQL Injection Vulnerabilities

Pligg CMS 2.0.2 - Directory Traversal

Pligg CMS 2.0.2 - CSRF Code Execution

AIX 7.1 - lquerylv Local Privilege Escalation

Oxwall 1.7.4 - CSRF Vulnerability

29.10.2015

Bugtraq

[ERPSCAN-15-030] Oracle E-Business Suite - XXE injection Vulnerability 2015-10-29
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-029] Oracle E-Business Suite - XXE injection Vulnerability 2015-10-29
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-028] Oracle E-Business Suite - XXE injection Vulnerability 2015-10-29
ERPScan inc (erpscan online gmail com)

Cross-Site Request Forgery on Oxwall 2015-10-29
High-Tech Bridge Security Research (advisory htbridge ch)

CVE-2015-7723 - Privilege Escalation Via Symlink Attacks On POSIX Shared Memory With Insecure Permissions In AMD fglrx-driver 2015-10-29
Portcullis Advisories (advisories portcullis-security com)

CVE-2015-7724 - Privilege Escalation Via Symlink Attacks On POSIX Shared Memory With Insecure Permissions In AMD fglrx-driver 2015-10-29
Portcullis Advisories (advisories portcullis-security com)

[SECURITY] [DSA 3382-1] phpmyadmin security update 2015-10-28
Thijs Kinkhorst (thijs debian org)

Malware

Backdoor:PHP/SimpleShell.A

VBA/TrojanDownloader.Agent.ADX

Win32/TrojanDownloader.Nymaim.AY

EK_ExploitKit

Phishing

paypal	29th October 2015
Your Account Will Be Limited

Vulnerebility

SANS News

USB cleaning device for the masses

Threatpost

Rockwell Patches Serious ‘FrostyURL’ PLC Vulnerability

Exploit

Joomla JNews (com_jnews) Component 8.5.1 - SQL Injection

NetUSB Kernel Stack Buffer Overflow

28.10.2015

Bugtraq

Arbitrary code execution resp. escalation of privilege with Mozilla's SETUP.EXE 2015-10-28
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3381-1] openjdk-7 security update 2015-10-27
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3380-1] php5 security update 2015-10-27
Florian Weimer (fw deneb enyo de)

[ERPSCAN-15-027] Oracle E-Business Suite - Cross Site Scripting Vulnerability 2015-10-27
ERPScan inc (erpscan online gmail com)

Malware

Rogue:VBS/Trapwot
TrojanProxy:MSIL/Segyroxb.A
Trojan:JS/Iframeinject.AG

Phishing

PayPal	28th October 2015
âœ” [PAYPAL]CONFIRM YOUR ACCOUNT INFORMATION ! âœ‰

Vulnerebility

SANS News

Adobe Releases Surprise Shockwave Player Patch

Victim of its own success and (ab)used by malwares

Threatpost

Fewer IPsec VPN Connections at Risk from Weak Diffie-Hellman

Exploit

Th3 MMA mma.php Backdoor Arbitrary File Upload

Samsung SecEmailUI Script Injection

JIRA and HipChat for JIRA Plugin Velocity Template Injection Vulnerability

Sagem FAST3304-V2 - Authentication Bypass

Samsung m2m1shot Kernel Driver Buffer Overflow

Samsung seiren Kernel Driver Buffer Overflow

Samsung fimg2d FIMG2D_BITBLT_BLIT ioctl Concurrency Flaw

Samsung SecEmailComposer QUICK_REPLY_BACKGROUND Permissions Weakness

27.10.2015

Bugtraq

[ERPSCAN-15-027] Oracle E-Business Suite - Cross Site Scripting Vulnerability 2015-10-27
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-026] Oracle E-Business Suite - SQL injection Vulnerability 2015-10-27
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-025] Oracle E-Business Suite Database user enumeration Vulnerability 2015-10-27
ERPScan inc (erpscan online gmail com)

MacOS X 10.11 hardlink bomb cause resource exhaustion (Avast PoC) 2015-10-26
submit cxsec org

MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow 2015-10-26
submit cxsec org

Secunia Research: Oracle Outside In Two Buffer Overflow Vulnerabilities 2015-10-26
Secunia Research (remove-vuln secunia com)

Secunia Research: Google Picasa Phase One Tags Processing Integer Overflow Vulnerability 2015-10-26
Secunia Research (remove-vuln secunia com)

FreeBSD Security Advisory FreeBSD-SA-15:25.ntp 2015-10-26
FreeBSD Security Advisories (security-advisories freebsd org)

Malware

SoftwareBundler:Win32/Zubtui.A
Backdoor:Win32/Xtrat.Q
TrojanDownloader:Win32/Captorveen.B
PWS:MSIL/Stimilini.S
Trojan:Win32/Tulim.B!plock
Trojan:Win32/Spallowz.A!plock

Phishing

PayPaI	27th October 2015
YOUR ACCOUNT HAS BEEN IIMITED UNTII WE HEAR FROM YOU
MRS. LUCILA LAMME	27th October 2015
Re:Find Ofornelass NEW MESSAGE sent by Mrs. Lucila Lamme

Vulnerebility

SANS News

Typo Squatting Charities for Fake Tech Support Schemes

OS X 10.11.1 (El Capitan) File System Deep Directory Buffer Overflow

Botnets spreading Dridex still active

Threatpost

Joomla Update Patches Critical SQL Injection Vulnerability

Exploit

Realtyna RPL Joomla Extension 8.9.2 - Multiple SQL Injection Vulnerabilities

Realtyna RPL Joomla Extension 8.9.2 - Persistent XSS And CSRF Vulnerabilities

Subrion 3.X.X - Multiple Vulnerabilities

Beckhoff CX9020 CPU Module - Remote Code Execution Exploit

22.10.2015

Bugtraq

TeamSpeak Client <= 3.0.18.1 RFI, Directory Traversal to RCE 2015-10-22
scurippio autistici org

Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015 2015-10-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

APPLE-SA-2015-10-21-8 OS X Server 5.0.15 2015-10-21
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-10-21-7 Xcode 7.1 2015-10-21
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002 2015-10-21
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-10-21-5 iTunes 12.3.1 2015-10-21
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007 2015-10-21
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-10-21-3 Safari 9.0.1 2015-10-21
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-10-21-2 watchOS 2.0.1 2015-10-21
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-10-21-1 iOS 9.1 2015-10-21
Apple Product Security (product-security-noreply lists apple com)

Cisco Security Advisory: Cisco ASA Software VPN ISAKMP Denial of Service Vulnerability 2015-10-21
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco ASA Software DNS Denial of Service Vulnerability 2015-10-21
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco ASA Software DHCPv6 Relay Denial of Service Vulnerability 2015-10-21
Cisco Systems Product Security Incident Response Team (psirt cisco com)

SiteWIX - (edit_photo2.php id) SQL Injection Exploit 2015-10-21
ZoRLu Bugrahan (zorlu milw00rm com)

Malware

TrojanDownloader:Win32/Dowfeld.A
TrojanDropper:Win32/Soloniti.A
TrojanDownloader:BAT/Truvaeril.A
TrojanSpy:Win32/Banker.APB
Adware:Win32/Loones
TrojanSpy:MSIL/Omaneat.C
TrojanDownloader:Win32/Xeliam.A

Phishing

WEB	22nd October 2015
MAINTENANCE MAIL-BOX YOUR ACCOUNT DETECTED ACTIVITIES AND WILL BE BLOCKED
PayPal_ID 42310	22nd October 2015
Your account is limited now must be updated now \| Case (PP-35-TB-23-90-SN)
Chase	21st October 2015
An Important Notice From Chase(SM)

Vulnerebility

SANS News

Compromised Magento sites led to Neutrino exploit kit

Threatpost

Google Moving Gmail to Strict DMARC Implementation

Custom Google App Engine Tweak Still Leads to Java Sandbox Escapes

Exploit

Beckhoff CX9020 CPU Module - Remote Code Execution Exploit

21.10.2015

Bugtraq

SiteWIX - (edit_photo2.php id) SQL Injection Exploit 2015-10-21
ZoRLu Bugrahan (zorlu milw00rm com)

[SE-2014-02] Google App Engine Java security sandbox bypasses (Issue 42) 2015-10-21
Security Explorations (contact security-explorations com)

[SECURITY] [DSA 3376-1] chromium-browser security update 2015-10-21
Michael Gilbert (mgilbert debian org)

[SECURITY] [DSA 3375-1] wordpress security update 2015-10-19
Yves-Alexis Perez (corsac debian org)

[SECURITY] [DSA 3374-1] postgresql-9.4 security update 2015-10-19
Salvatore Bonaccorso (carnil debian org)

Malware

TrojanDownloader:Win32/Xeliam.A

Bloodhound.RTF.5

Phishing

APPLE INC.	21st October 2015
Thank You for Your Order [Order iTunes Verification required]
MENS TOP SECRET GUIDE	20th October 2015
Satisfy Your Woman In Bed. Stay Hard And Longer Minutes.

Vulnerebility

SANS News

Oracle Critical Patch Update for Q1 2015 (Includes Java Updates)

Odd DNS TXT Record. Anybody Seen This Before?

Threatpost

Microsoft Opens .NET Core, ASP.NET Bug Bounties

Let’s Encrypt Hits Another Free HTTPS Milestone

Academics Find Critical Flaws in Self-Encrypting Hardware Drives - See more at: https://threatpost.com/#sthash.7fFNlffq.dpuf

Exploit

Zpanel Remote Unauthenticated RCE

HandyPassword 4.9.3 - SEH Over-Write Exploit

20.10.2015

Bugtraq

[SECURITY] [DSA 3375-1] wordpress security update 2015-10-19
Yves-Alexis Perez (corsac debian org)

[SECURITY] [DSA 3374-1] postgresql-9.4 security update 2015-10-19
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3373-1] owncloud security update 2015-10-18
Salvatore Bonaccorso (carnil debian org)

ERPSCAN Research Advisory [ERPSCAN-15-017] SAP NetWeaver J2EE DAS service - Unauthorized Access 2015-10-16
ERPScan inc (erpscan online gmail com)

Events Made Easy WordPress plugin CSRF + Persistent XSS 2015-10-16
David Sopas (davidsopas gmail com)

Malware

DDoS:Win32/Flusihoc.A
TrojanDownloader:Win32/Upatre.CO
TrojanSpy:MSIL/Yakbeex.C
TrojanDownloader:MSIL/Fleendow.A
TrojanDownloader:Win32/Bamvleds.A

JS.Fakeransom

Trojan.Ransomcrypt.V

Phishing

PayPal	20th October 2015
UPDATE YOUR INFORMATION
SGT MONICA L BROWN	20th October 2015
Let Discuss

Vulnerebility

SANS News

When encoding saves the day

Threatpost

Apple to Remove 256 iOS Apps Using Private APIs, Collecting Personal Data

Exploit

19.10.2015

Bugtraq

[SECURITY] [DSA 3374-1] postgresql-9.4 security update 2015-10-19
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3373-1] owncloud security update 2015-10-18
Salvatore Bonaccorso (carnil debian org)

ERPSCAN Research Advisory [ERPSCAN-15-017] SAP NetWeaver J2EE DAS service - Unauthorized Access 2015-10-16
ERPScan inc (erpscan online gmail com)

Malware

TrojanDownloader:MSIL/Dolia.A

JS.Fakeransom

Phishing

APPLE INC	19th October 2015
Your Account has been limited

Vulnerebility

SANS News

Security Awareness for Security Professionals

Threatpost

Exploit

Wordpress Ajax Load More Plugin < 2.8.2 - File Upload Vulnerability

Tomabo MP4 Player 3.11.6 - SEH Based Stack Overflow

Nibbleblog File Upload Vulnerability

Belkin Router N150 1.00.08, 1.00.09 - Path Traversal Vulnerability

Adobe Flash IExternalizable.writeExternal - Type Confusion

16.10.2015

Bugtraq

ERPSCAN Research Advisory [ERPSCAN-15-017] SAP NetWeaver J2EE DAS service - Unauthorized Access 2015-10-16
ERPScan inc (erpscan online gmail com)

Events Made Easy WordPress plugin CSRF + Persistent XSS 2015-10-16
David Sopas (davidsopas gmail com)

Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) 2015-10-16
Qualys Security Advisory (qsa qualys com)

[ISecAuditors Security Advisories] URL Open Redirect in Google generic TLD and ccTLD 2015-10-15
ISecAuditors Security Advisories (advisories isecauditors com)

APPLE-SA-2015-10-15-1 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6 2015-10-15
Apple Product Security (product-security-noreply lists apple com)

[security bulletin] HPSBOV03503 rev.1 - HP OpenVMS CSWS_JAVA running Tomcat, Multiple Remote Vulnerabilities 2015-10-15
security-alert hp com

[security bulletin] HPSBUX03512 SSRT102254 rev.1 - HP-UX Web Server Suite running Apache, Remote Denial of Service (DoS) and Other Vulnerabilities 2015-10-15
security-alert hp com

Freemake Video Downloader 3.7.1 - Code Execution Vulnerability 2015-10-15
Vulnerability Lab (research vulnerability-lab com)

PayPal Inc Bug Bounty #117 - Session Fixation Vulnerability 2015-10-15
Vulnerability Lab (research vulnerability-lab com)

Malware

TrojanDownloader:Win32/Brucryp.C
PWS:MSIL/Petun
TrojanDownloader:Win32/Bagoox.A
TrojanClicker:Win32/Bagoox.A
DDoS:Win32/Nitol.K
Backdoor:Win32/Slingup.A
SoftwareBundler:Win32/InstallMonster
TrojanDownloader:Win32/Strumapine.A

Trojan.Broluxa

Phishing

PAYPal info	16th October 2015
Your Account PayPal Has Been Limited
HSBC Bank	16th October 2015
INTERNET BANKING: ACCOUNT ACCESS NOTIFICATION
PalyPal Support	16th October 2015
YOUR PAYPAL ACCOUNT HAS BEEN LIMITED âœ”
Account Support	16th October 2015
UPDATE YOUR ACCOUNT INFORMATION

Vulnerebility

SANS News

Ongoing Flash Vulnerabilities

Threatpost

WordPress Fixes Critical Stored XSS Error in Akismet

Latest Microsoft Transparency Report Details Content Removal Requests

Exploit

AdobeWorkgroupHelper 2.8.3.3 - Stack Based Buffer Overflow

Linux x86_64 Bindshell with Password (92 bytes)

15.10.2015

Bugtraq

Freemake Video Downloader 3.7.1 - Code Execution Vulnerability 2015-10-15
Vulnerability Lab (research vulnerability-lab com)

PayPal Inc Bug Bounty #117 - Session Fixation Vulnerability 2015-10-15
Vulnerability Lab (research vulnerability-lab com)

Blat.exe v2.7.6 SMTP / NNTP Mailer Buffer Overflow 2015-10-14
apparitionsec gmail com

US DoD's Dc3dd v7.2.6 suffers from a Buffer Overflow vulnerability - Advanced Information Security Corporation - Zero Day Research 2015-10-14
Nicholas Lemonias. (lem nikolas googlemail com)

[CVE-2015-2552] Windows 8+ - Trusted Boot Security Feature Bypass Vulnerability 2015-10-14
Myria (myriachan gmail com)

[security bulletin] HPSBGN03515 rev.1 - HP Smart Profile Server Data Analytics Layer (SPS DAL), Remote Cross-Site-Scripting (XSS), Disclosure of Information 2015-10-13
security-alert hp com

Malware

Backdoor:Win32/Noancooe
Backdoor:Win32/Bergat.C
TrojanDownloader:Win32/Kalumino.A
SoftwareBundler:Win32/Coolnetry
TrojanDownloader:Win32/Hospizrox.A
TrojanDownloader:Win32/Redosdru
TrojanDownloader:Win32/Banload.BET
TrojanDownloader:MSIL/Banload.AB
TrojanDownloader:AutoIt/Banload.V
TrojanDownloader:AutoIt/Banload.T

Backdoor.Owashell

W32.Expiro

Backdoor.Gonymdos

Phishing

Exploit kit roundup: Less Angler, more Nuclear

Vulnerebility

SANS News

Google Patches Chrome, Changes Mixed Content Warnings

Law Enforcement Shuts Down Dridex Operation

Threatpost

Exploit

netis RealTek Wireless Router / ADSL Modem - Multiple Vulnerabilities

PROLiNK H5004NK ADSL Wireless Modem - Multiple Vulnerabilities

AdobeWorkgroupHelper 2.8.3.3 - Stack Based Buffer Overflow

Blat.exe 2.7.6 SMTP / NNTP Mailer - Buffer Overflow

14.10.2015

Bugtraq

US DoD's Dc3dd v7.2.6 suffers from a Buffer Overflow vulnerability - Advanced Information Security Corporation - Zero Day Research 2015-10-14
Nicholas Lemonias. (lem nikolas googlemail com)

[CVE-2015-2552] Windows 8+ - Trusted Boot Security Feature Bypass Vulnerability 2015-10-14
Myria (myriachan gmail com)

[security bulletin] HPSBGN03515 rev.1 - HP Smart Profile Server Data Analytics Layer (SPS DAL), Remote Cross-Site-Scripting (XSS), Disclosure of Information 2015-10-13
security-alert hp com

Boolean-based SQL injection Vulnerability in K2 Platforms 2015-10-13
wissam bashour helpag com

[SECURITY] [DSA 3372-1] linux security update 2015-10-13
Ben Hutchings (benh debian org)

Malware

TrojanSpy:MSIL/Yakbeex.B
TrojanDropper:Win32/Sulunch
TrojanDownloader:MSIL/Bladabindi.J
TrojanSpy:Win32/Nivdort!acf
TrojanSpy:Win32/Banker.AOX
TrojanSpy:MSIL/Quoler.A
Adware:Win32/Sogou
TrojanDownloader:BAT/Unwgent.A
Trojan:Win32/Damingvat.A
Adware:Win32/Putalo0l

Boot.HDRoot

Phishing

Paypal	14th October 2015
We are unable to validate important details about your account.
MRS MONICA ASLAM	13th October 2015
Dear.....,,,..........,.,..,.. ..
PayPal Support	13th October 2015
YOUR PAYPAL ACCOUNT HAS BEEN LIMITED âœ”

Vulnerebility

SANS News

AV Phone Scan via Fake BSOD Web Pages

Threatpost

Dow Jones & Company Latest Financial Firm Hit With Data Breach

Exploit

ZyXEL PMG5318-B20A - OS Command Injection Vulnerability

Linux/MIPS Kernel NetUSB - Remote Code Execution Exploit

13.10.2015

Bugtraq

Boolean-based SQL injection Vulnerability in K2 Platforms 2015-10-13
wissam bashour helpag com

[SECURITY] [DSA 3372-1] linux security update 2015-10-13
Ben Hutchings (benh debian org)

AdobeWorkgroupHelper Stack Based Buffer Overflow 2015-10-13
apparitionsec gmail com

CVE-2015-7683: Absolute Path Traversal in the Font WordPress Plugin 2015-10-12
grajalerts gmail com

CVE-2015-7682: Multiple Blind SQL Injections in Pie Register WordPress Plugin 2015-10-12
grajalerts gmail com

CVE-2015-7377: Unauthenticated Reflected XSS in Pie Register WordPress Plugin 2015-10-12
grajalerts gmail com

Multiple Remote Code Execution found in ZHONE 2015-10-12
lyon yang s gmail com

Malware

PWS:MSIL/Logbro.A
Backdoor:Win32/Slackbot.F
TrojanDropper:MSIL/Mutra
Backdoor:Win32/Dradkiter.A
HackTool:Win64/Mikatz
TrojanDownloader:O97M/Daoyap.A
TrojanDropper:MSIL/Hostwack.A
TrojanDownloader:Win32/Fikoter.A
Backdoor:Win32/Warood.B
Backdoor:Win32/Warood.A

Phishing

PayPal	13th October 2015
YOUR PAYPAL ACCOUNT WILL BE CLOSED !
Services Info	13th October 2015
RESTORE
Chase	13th October 2015
Your account has been temporary locked !
Barclays PLC.	12th October 2015
NEW DOCUMENT IS AVAILABLE.

Vulnerebility

SANS News

October 2015 Microsoft Patch Tuesday

Threatpost

Adobe Patches 69 Vulnerabilities in Reader, Acrobat, Flash

Netgear Published Patched Firmware for Routers Under Attack

Exploit

ZHONE < S3.0.501 - Multiple Vulnerabilities

F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 - File Path Traversal Vulnerability

Netgear Voice Gateway 2.3.0.23_2.3.23 - Multiple Vulnerabilities

Kerio Control <= 8.6.1 - Multiple Vulnerabilities

libsndfile 1.0.25 - Heap Overflow

CDex Genre 1.79 - Stack Buffer Overflow

12.10.2015

Bugtraq

CVE-2015-7683: Absolute Path Traversal in the Font WordPress Plugin 2015-10-12
grajalerts gmail com

CVE-2015-7682: Multiple Blind SQL Injections in Pie Register WordPress Plugin 2015-10-12
grajalerts gmail com

CVE-2015-7377: Unauthenticated Reflected XSS in Pie Register WordPress Plugin 2015-10-12
grajalerts gmail com

Multiple Remote Code Execution found in ZHONE 2015-10-12
lyon yang s gmail com

[SYSS-2015-034] MATESO Password Safe and Repository Enterprise - SQL Injection 2015-10-12
matthias deeg syss de

[SYSS-2015-037] MATESO Password Safe and Repository Enterprise - Insufficiently Protected Credentials 2015-10-12
matthias deeg syss de

Multiple Vulnerabilities found in ZHONE 2015-10-12
lyon yang s gmail com

ESA-2015-153 EMC SourceOne Email Supervisor Security Update for Multiple Security Vulnerabilities 2015-10-11
Security Alert (Security_Alert emc com)

[SECURITY] [DSA 3371-1] spice security update 2015-10-09
Salvatore Bonaccorso (carnil debian org)

Malware

TrojanDownloader:Win32/Maliku.A
TrojanDownloader:Win32/Upatre.CQ
HackTool:Win32/Gambigubo.A
Backdoor:Win32/Venik.O
TrojanDownloader:Win32/Zawwi.A
Win32/Brambul
Win32/Joanap

Infostealer.Shifu

Phishing

AOL	12th October 2015
Essential Maintenance for sunmtnsft@aol.com
Lloyds	11th October 2015
Lloyds Bank Alert

Vulnerebility

SANS News

Data Visualization,What is your Tool of Choice

Threatpost

Exploit

Tomabo MP4 Converter 3.10.12 - 3.11.12 (.m3u) Denial of service (Crush application)

10.10.2015

Bugtraq

[SECURITY] [DSA 3371-1] spice security update 2015-10-09
Salvatore Bonaccorso (carnil debian org)

Advanced Information Security Corporation, Security Advisory (MYSQL v5.6.24 Buffer Overflows) 2015-10-09
Nicholas Lemonias. (lem nikolas googlemail com)

FreeYouTubeToMP3 Converter 4.0.1 - Buffer Overflow Vulnerability 2015-10-09
Vulnerability Lab (research vulnerability-lab com)

W150D Wireless N 150 ADSL2 Modem Router - Cross Site Request Forgery Vulnerability 2015-10-09
Vulnerability Lab (research vulnerability-lab com)

PayPal Inc Bug Bounty #119 - URL Redirect Web Vulnerability 2015-10-09
Vulnerability Lab (research vulnerability-lab com)

WebComIndia CMS 2015Q4 - Auth Bypass Vulnerability 2015-10-09
Vulnerability Lab (research vulnerability-lab com)

Malware

Phishing

MR DAVID	9th October 2015
**** BULK** GREETINGS MY DEAR
Info	9th October 2015
****The Yahoo ! Mail Team*****

Vulnerebility

SANS News

ISC Two Factor Authentication Update

GnuPG (GPG) 2.1.9 release announced

Threatpost

Exploit

9.10.2015

Bugtraq

Advanced Information Security Corporation, Security Advisory (MYSQL v5.6.24 Buffer Overflows) 2015-10-09
Nicholas Lemonias. (lem nikolas googlemail com)

FreeYouTubeToMP3 Converter 4.0.1 - Buffer Overflow Vulnerability 2015-10-09
Vulnerability Lab (research vulnerability-lab com)

W150D Wireless N 150 ADSL2 Modem Router - Cross Site Request Forgery Vulnerability 2015-10-09
Vulnerability Lab (research vulnerability-lab com)

PayPal Inc Bug Bounty #119 - URL Redirect Web Vulnerability 2015-10-09
Vulnerability Lab (research vulnerability-lab com)

WebComIndia CMS 2015Q4 - Auth Bypass Vulnerability 2015-10-09
Vulnerability Lab (research vulnerability-lab com)

Veeam Backup & Replication Local Privilege Escalation Vulnerability 2015-10-08
ascii (ascii ush it)

[RT-SA-2015-006] Buffalo LinkStation Authentication Bypass 2015-10-08
RedTeam Pentesting GmbH (release redteam-pentesting de)

Potential vulnerabilites in PayPal Beacons 2015-10-08
securityresearch shaftek biz

Malware

TrojanSpy:BAT/Separ.C
SoftwareBundler:Win32/Pokavampo
Trojan:Win32/Patched.AP

Trojan.Stimilik

MSIL.Stimilik

Trojan.Cidox.E

Phishing

Info	9th October 2015
****The Yahoo ! Mail Team*****
Halifax UK	7th October 2015
Fw: new message

Vulnerebility

SANS News

Adobe Acrobat and Reader Pre-Announcement

Threatpost

Amazon Inspector Addresses Compliance and Security Challenge

Adobe to Patch Reader and Acrobat Next Week

Exploit

VeryPDF Image2PDF Converter SEH Buffer Overflow

8.10.2015

Bugtraq

Advanced Information Security Corporation, Security Advisory (Oracle's MYSQL v5.6.24 Latest - Buffer Overflows) Repost 2015-10-07
Nicholas Lemonias. (lem nikolas googlemail com)

[REVIVE-SA-2015-001] Revive Adserver - Multiple vulnerabilities 2015-10-07
Matteo Beccati (matteo beccati com)

A comprehensive study of Huawei 3G routers - XSS, CSRF, DoS, unauthenticated firmware update, RCE 2015-10-07
Pierre Kim (pierre kim sec gmail com)

RE: Authentication Bypass in Netgear Router Firmware N300_1.1.0.31_1.0.1.img and N300-1.1.0.28_1.0.1.img 2015-10-07
Alexandre Herzog (Alexandre Herzog csnc ch)

Advanced Information Security Corporation, Security Advisory (MYSQL v5.6.24 Buffer Overflows) 2015-10-07
lem nikolas gmail com

[SECURITY] [DSA 3369-1] zendframework security update 2015-10-06
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3370-1] freetype security update 2015-10-06
Alessandro Ghedini (ghedo debian org)

Advanced Information Security Corporation, Security Advisory (MYSQL v5.6.24 Buffer Overflows) 2015-10-07
Nicholas Lemonias. (lem nikolas googlemail com)

Zope Management Interface CSRF vulnerabilities 2015-10-07
apparitionsec gmail com

[CVE-2015-7670] Multiple SQL Injection in Support Ticket System 1.2 WordPress plugin 2015-10-06
ibeptaz gmail com

Malware

TrojanDownloader:Win32/Upatre.CG
TrojanDownloader:Win32/Upatre.CF
TrojanDownloader:Win32/Brucryp.D
TrojanDropper:Win32/Latot.A
TrojanDownloader:Win32/Latot.A
TrojanSpy:MSIL/Logkayi.A
TrojanSpy:MSIL/Logadat.A

Phishing

Halifax UK	7th October 2015
Fw: new message
Summary Billing Account	7th October 2015
WE DISCOVERED IRREGULARITIES IN YOUR ACCOUNT, WE WILL CLOSE YOUR ACCOUNT FOR A WHILEâ€?

Vulnerebility

SANS News

Malicious spam with Word document

Threatpost

New Moker RAT Bypasses Detection

Kemoge Android Adware Campaign Can Lead to Device Takeover

Exploit

Zope Management Interface 4.3.7 - CSRF Vulnerabilities

7.10.2015

Bugtraq

Advanced Information Security Corporation, Security Advisory (Oracle's MYSQL v5.6.24 Latest - Buffer Overflows) Repost 2015-10-07
Nicholas Lemonias. (lem nikolas googlemail com)

[REVIVE-SA-2015-001] Revive Adserver - Multiple vulnerabilities 2015-10-07
Matteo Beccati (matteo beccati com)

A comprehensive study of Huawei 3G routers - XSS, CSRF, DoS, unauthenticated firmware update, RCE 2015-10-07
Pierre Kim (pierre kim sec gmail com)

RE: Authentication Bypass in Netgear Router Firmware N300_1.1.0.31_1.0.1.img and N300-1.1.0.28_1.0.1.img 2015-10-07
Alexandre Herzog (Alexandre Herzog csnc ch)

Advanced Information Security Corporation, Security Advisory (MYSQL v5.6.24 Buffer Overflows) 2015-10-07
lem nikolas gmail com

[SECURITY] [DSA 3369-1] zendframework security update 2015-10-06
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3370-1] freetype security update 2015-10-06
Alessandro Ghedini (ghedo debian org)

Advanced Information Security Corporation, Security Advisory (MYSQL v5.6.24 Buffer Overflows) 2015-10-07
Nicholas Lemonias. (lem nikolas googlemail com)

Zope Management Interface CSRF vulnerabilities 2015-10-07
apparitionsec gmail com

[CVE-2015-7670] Multiple SQL Injection in Support Ticket System 1.2 WordPress plugin 2015-10-06
ibeptaz gmail com

TestLink Security Advisory - SQL Injection Vulnerability - CVE-2015-7390 2015-10-07
Onur Yilmaz (onur netsparker com)

TestLink Security Advisory - Multiple XSS Vulnerabilities - CVE-2015-7391 2015-10-07
Onur Yilmaz (onur netsparker com)

Local RedHat Enterprise Linux DoS â?? RHEL 7.3 Kernel crashes on invalid USB device descriptors (usbvision driver) 2015-10-07
Ralf Spenneberg (info os-t de) (1 replies)

Re: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (usbvision driver) 2015-10-07
Ralf Spenneberg (ralf os-t de)

Authentication Bypass in Netgear Router Firmware N300_1.1.0.31_1.0.1.img and N300-1.1.0.28_1.0.1.img 2015-10-06
Alexandre Herzog (Alexandre Herzog csnc ch)

Malware

Hacktool.HDRoot

TrojanDownloader:MSIL/Banload.AA
TrojanDownloader:VBS/Banload.V
TrojanDownloader:Win32/Banload.CAC
TrojanDownloader:Win32/Quireap.B
TrojanSpy:Win32/Batlopma.A
PWS:Win32/Sekur.A!dha
TrojanDownloader:SWF/Esaprof.B
TrojanDropper:Win32/Tramox.A
Backdoor:Win32/Warood.C
TrojanDownloader:Win32/Badiehi.B

Phishing

Summary Billing Account	7th October 2015
WE DISCOVERED IRREGULARITIES IN YOUR ACCOUNT, WE WILL CLOSE YOUR ACCOUNT FOR A WHILEâ€?
PayPal	7th October 2015
[PAYPAL]: WARNING YOUR PAYPAL ACCOUNT WILL BE CLOSED !âœ” 06/10/2015 05:22:28
Apple ID	7th October 2015
YOUR APPIE ID HAS BEEN DISABLED FOR SECURITY REASONS !
Amazon	7th October 2015
Your Amazon Account Has Been Compromised
SGT.MONICA L BROWN	7th October 2015
Re

Vulnerebility

SANS News

Do Extortionists Get Paid?

Threatpost

Researchers Disrupt Angler Exploit Kit Ecosystem, Derail $30M Ransomware Campaign

Exploit

Zope Management Interface 4.3.7 - CSRF Vulnerabilities

6.10.2015

Bugtraq

Authentication Bypass in Netgear Router Firmware N300_1.1.0.31_1.0.1.img and N300-1.1.0.28_1.0.1.img 2015-10-06
Alexandre Herzog (Alexandre Herzog csnc ch)

Advisory: web-based VM detection and coarse-grained fingerprinting 2015-10-05
Amit Klein (aksecurity gmail com)

LanWhoIs.exe 1.0.1.120 Stack Buffer Overflow 2015-10-06
apparitionsec gmail com

[security bulletin] HPSBUX03359 SSRT102094 rev.2 - HP-UX pppoec, local elevation of privilege 2015-10-05
security-alert hp com

[slackware-security] seamonkey (SSA:2015-274-03) 2015-10-01
Slackware Security Team (security slackware com)

[slackware-security] mozilla-thunderbird (SSA:2015-274-01) 2015-10-01
Slackware Security Team (security slackware com)

[slackware-security] php (SSA:2015-274-02) 2015-10-01
Slackware Security Team (security slackware com)

[security bulletin] HPSBST03418 rev.2 - HP P6000 Command View Software, Remote Disclosure of Information 2015-10-02
security-alert hp com

FTGate 2009 Build 6.4.00 CSRF Vulnerabilities 2015-10-02
apparitionsec gmail com

Malware

Backdoor:Win64/Warood.A

HTML/Costacas
Win32/Blakamba
TrojanProxy:MSIL/Utafajax.A

MSIL / Smeazymo.B

MSIL / Smeazymo.A

Phishing

Summary Billing Account	6th October 2015
WE DISCOVERED IRREGULARITIES IN YOUR ACCOUNT, WE WILL CLOSE YOUR ACCOUNT FOR A WHILEâ€?
Vanessa Craig	6th October 2015
SUPER QUICK FASTDOWN REQUEST
Apple	6th October 2015
Votre identifiant Apple vient d’être utilisé pour acheter « On Noir par Kaaris
MR DAVID	6th October 2015
**** BULK** GREETINGS MY DEAR
PayPal	6th October 2015
Your Account is Suspended

Vulnerebility

SANS News

Threatpost

YiSpecter iOS Malware Abuses Apple Enterprise Certs to Push Adware

Google Pushes Stagefright 2.0 Patches to Nexus Devices

Scottrade Breach Affects 4.6 Million Customers

Canceled Talk Re-Ignites Controversy Over Legitimate Security Research

Exploit

LanSpy 2.0.0.155 - Buffer Overflow

PHP-Fusion <= v7.02.07 - Blind SQL Injection

GLPI 0.85.5 - RCE Through File Upload Filter Bypass

LanWhoIs.exe 1.0.1.120 - Stack Buffer Overflow

Last PassBroker 3.2.16 - Stack-Based Buffer Overflow

5.10.2015

Bugtraq

[security bulletin] HPSBST03418 rev.2 - HP P6000 Command View Software, Remote Disclosure of Information 2015-10-02
security-alert hp com

FTGate 2009 Build 6.4.00 CSRF Vulnerabilities 2015-10-02
apparitionsec gmail com

CVE-2015-6237 - Tripwire IP360 VnE Remote Administrative API Authentication Bypass/Privilege Acquisition Vulnerability 2015-10-02
Specto (specto custodela com)

[SYSS-2015-039] CSRF in OpenText Secure MFT 2015-10-02
adrian vollmer syss de

[ZDI-15-396] ManageEngine ServiceDesk Plus remote code execution 2015-10-02
Pedro Ribeiro (pedrib gmail com)

Qualys Security Advisory - OpenSMTPD Audit Report 2015-10-02
Qualys Security Advisory (qsa qualys com)

FreeBSD Security Advisory FreeBSD-SA-15:24.rpcbind [REVISED] 2015-10-02
FreeBSD Security Advisories (security-advisories freebsd org)

ZTE GPON F427 and possibly F460/F600 - authorization bypass and cleartext password storage 2015-10-02
jerzy patraszewski gmail com

Reflected Cross-Site Scripting (XSS) in SourceBans 2015-10-03
High-Tech Bridge Security Research (advisory htbridge ch)

Multiple Reflected XSS in Payment Form for PayPal Pro version 1.0.1 WordPress plugin 2015-10-04
ibemed gmail com

Multiple Reflected XSS in ResAds version 1.0.1 WordPress plugin 2015-10-04
ibemed gmail com

Malware

TrojanProxy:MSIL/Utafajax.A

Phishing

PayPal	5th October 2015
[PAYPAL]: WARNING YOUR PAYPAL ACCOUNT WILL BE CLOSED !âœ” 05/10/2015 07:05:58
Web TeamÂ©2015	5th October 2015
*YOUR MAIL SECURITY ALART*
WelIs Fargo	5th October 2015
ACCOUNT UNUSUAL SIGN-ON ACTIVITY
Email Admin Center	5th October 2015
E-mail Suspension warning upgrade

Vulnerebility

SANS News

Cyber Security Awareness Month: Protecting Your Network From "Dave"

Threatpost

Experian Breach Spills Data on 15 Million T-Mobile Customers

Exploit

ManageEngine ServiceDesk Plus <= 9.1 build 9110 - Path Traversal

Zemra Botnet CnC Web Panel Remote Code Execution

Kaseya VSA uploader.aspx Arbitrary File Upload

Truecrypt 7 / VeraCrypt 1.13 - Drive Letter Symbolic Link Creation Privilege Escalation

LanSpy 2.0.0.155 - Buffer Overflow

2.10.2015

Bugtraq

[security bulletin] HPSBPV03516 rev.1 - HP VAN SDN Controller, Multiple Vulnerabilities 2015-10-01
security-alert hp com

[security bulletin] HPSBGN03424 rev.1 - HP Cloud Service Automation, Remote Authentication Bypass 2015-10-01
security-alert hp com

[SYSS-2015-001] Kaspersky Endpoint Security - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-003] Kaspersky Small Office Security - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-002] Kaspersky Endpoint Security - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

[SYSS-2015-004] Kaspersky Small Office Security - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

[SYSS-2015-006] Kaspersky Total Security - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

[SYSS-2015-005] Kaspersky Total Security - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-008] Kaspersky Internet Security - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

[SYSS-2015-009] Kaspersky Anti-Virus - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-007] Kaspersky Internet Security - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-010] Kaspersky Anti-Virus - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

APPLE-SA-2015-09-30-3 OS X El Capitan 10.11 2015-09-30
Apple Product Security (product-security-noreply lists apple com)

Malware

ELF_XORDDOS.AP

OSX/WireLurker.A

Win32/ToyPet.A

Phishing

Paypal Inc	2nd October 2015
[TEAM PAYPAL] : YOUR PAYPAL ACCOUNT WILL BE CLOSED !
Paypal Inc	1st October 2015
[TEAM PAYPAL] : YOUR PAYPAL ACCOUNT WILL BE CLOSED !

Vulnerebility

SANS News

BizCN gate actor update

Threatpost

HTTPS Available as Opt-In for Blogspot

Apple Patches 100+ Vulnerabilities in OS X, Safari, iOS

Dridex Banking Malware Back in Circulation

Exploit

Avast Antivirus X.509 Error Rendering Command Execution

PIXORD Vehicle 3G Wi-Fi Router 3GR-431P - Multiple Vulnerabilities

Bosch Security Systems Dinion NBN-498 Web Interface - XML Injection

Mac OS X 10.9.5 / 10.10.5 - rsh/libmalloc Privilege Escalation

FTGate 2009 Build 6.4.00 - Multiple Vulnerabilities

FTGate 7 - CSRF Vulnerabilities

ElasticSearch 1.6.0 - Arbitrary File Download

WinRar < 5.30 beta 4 - Settings Import Command Execution

1.10.2015

Bugtraq

[security bulletin] HPSBGN03424 rev.1 - HP Cloud Service Automation, Remote Authentication Bypass 2015-10-01
security-alert hp com

[SYSS-2015-001] Kaspersky Endpoint Security - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-003] Kaspersky Small Office Security - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-002] Kaspersky Endpoint Security - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

[SYSS-2015-004] Kaspersky Small Office Security - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

[SYSS-2015-006] Kaspersky Total Security - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

[SYSS-2015-005] Kaspersky Total Security - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-008] Kaspersky Internet Security - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

[SYSS-2015-009] Kaspersky Anti-Virus - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-007] Kaspersky Internet Security - Authentication Bypass 2015-10-01
matthias deeg syss de

[SYSS-2015-010] Kaspersky Anti-Virus - Use of One-Way Hash withouth a Salt 2015-10-01
matthias deeg syss de

APPLE-SA-2015-09-30-3 OS X El Capitan 10.11 2015-09-30
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-09-30-2 Safari 9 2015-09-30
Apple Product Security (product-security-noreply lists apple com)

[security bulletin] HPSBST03502 rev.1 - HP 3PAR Service Processor (SP) SPOCC, Remote Disclosure of Information 2015-09-30
security-alert hp com

APPLE-SA-2015-09-30-01 iOS 9.0.2 2015-09-30
Apple Product Security (product-security-noreply lists apple com)

Malware

Trojan:Win32/Cuffahlt.B
Adware:Win32/Bayads
Ransom:Win32/Orxlocker.A

Infostealer.Centerpos

Downloader.Sapaviro

Trojan.Uverat

Phishing

Amazon Support Inc	30th September 2015
ACCOUNT VERIFICATION PROCESSES - HELP \| AMAZON PAYMENTS
activation	30th September 2015
YOU HAVE RECEIVED A VOICEMAIL
Mail	30th September 2015
UPDATE
service@intl-paypal.com	30th September 2015
[ PAYPAL ] : VIEW YOUR RECENT ACTIVITY . âœ” #PP =

Vulnerebility

SANS News

Recent trends in Nuclear Exploit Kit activity

Threatpost

Unsupported Honeywell Experion PKS Vulnerable to Public Attacks

Suspicious Windows 7 Update Actually an Accidental Microsoft ‘Test’ Update

Apple Gatekeeper Bypass Opens Door for Malicious Code

Exploit

Dropbox < 3.3.x - OSX FinderLoadBundle Local Root Exploit

MakeSFX.exe 1.44 - Stack Buffer Overflow

30.9.2015

Bugtraq

APPLE-SA-2015-09-30-3 OS X El Capitan 10.11 2015-09-30
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-09-30-2 Safari 9 2015-09-30
Apple Product Security (product-security-noreply lists apple com)

[security bulletin] HPSBST03502 rev.1 - HP 3PAR Service Processor (SP) SPOCC, Remote Disclosure of Information 2015-09-30
security-alert hp com

APPLE-SA-2015-09-30-01 iOS 9.0.2 2015-09-30
Apple Product Security (product-security-noreply lists apple com)

Apache James Server 2.3.2 security vulnerability fixed 2015-09-30
Eric Charles (eric apache org)

Re: WinRAR SFX v5.21 - Remote Code Execution Vulnerability 2015-09-30
dev rarlab com (1 replies)

RE: WinRAR SFX v5.21 - Remote Code Execution Vulnerability 2015-09-30
Popovici, Alejo $LATCO - Buenos Aires$ (apopovici DELOITTE com) (1 replies)

Re: WinRAR SFX v5.21 - Remote Code Execution Vulnerability 2015-09-30
Eugene Roshal (roshal rarlab com)

FreeBSD Security Advisory FreeBSD-SA-15:24.rpcbind 2015-09-29
FreeBSD Security Advisories (security-advisories freebsd org)

Malware

TrojanDownloader:MSIL/Malkinocci.A
TrojanDownloader:Win32/Banload.BEM
TrojanSpy:Win32/Banker.AOY
SoftwareBundler:Win32/Techsnab

TROJ_GREENDISPENSER.A

Phishing

MARK WILLIAMS	30th September 2015
Caradvert- JoB Opening
Santander	30th September 2015
IMPORTANT CUSTOMER NOTICE
Amazon Support Inc	29th September 2015
ACCOUNT VERIFICATION PROCESSES - HELP \| AMAZON PAYMENTS
Golden Charter	29th September 2015
THE SIMPLE WAY TO SECURE PEACE OF MIND.
Barclays Bank PLC.	29th September 2015
ONLINE ACCOUNT VERIFICATION
PayPal	29th September 2015
Your account has been Iimited untiI we hear from you

Vulnerebility

SANS News

Tricks for DLL analysis

Threatpost

Dyreza Trojan Targeting IT Supply Chain Credentials

Apple Goes All-In on Privacy

Exploit

29.9.2015

Bugtraq

CVE-2015-3938 Remote Permanent LoV (Loss of View) in Mitsubishi Melsec FX3G-24M PLC 2015-09-29
Ralf Spenneberg $OpenSource Security$ (funktionskonto spenneberg net)

Remote privesc and RCE in Kaseya Virtual System Administrator 2015-09-29
Pedro Ribeiro (pedrib gmail com)

Vtiger CRM Authenticated Remote Code Execution (CVE-2015-6000) 2015-09-28
Benjamin Daniel Mussler (sec m

ESA-2015-151: RSA® OneStep Path Traversal Vulnerability 2015-09-29
Security Alert (Security_Alert emc com)

ESA-2015-152: RSA Web Threat Detection Multiple Vulnerabilities 2015-09-29
Security Alert (Security_Alert emc com)

CVE-2015-3938 Remote Permanent LoV (Loss of View) in Mitsubishi Melsec FX3G-24M PLC 2015-09-29
Ralf Spenneberg $OpenSource Security$ (funktionskonto spenneberg net) (1 replies)

Re: CVE-2015-3938 Remote Permanent LoV (Loss of View) in Mitsubishi Melsec FX3G-24M PLC 2015-09-29
Ralf Spenneberg (ralf os-t de)

Remote privesc and RCE in Kaseya Virtual System Administrator 2015-09-29
Pedro Ribeiro (pedrib gmail com)

Vtiger CRM Authenticated Remote Code Execution (CVE-2015-6000) 2015-09-28
Benjamin Daniel Mussler (sec ml fl7 de)

Photos in Wifi v1.0.1 iOS - Arbitrary File Upload Vulnerability 2015-09-28
Vulnerability Lab (research vulnerability-lab com)

NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability 2015-09-28
Vulnerability Lab (research vulnerability-lab com)

l fl7 de)

Photos in Wifi v1.0.1 iOS - Arbitrary File Upload Vulnerability 2015-09-28
Vulnerability Lab (research vulnerability-lab com)

NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability 2015-09-28
Vulnerability Lab (research vulnerability-lab com)

Malware

TrojanSpy:MSIL/QVKeyLogger.A
TrojanDownloader:MSIL/Suphun.A
TrojanDownloader:Win32/Jalaro.A

Win32/Hadra.A

Win32/TrojanClicker.Nex.A

Win32/TrojanClicker.Small.B

Infostealer.Centerpos

Phishing

Amazon Support Inc	29th September 2015
ACCOUNT VERIFICATION PROCESSES - HELP \| AMAZON PAYMENTS
Golden Charter	29th September 2015
THE SIMPLE WAY TO SECURE PEACE OF MIND.
Barclays Bank PLC.	29th September 2015
ONLINE ACCOUNT VERIFICATION
PayPal	29th September 2015
Your account has been Iimited untiI we hear from you
PayPal Support	29th September 2015
IMPORTANT MESSAGE FROM THE SUPPORT YOUR ACCOUNT WILL BE LIMITED.
Amazon Support Inc	28th September 2015
ACCOUNT VERIFICATION PROCESSES - HELP \| AMAZON PAYMENTS

Vulnerebility

SANS News

Threatpost

SAP Patches 12 SQL Injection, XSS Vulnerabilities in HANA

Dyreza Trojan Targeting IT Supply Chain Credentials

Exploit

ManageEngine EventLog Analyzer Remote Code Execution

Western Digital My Cloud 04.01.03-421, 04.01.04-422 - Command Injection

Kaseya Virtual System Administrator - Multiple Vulnerabilities

IconLover 5.42 - Local Buffer Overflow Exploit

Ubuntu Apport - Local Privilege Escalation

Mango Automation 2.6.0 - Multiple Vulnerabilities

PCMan FTP Server 2.0.7 - Directory Traversal Vulnerability

Watchguard XCS FixCorruptMail Local Privilege Escalation

28.9.2015

Bugtraq

Photos in Wifi v1.0.1 iOS - Arbitrary File Upload Vulnerability 2015-09-28
Vulnerability Lab (research vulnerability-lab com)

NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability 2015-09-28
Vulnerability Lab (research vulnerability-lab com)

WinRAR SFX v5.21 - Remote Code Execution Vulnerability 2015-09-28
Vulnerability Lab (research vulnerability-lab com)

Flowdock API Bug Bounty #3 - (Invite) Persistent Web Vulnerability 2015-09-28
Vulnerability Lab (research vulnerability-lab com)

My.WiFi USB Drive v1.0 iOS - File Include Vulnerability 2015-09-28
Vulnerability Lab (research vulnerability-lab com)

Subject mail: CVE-2015-7320 - Multiple Reflective XSS in Appointment Booking Calendar 1.1.7 WordPress plugin 2015-09-26
ibemed gmail com

CVE-2015-7320 - Multiple Reflective XSS in Appointment Booking Calendar 1.1.7 WordPress plugin 2015-09-26
ibemed gmail com

CVE-2015-7319 - SQL Injection in Appointment Booking Calendar 1.1.7 WordPress plugin 2015-09-26
ibemed gmail com

Malware

TrojanDropper:Win32/Soloniti.A
TrojanDropper:Win32/Morblish.A
TrojanClicker:MSIL/FaceLiker
Trojan:Win32/Greeodode.A

Phishing

Amazon Support Inc	28th September 2015
ACCOUNT VERIFICATION PROCESSES - HELP \| AMAZON PAYMENTS
Lloyds Bank	27th September 2015
YOUR ACCOUNT HAS BEEN BLOCKED

Vulnerebility

SANS News

"Transport of London" Malicious E-Mail

Threatpost

JavaScript DDoS Attack Peaks at 275,000 Requests-Per-Second

Hotel Chain Hilton Worldwide Investigating Potential POS Breach

VeraCrypt Patched Against Two Critical TrueCrypt Flaws

Exploit

PCMan FTP Server 2.0.7 - Directory Traversal Vulnerability

BisonWare BisonFTP Server 3.5 - Directory Traversal Vulnerability

Mango Automation 2.6.0 - Multiple Vulnerabilities

Centreon 2.6.1 - Multiple Vulnerabilities

My.WiFi USB Drive 1.0 iOS - File Include Vulnerability

Photos in Wifi 1.0.1 iOS - Arbitrary File Upload Vulnerability

Git-1.9.5 ssh-agent.exe Buffer Overflow

Telegram 3.2 - Input Length Handling Crash PoC

27.9.2015

Bugtraq

Malware

Worm:Win32/Codbot
TrojanDownloader:MSIL/Getete.A

WORM_KASIDET.NM

BKDR_KASIDET.FD

Phishing

Lloyds Bank	27th September 2015
YOUR ACCOUNT HAS BEEN BLOCKED
Amazon	27th September 2015
Hi You Have [1] New Message
PayPal Support	26th September 2015
IMPORTANT MESSAGE FROM THE SUPPORT YOUR ACCOUNT WILL BE LIMITED.
æ‹?æ‹?è´·	26th September 2015
å¿«å¿«åŠ å…¥å½©è™¹è®¡åˆ’ï¼Œç™¾ åˆ†ç™¾æœ¬é‡‘ä¿?éšœ
Online Survey	26th September 2015
Is your Online Banking Secure?

Vulnerebility

SANS News

Threatpost

Exploit

25.9.2015

Bugtraq

[SECURITY] [DSA 3368-1] cyrus-sasl2 security update 2015-09-25
Salvatore Bonaccorso (carnil debian org)

CVE-2015-5075 - Cross-Site Request Forgery In X2Engine Inc. X2Engine 2015-09-25
Portcullis Advisories (advisories portcullis-security com)

CVE-2015-5074 - Arbitrary File Upload In X2Engine Inc. X2Engine 2015-09-25
Portcullis Advisories (advisories portcullis-security com)

CVE-2015-5076 - Vulnerability title: Reflective XSS In X2Engine Inc. X2Engine 2015-09-25
Portcullis Advisories (advisories portcullis-security com)

Insecure application-coupling in Good Authentication Delegation [MZ-15-03] 2015-09-25
modzero (security modzero ch)

Malware

Trojan.Greendispenser

Trojan.Tinba.C!gm

WORM_KASIDET.SC

Phishing

Online Survey	26th September 2015
Is your Online Banking Secure?
Virgin Media	25th September 2015
Your latest Virgin Media Bill cannot be processed
bigfoot.com	23rd September 2015
[ howiem@bigfoot.com ] Upgrade Notice
å?å“æŠ˜æ‰£	22nd September 2015
é¦™æ¸¯ä»£è´ï¼Œä¸€æŠ˜é’œæƒ

Vulnerebility

SANS News

Threatpost

Exploit

FortiManager 5.2.2 - Persistent XSS Vulnerabilities

X2Engine 4.2 - CSRF Vulnerability

X2Engine 4.2 - Arbitrary File Upload

24.9.2015

Bugtraq

Insecure application-coupling in Good Authentication Delegation [MZ-15-03] 2015-09-25
modzero (security modzero ch)

FortiManager v5.2.2 Multiple XSS Vulnerabilities 2015-09-25
apparitionsec gmail com

Re: CVE-2015-5204: HTTP header injection vulnerability in Apache Cordova File Transfer Plugin for Android 2015-09-24
Shazron (shazron apache org)

[SECURITY] [DSA 3367-1] wireshark security update 2015-09-24
Moritz Muehlenhoff (jmm debian org)

BMC-2015-0006: File inclusion vulnerability in "BIRT Engine" servlet used in BMC Remedy AR Reporting 2015-09-23
appsec (appsec bmc com)

BMC-2015-0005: File inclusion vulnerability in "BIRT Viewer" servlet used in BMC Remedy AR Reporting 2015-09-23
appsec (appsec bmc com)

[SECURITY] [DSA 3366-1] rpcbind security update 2015-09-23
Salvatore Bonaccorso (carnil debian org)

Malware

Trojan.Greendispenser

Phishing

Virgin Media	25th September 2015
Your latest Virgin Media Bill cannot be processed
bigfoot.com	23rd September 2015
[ howiem@bigfoot.com ] Upgrade Notice
å?å“æŠ˜æ‰£	22nd September 2015
é¦™æ¸¯ä»£è´ï¼Œä¸€æŠ˜é’œæƒ

Vulnerebility

SANS News

Mozilla Foundation Security Advisory 2015-112

Threatpost

Naikon APT Group Tied to China’s PLA Unit 78020

Microsoft Revokes Trust for Certificates Leaked by D-Link

Curbing the For-Profit Cybercrime Food Chain

Exploit

Windows Kernel - NtGdiBitBlt Buffer Overflow (MS15-097)

FortiManager 5.2.2 - Persistent XSS Vulnerabilities

X2Engine 4.2 - CSRF Vulnerability

X2Engine 4.2 - Arbitrary File Upload

SMF (Simple Machine Forum) <= 2.0.10 - Remote Memory Exfiltration Exploit

WinRar 5.21 - SFX OLE Command Execution

FreshFTP 5.52 - .qfl Crash PoC

23.9.2015

Bugtraq

BMC-2015-0006: File inclusion vulnerability in "BIRT Engine" servlet used in BMC Remedy AR Reporting 2015-09-23
appsec (appsec bmc com)

BMC-2015-0005: File inclusion vulnerability in "BIRT Viewer" servlet used in BMC Remedy AR Reporting 2015-09-23
appsec (appsec bmc com)

[SECURITY] [DSA 3366-1] rpcbind security update 2015-09-23
Salvatore Bonaccorso (carnil debian org)

Cisco AnyConnect elevation of privileges via DMG install script 2015-09-23
Securify B.V. (lists securify nl)

[SECURITY] [DSA 3365-1] iceweasel security update 2015-09-23
Moritz Muehlenhoff (jmm debian org)

ESA-2015-142: RSA Archer® GRC Platform Multiple Vulnerabilities 2015-09-23
Security Alert (Security_Alert emc com)

Cisco Security Advisory: Cisco IOS XE Software Network Address Translation Denial of Service Vulnerability 2015-09-23
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco IOS and IOS XE Software SSH Version 2 RSA-Based User Authentication Bypass Vulnerability 2015-09-23
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco IOS and IOS XE Software IPv6 First Hop Security Denial of Service Vulnerabilities 2015-09-23
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Malware

Infostealer.Bebloh

Trojan.Mentono

Win32 / Agent.RKC

Win32 / Filecoder.NDS

Phishing

bigfoot.com	23rd September 2015
[ howiem@bigfoot.com ] Upgrade Notice

Vulnerebility

SANS News

Tracking Privileged Accounts in Windows Environments

Cisco IOS / IOS XE security advisories

Threatpost

5.6 Million Fingerprints Stolen In OPM Hack

Exploit

SMF (Simple Machine Forum) <= 2.0.10 - Remote Memory Exfiltration Exploit

w3tw0rk / Pitbul IRC Bot Remote Code Execution

refbase <= 0.9.6 - Multiple Vulnerabilities

Cisco AnyConnect 3.1.08009 - Privilege Escalation via DMG Install Script

22.9.2015

Bugtraq

UltraEdit v22.20 - Buffer Overflow Vulnerability 2015-09-23
Vulnerability Lab (research vulnerability-lab com)

WiFi Drive CR v1.0 iOS - Persistent Filename Dir List Vulnerability 2015-09-23
Vulnerability Lab (research vulnerability-lab com)

Flowdock API Bug Bounty #1 - (Description) Persistent Web Vulnerability 2015-09-23
Vulnerability Lab (research vulnerability-lab com)

Reflected Cross-Site Scripting (XSS) in iTop 2015-09-23
High-Tech Bridge Security Research (advisory htbridge ch)

Open-Xchange Security Advisory 2015-09-23 2015-09-23
Martin Heiland (martin heiland lists open-xchange com)

[slackware-security] mozilla-firefox (SSA:2015-265-01) 2015-09-23
Slackware Security Team (security slackware com)

Cisco AnyConnect elevation of privileges via DLL side loading 2015-09-22
Securify B.V. (lists securify nl)

Malware

Infostealer.Bebloh

Phishing

bigfoot.com	23rd September 2015
[ howiem@bigfoot.com ] Upgrade Notice
å?å“æŠ˜æ‰£	22nd September 2015
é¦™æ¸¯ä»£è´ï¼Œä¸€æŠ˜é’œæƒ
PayPal Service	22nd September 2015
Account status limited
Applec	22nd September 2015
Your Apple account has been disabled !
Tesco Bank	22nd September 2015
Important account security information

Vulnerebility

SANS News

Making our users unlearn what we taught them

Threatpost

Bypass Developed for Microsoft Memory Protection, Control Flow Guard

Federal CISOs Propose New Efforts to Shore Up Cybersecurity

Exploit

SAP Netweaver < 7.01 - XML External Entity Injection

Kaspersky Antivirus ThinApp Parser Stack Buffer Overflow

Cisco AnyConnect Secure Mobility Client 3.1.08009 - Privilege Escalation

MASM32 11R - Crash POC

OS X Regex Engine (TRE) - Integer Signedness and Overflow Issues

OS X Regex Engine (TRE) - Stack Buffer Overflow

Apple qlmanage - SceneKit::daeElement::setElementName Heap Overflow

Window Kernel - Bitmap Handling Use-After-Free (MS15-061) #2

Windows Kernel - DeferWindowPos Use-After-Free (MS15-073)

Windows Kernel - UserCommitDesktopMemory Use-After-Free (MS15-073)

Windows Kernel - Pool Buffer Overflow Drawing Caption Bar (MS15-061)

Windows Kernel - HmgAllocateObjectAttr Use-After-Free (MS15-061)

Windows Kernel - win32k!vSolidFillRect Buffer Overflow (MS15-061)

Windows Kernel - SURFOBJ NULL Pointer Dereference (MS15-061)

Windows Kernel - Brush Object Use-After-Free Vulnerability (MS15-061)

Windows Kernel - WindowStation Use-After-Free (MS15-061)

Windows Kernel - NULL Pointer Dereference with Window Station and Clipboard (MS15-061)

Windows Kernel - Bitmap Handling Use-After-Free (MS15-061)

Windows Kernel - FlashWindowEx Memory Corruption (MS15-097)

Windows Kernel - bGetRealizedBrush Use-After-Free (MS15-097)

Windows Kernel - Use-After-Free with Cursor Object (MS15-097)

Windows Kernel - Use-After-Free with Printer Device Contexts (MS15-097)

Windows Kernel - NtGdiStretchBlt Pool Buffer Overflows (MS15-097)

Kaspersky Antivirus VB6 Parsing Integer Overflow

Kaspersky Antivirus ExeCryptor Parsing Memory Corruption

Kaspersky Antivirus PE Unpacking Integer Overflow

Kaspersky Antivirus DEX File Format Parsing Memory Corruption

Kaspersky Antivirus CHM Parsing Stack Buffer Overflow

Kaspersky Antivirus UPX Parsing Memory Corruption

Kaspersky Antivirus "Yoda's Protector" Unpacking Memory Corruption

22.9.2015

Bugtraq

UDID v1.0 iOS - Persistent Mail Encode Vulnerability 2015-09-22
Vulnerability Lab (research vulnerability-lab com)

Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability 2015-09-22
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3364-1] linux security update 2015-09-21
Ben Hutchings (benh debian org)

APPLE-SA-2015-09-21-1 watchOS 2 2015-09-21
Apple Product Security (product-security-noreply lists apple com)

Jasig CAS server vulnerabilities 2015-09-21
Antoni Klajn (antoni d klajn pwr edu pl)

Advisory: Insufficient Parameter Sanitization in login.live.com (Microsoft) 2015-09-21
securityresearch shaftek biz

CVE-2015-5372 SAML SP Authentication Bypass in nevisAuth 2015-09-21
Antoine Neuenschwander (Antoine Neuenschwander csnc ch)

[SECURITY] [DSA 3363-1] owncloud-client security update 2015-09-20
Luciano Bello (luciano debian org)

Malware

Trojan.Tinba.C

Trojan.Ranscrypt.U!gm

Trojan.Ransomcrypt.U

Phishing

PayPal Service	22nd September 2015
Account status limited
Apple	22nd September 2015
Your Apple account has been disabled !
Tesco Bank	22nd September 2015
Important account security information
FROM MRS MICHELLE OBAMA	21st September 2015
FROM MRS,MICHELLE OBAMA LAST NOTICE
Chase	21st September 2015
ALERT: SUSPICIOUS ACTIVITY
PayPal	21st September 2015
account under review.

Vulnerebility

SANS News

Threatpost

South Korean Child Monitoring App Beset by Vulnerabilities, Privacy Issues - See more at: https://threatpost.com/#sthash.dJZUKlne.dpuf

South Korean Child Monitoring App Beset by Vulnerabilities, Privacy Issues

Apple watchOS2 Includes Host of Code-Execution Patches

Model Assesses Readiness to Accept Outside Vulnerability Reports

Exploit

Konica Minolta FTP Utility 1.0 - Directory Traversal Vulnerability

Kirby CMS <= 2.1.0 - CSRF Content Upload and PHP Script Execution

h5ai < 0.25.0 - Unrestricted File Upload

Air Drive Plus 2.4 - Arbitrary File Upload Vulnerability

Kirby CMS <= 2.1.0 - Authentication Bypass

MASM32 11R - Crash POC

21.9.2015

Bugtraq

Jasig CAS server vulnerabilities 2015-09-21
Antoni Klajn (antoni d klajn pwr edu pl)

Advisory: Insufficient Parameter Sanitization in login.live.com (Microsoft) 2015-09-21
securityresearch shaftek biz

CVE-2015-5372 SAML SP Authentication Bypass in nevisAuth 2015-09-21
Antoine Neuenschwander (Antoine Neuenschwander csnc ch)

[SECURITY] [DSA 3363-1] owncloud-client security update 2015-09-20
Luciano Bello (luciano debian org)

Defense in depth -- the Microsoft way (part 35): Windows Explorer ignores "Run as administrator" ... 2015-09-19
Stefan Kanthak (stefan kanthak nexgo de)

SAP Netwaver - XML External Entity Injection 2015-09-21
Lukasz Miedzinski (lukasz miedzinski gmail com)

[SECURITY] [DSA 3362-1] qemu-kvm security update 2015-09-18
Salvatore Bonaccorso (carnil debian org)

Malware

Infostealer.Odlanor

Trojan.Glupteba

Win32 / Agent.RKC

Phishing

Chase	21st September 2015
ALERT: SUSPICIOUS ACTIVITY
PayPal	21st September 2015
account under review.
Chase Update	21st September 2015
NEW UPDATE IS REQUIRED #5509
PayPaI Service	21st September 2015
Account status limited
Apple ID	21st September 2015
YOUR APPIE ID HAS BEEN DISABLED FOR SECURITY REASONS !
qq	21st September 2015
ATTENTION: DEAR CUSTOMER
Service PaypaI	20th September 2015
YOUR ACCOUNT HAS BEEN IIMITED UNTII WE HEAR FROM YOU
Credit Union	20th September 2015
Navy Federal Credit Union : Account Verification Alert!

Vulnerebility

SANS News

Detecting XCodeGhost Activity

Threatpost

Adobe Patches 23 Critical Vulnerabilities in Flash Player

XcodeGhost iOS Malware Contained

Exploit

ADH-Web Server IP-Cameras - Multiple Vulnerabilities

Konica Minolta FTP Utility 1.0 - Remote Command Execution

Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow

20.9.2015

Bugtraq

KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege Escalation 2015-09-17
KoreLogic Disclosures (disclosures korelogic com)

[security bulletin] HPSBST03418 rev.1 - HP P6000 Command View Software, Remote Disclosure of Information 2015-09-17
security-alert hp com

Malware

OSX.Codgost

Phishing

Credit Union	20th September 2015
Navy Federal Credit Union : Account Verification Alert!
VIRGIN MEDIA	20th September 2015
Your Virgin Media Profile Update
Amazon	19th September 2015
ACCOUNT VEREFICATION
Microsoft	19th September 2015
Re-confirm Your cPanel
Amazon	19th September 2015
UNUSUAL ACTIVITY AMAZON ACCOUNT

Vulnerebility

SANS News

Don't launch that file Adobe Reader!

Threatpost

Exploit

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure

ADH-Web Server IP-Cameras - Multiple Vulnerabilities

Total Commander 8.52 - Buffer Overflow (Windows 10)

Total Commander 8.52 - Buffer Overflow

Pligg CMS 2.0.2 - (load_data_for_search.php) SQL Injection

Wireshark 1.12.7 - Division by Zero Crash PoC

Microsoft Office 2007 - BIFFRecord Length Use-After-Free

Microsoft Office 2007 - OLESSDirectyEntry.CreateTime Type Confusion

Microsoft Office 2007 - OGL.dll ValidateBitmapInfo Bounds Check Failure (MS15-097)

MS15-078 Microsoft Windows Font Driver Buffer Overflow

17.9.2015

Bugtraq

KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege Escalation 2015-09-17
KoreLogic Disclosures (disclosures korelogic com)

[security bulletin] HPSBST03418 rev.1 - HP P6000 Command View Software, Remote Disclosure of Information 2015-09-17
security-alert hp com

APPLE-SA-2015-09-16-4 OS X Server 5.0.3 2015-09-16
Apple Product Security (product-security-noreply lists apple com)

Apple Safari FTP PASV manipulation vulnerability (CVE-2015-5912) 2015-09-16
Amit Klein (aksecurity gmail com)

APPLE-SA-2015-09-16-3 iTunes 12.3 2015-09-16
Apple Product Security (product-security-noreply lists apple com)

Malware

Win32 / NopleMento.A

Phishing

Amazon	17th September 2015
ACCOUNT VEREFICATION
National	17th September 2015
YOUR PAYMENT NOTIFICATION//
Eco Experts	16th September 2015
SWITCH TO SOLAR AND CUT YOUR ENERGY BILLS BY 50% PER YEAR

Vulnerebility

SANS News

Threatpost

Apple Addresses Dozens of Vulnerabilities, Embraces Two-Factor Authentication in iOS 9

D-Link Accidentally Leaks Private Code-Signing Keys

Google Details Plans to Disable SSLv3 and RC4

Exploit

IKEView.exe R60 - .elg Local SEH Exploit

ZTE PC UI USB Modem Software - Buffer Overflow

ManageEngine OpManager Remote Code Execution

Windows 10 Build 10130 - User Mode Font Driver Thread Permissions Privilege Escalation

Windows NtUserGetClipboardAccessToken Token Leak

Windows Task Scheduler DeleteExpiredTaskAfter File Deletion Privilege Escalation

Windows CreateObjectTask TileUserBroker Privilege Escalation

Windows CreateObjectTask SettingsSyncDiagnostics Privilege Escalation

16.9.2015

Bugtraq

APPLE-SA-2015-09-16-3 iTunes 12.3 2015-09-16
Apple Product Security (product-security-noreply

KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege Escalation 2015-09-17
KoreLogic Disclosures (disclosures korelogic com)

[security bulletin] HPSBST03418 rev.1 - HP P6000 Command View Software, Remote Disclosure of Information 2015-09-17
security-alert hp com

APPLE-SA-2015-09-16-4 OS X Server 5.0.3 2015-09-16
Apple Product Security (product-security-noreply lists apple com)

Apple Safari FTP PASV manipulation vulnerability (CVE-2015-5912) 2015-09-16
Amit Klein (aksecurity gmail com)

APPLE-SA-2015-09-16-3 iTunes 12.3 2015-09-16
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-09-16-2 Xcode 7.0 2015-09-16
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-09-16-1 iOS 9 2015-09-16
Apple Product Security (product-security-noreply lists apple com)

Cisco Security Advisory: Cisco TelePresence Server Denial of Service Vulnerability 2015-09-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability 2015-09-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Collaboration Assurance 2015-09-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

[security bulletin] HPSBGN03393 rev.2 - HP Operations Manager i, Remote Code Execution 2015-09-16
security-alert hp com

Fwd: [CVE-2015-6940] Pentaho GA PDI & GA BA - Improper authentication allows unauthenticated access to configuration files 2015-09-16
gregory draperi (gregory draperi gmail com)

lists apple com)

APPLE-SA-2015-09-16-2 Xcode 7.0 2015-09-16
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-09-16-1 iOS 9 2015-09-16
Apple Product Security (product-security-noreply lists apple com)

Cisco Security Advisory: Cisco TelePresence Server Denial of Service Vulnerability 2015-09-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability 2015-09-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Collaboration Assurance 2015-09-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

[security bulletin] HPSBGN03393 rev.2 - HP Operations Manager i, Remote Code Execution 2015-09-16
security-alert hp com

Malware

TrojanDropper:MSIL/Mutra
TrojanSpy:Win32/Rebhip.E
Trojan:JS/Iframeinject.AE

Exp.CVE-2015-2442

Exp.CVE-2015-2443

Exp.CVE-2015-2452

Phishing

Eco Experts	16th September 2015
SWITCH TO SOLAR AND CUT YOUR ENERGY BILLS BY 50% PER YEAR
Christy Bryant	16th September 2015
Best deep throat
PayPaI Inc	15th September 2015
WE'VE IIMITED ACCESS TO YOUR PAYPAI ACCOUNT
USAA	15th September 2015
Your USAA Savings Account Suspicious Activities

Vulnerebility

SANS News

A day in the life of a pentester, or is my job is too sexy for me?

Threatpost

Dutch Police Arrest Alleged CoinVault Ransomware Authors

Schneider Patches Plaintext Credentials Bug in Building Automation System

Dennis Fisher On Security, Journalism, and the Origins of Threatpost

Details Surface on Patched Bugzilla Privilege Escalation Flaw

Exploit

Android libstagefright - Integer Overflow Remote Code Execution

ManageEngine OpManager Remote Code Execution

ZeusCart 4.0 - CSRF Vulnerability

ZeusCart 4.0 - SQL Injection

ZTE PC UI USB Modem Software - Buffer Overflow

MS15-078 Microsoft Windows Font Driver Buffer Overflow

VBox Satellite Express 2.3.17.3 - Arbitrary Write

15.9.2015

Bugtraq

Cisco Security Advisory: Cisco TelePresence Server Denial of Service Vulnerability 2015-09-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability 2015-09-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Collaboration Assurance 2015-09-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

[security bulletin] HPSBGN03393 rev.2 - HP Operations Manager i, Remote Code Execution 2015-09-16
security-alert hp com

Fwd: [CVE-2015-6940] Pentaho GA PDI & GA BA - Improper authentication allows unauthenticated access to configuration files 2015-09-16
gregory draperi (gregory draperi gmail com)

Microsoft Exchange Information Disclosure 2015-09-16
apparitionsec gmail com

[SECURITY] [DSA 3360-1] icu security update 2015-09-15
Laszlo Boszormenyi (GCS) (gcs debian org)

Malware

TrojanSpy:Win32/Rebhip
TrojanDownloader:Win32/Bladabindi

Phishing

Christy Bryant	16th September 2015
Best deep throat
PayPaI Inc	15th September 2015
WE'VE IIMITED ACCESS TO YOUR PAYPAI ACCOUNT
USAA	15th September 2015
Your USAA Savings Account Suspicious Activities
ebilling@bt.com	15th September 2015
Your latest BT bill is now online

Vulnerebility

SANS News

Malicious spam with zip attachments containing .js files

Threatpost

WordPress Patches Serious Shortcodes Core Engine Vulnerability

First Let’s Encrypt Free Certificate Goes Live

Scan of IPv4 Space for ‘Implanted’ Cisco Routers Finds Fewer Than 100

Spam Campaign Continuing to Serve Up Malicious .js Files

Google Patches Latest Android Lockscreen Bypass

Exploit

Microsoft Office Excel 2007, 2010, 2013 - BIFFRecord Use-After-Free

Microsoft Office 2007 - BIFFRecord Length Use-After-Free

Microsoft Office 2007 - OLESSDirectyEntry.CreateTime Type Confusion

Microsoft Office 2007 - OGL.dll ValidateBitmapInfo Bounds Check Failure (MS15-097)

WordPress CP Reservation Calendar Plugin 1.1.6 - SQL Injection

FAROL - SQL Injection Vulnerability

14.9.2015

Bugtraq

[security bulletin] HPSBHF03509 rev.1 - HP ThinPro and Smart Zero Core, Remote Denial of Service, Unauthorized Access to Data 2015-09-15
security-alert hp com

Paypal Inc - Open Redirect Web Vulnerability 2015-09-15
Vulnerability Lab (research vulnerability-lab com)

Openfire 3.10.2 CSRF Vulnerabilities 2015-09-15
apparitionsec gmail com

IKEView.exe R60 Stack Buffer Overflow 2015-09-14
apparitionsec gmail com

[security bulletin] HPSBMU03392 rev.2 - HP ArcSight Logger, Remote Authorization Bypass 2015-09-14
security-alert hp com

[CVE-2015-5956] Typo3 Core sanitizeLocalUrl() Non-Persistent Cross-Site Scripting 2015-09-14
Ahrens, Julien (Julien Ahrens secunet com)

[SECURITY] [DSA 3358-1] php5 security update 2015-09-13
Salvatore Bonaccorso (carnil debian org)

Malware

TrojanDownloader:AutoIt/Gedo
TrojanDropper:MSIL/Mutra
TrojanClicker:Win32/Frosparf.H
TrojanDownloader:Win32/Frosparf.A

Downloader.Domar

Phishing

Barclays PLC	14th September 2015
YOU HAVE 3 NEW DOCUMENTS AVAILABLE
Amazon	14th September 2015
UNUSUAL ACTIVITY AMAZON ACCOUNT
PayPal	13th September 2015
Please confirm your account information .
Apple	13th September 2015
PLEASE LOGIN TO UPDATE YOUR ACCOUNT ID INFORMATIONS.
Halifax Plc	13th September 2015
IMPORTANT UPDATES

Vulnerebility

SANS News

Risk... in the most obscure places

Threatpost

DARPA Protecting Software From Reverse Engineering Through Obfuscation

Attackers Replacing Firmware on Cisco Routers

Exploit

Android Shellcode Telnetd with Parameters

Windows 10 Build 10130 - User Mode Font Driver Thread Permissions Privilege Escalation

Windows NtUserGetClipboardAccessToken Token Leak

Windows Task Scheduler DeleteExpiredTaskAfter File Deletion Privilege Escalation

Windows CreateObjectTask TileUserBroker Privilege Escalation

Windows CreateObjectTask SettingsSyncDiagnostics Privilege Escalation

TP-Link NC200/NC220 Cloud Camera 300Mbps Wi-Fi - Hard-Coded Credentials

Total Commander 8.52 - SEH-Overwrite BOF

Attackers Replacing Firmware on Cisco Routers

MS15-100 Microsoft Windows Media Center MCL Vulnerability

WordPress CP Reservation Calendar Plugin 1.1.6 - SQL Injection

Openfire 3.10.2 - Unrestricted File Upload

Openfire 3.10.2 - Remote File Inclusion

Openfire 3.10.2 - Privilege Escalation

Openfire 3.10.2 - Multiple XSS Vulnerabilities

Openfire 3.10.2 - CSRF Vulnerabilities

Silver Peak VXOA < 6.2.11 - Multiple Vulnerabilities

ManageEngine EventLog Analyzer < 10.6 build 10060 - SQL Query Execution

ManageEngine OpManager 11.5 - Multiple Vulnerabilities

13.9.2015

Bugtraq

[CVE-2015-5956] Typo3 Core sanitizeLocalUrl() Non-Persistent Cross-Site Scripting 2015-09-14
Ahrens, Julien (Julien Ahrens secunet com)

[SECURITY] [DSA 3358-1] php5 security update 2015-09-13
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3359-1] virtualbox security update 2015-09-13
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3357-1] vzctl security update 2015-09-13
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3356-1] openldap security update 2015-09-12
Salvatore Bonaccorso (carnil debian org)

IKEView.exe Fox beta 1 Stack Buffer Overflow 2015-09-12
apparitionsec gmail com

Malware

Hacktool.Suceful

Phishing

Barclays PLC	14th September 2015
YOU HAVE 3 NEW DOCUMENTS AVAILABLE
Amazon	14th September 2015
UNUSUAL ACTIVITY AMAZON ACCOUNT
PayPal	13th September 2015
Please confirm your account information .
Apple	13th September 2015
PLEASE LOGIN TO UPDATE YOUR ACCOUNT ID INFORMATIONS.
Halifax Plc	13th September 2015
IMPORTANT UPDATES
PAYPAI SERVICE	13th September 2015
Your account has been Iimited untiI we hear from you

Vulnerebility

SANS News

The Wordpress Plugins Playground

Threatpost

Installation of Tor Relay in Library Attracts DHS Attention

New Debian Releases Fix PHP, VirtualBox Bugs

Exploit

ManageEngine EventLog Analyzer < 10.6 build 10060 - SQL Query Execution

ManageEngine OpManager 11.5 - Multiple Vulnerabilities

EZ SQL Reports < 4.11.37 - Multiple Vulnerabilities

IKEView.exe Fox beta 1 - Stack Buffer Overflow

IKEView.exe R60 - Stack Buffer Overflow

12.9.2015

Bugtraq

[SECURITY] [DSA 3356-1] openldap security update 2015-09-12
Salvatore Bonaccorso (carnil debian org)

IKEView.exe Fox beta 1 Stack Buffer Overflow 2015-09-12
apparitionsec gmail com

[security bulletin] HPSBHF03408 rev.2 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G Module, Remote Execution of Arbitrary Code 2015-09-11
security-alert hp com

[KIS-2015-04] Magento <= 1.9.2 (catalogProductCreate) Autoloaded File Inclusion Vulnerability 2015-09-11
Egidio Romano (research karmainsecurity com)

Magento Bug Bounty #19 - Persistent Filename Vulnerability 2015-09-11
Vulnerability Lab (research vulnerability-lab com)

PayPal Inc - Security Approval & 2FA Session Auth Bypass (API) Vulnerability 2015-09-11
Vulnerability Lab (research vulnerability-lab com)

Shopify Bug Bounty #8 - (FilePath) Persistent Vulnerability 2015-09-11
Vulnerability Lab (research vulnerability-lab com)

Yahoo Bug Bounty #32 - Cross Site Request Forgery bulkImport Web Vulnerability 2015-09-11
Vulnerability Lab (research vulnerability-lab com)

Security Advisory for Bugzilla 5.0.1, 4.4.10 and 4.2.15 2015-09-10
LpSolit gmail com

Malware

Phishing

Apple	13th September 2015
PLEASE LOGIN TO UPDATE YOUR ACCOUNT ID INFORMATIONS.
Halifax Plc	13th September 2015
IMPORTANT UPDATES
PAYPAI SERVICE	13th September 2015
Your account has been Iimited untiI we hear from you
PayPal	12th September 2015
YOUR ACCOUNT HAS LIMITATION ! YOU CAN RESOLVE THIS NOW .

Vulnerebility

SANS News

Some password advice

Threatpost

Exploit

Microsoft Internet Explorer 11 - Stack Underflow Crash PoC

Windows Media Center - Command Execution (MS15-100)

Monsta FTP 1.6.2 - Multiple Vulnerabilities

11.9.2015

Bugtraq

DataTables Security Advisory - XSS Vulnerability - CVE-2015-6584 2015-09-10
Onur Yilmaz (onur netsparker com)

[KIS-2015-04] Magento <= 1.9.2 (catalogProductCreate) Autoloaded File Inclusion Vulnerability 2015-09-11
Egidio Romano (research karmainsecurity com)

Magento Bug Bounty #19 - Persistent Filename Vulnerability 2015-09-11
Vulnerability Lab (research vulnerability-lab com)

PayPal Inc - Security Approval & 2FA Session Auth Bypass (API) Vulnerability 2015-09-11
Vulnerability Lab (research vulnerability-lab com)

Shopify Bug Bounty #8 - (FilePath) Persistent Vulnerability 2015-09-11
Vulnerability Lab (research vulnerability-lab com)

Yahoo Bug Bounty #32 - Cross Site Request Forgery bulkImport Web Vulnerability 2015-09-11
Vulnerability Lab (research vulnerability-lab com)

Security Advisory for Bugzilla 5.0.1, 4.4.10 and 4.2.15 2015-09-10
LpSolit gmail com

Security advisory for Bugzilla 5.0, 4.4.9, and 4.2.14 2015-09-10
dkl mozilla com

DataTables Security Advisory - XSS Vulnerability - CVE-2015-6584 2015-09-10
Onur Yilmaz (onur netsparker com)

[SECURITY] [DSA 3355-1] libvdpau security update 2015-09-10
Alessandro Ghedini (ghedo debian org)

Multiple Cross-Site Scripting vulnerabilities in Synology Download Station 2015-09-09
Securify B.V. (lists securify nl)

Synology Video Station command injection and multiple SQL injection vulnerabilities 2015-09-09
Securify B.V. (lists securify nl)

[SECURITY] [DSA 3355-1] libvdpau security update 2015-09-10
Alessandro Ghedini (ghedo debian org)

Multiple Cross-Site Scripting vulnerabilities in Synology Download Station 2015-09-09
Securify B.V. (lists securify nl)

Synology Video Station command injection and multiple SQL injection vulnerabilities 2015-09-09
Securify B.V. (lists securify nl)

[security bulletin] HPSBGN03504 rev.1 - HP UCMDB, Local Disclosure of Sensitive Information 2015-09-09
security-alert hp com

[security bulletin] HPSBOV03505 rev.1 - TCP/IP Services for OpenVMS running NTP, Remote Code Execution, Denial of Service (DoS) 2015-09-09
security-alert hp com

Malware

TrojanDownloader:Win32/Blinsload.A
PWS:Win32/Pumba.C

Phishing

alert@barclays.co.uk	11th September 2015
NEW MESSAGE
USAA	10th September 2015
Account suspension notice
APPLE	10th September 2015
ACCOUNT STATUS HAS BEEN CHANGED , INVOICE NUMBER #965221

Vulnerebility

SANS News

Feeding DShield with OSSEC Logs

Threatpost

Just Like Old Days: IOT Security Pits Regulators Against Market

Gary McGraw on Scalable Software Security and Medical Device Securityf

Series of Buffer Overflows Plague Many Yokogawa ICS Products

Exploit

OS X x64 - tcp bind shellcode, NULL byte free (144 bytes)

OS X Install.framework suid root Runner Binary Privilege Escalation

OS X Install.framework Arbitrary mkdir, unlink and chown to admin Group

OS X Install.framework suid Helper Privilege Escalation

Logitech Webcam Software 1.1 - eReg.exe SEH/Unicode Buffer Overflow

OpenLDAP 2.4.42 - ber_get_next Denial of Service

10.9.2015

Bugtraq

DataTables Security Advisory - XSS Vulnerability - CVE-2015-6584 2015-09-10
Onur Yilmaz (onur netsparker com)

[SECURITY] [DSA 3355-1] libvdpau security update 2015-09-10
Alessandro Ghedini (ghedo debian org)

Multiple Cross-Site Scripting vulnerabilities in Synology Download Station 2015-09-09
Securify B.V. (lists securify nl)

Synology Video Station command injection and multiple SQL injection vulnerabilities 2015-09-09
Securify B.V. (lists securify nl)

[security bulletin] HPSBGN03504 rev.1 - HP UCMDB, Local Disclosure of Sensitive Information 2015-09-09
security-alert hp com

[security bulletin] HPSBOV03505 rev.1 - TCP/IP Services for OpenVMS running NTP, Remote Code Execution, Denial of Service (DoS) 2015-09-09
security-alert hp com

[ERPSCAN-15-016] SAP NetWeaver â?? Hardcoded credentials 2015-09-09
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-015] SAP NetWeaver AS ABAPâ?? Hardcoded Credentials 2015-09-09
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-014] SAP Mobile Platform 3 â?? XXE in Add Repository 2015-09-09
ERPScan inc (erpscan online gmail com)

ESA-2015-110: EMC Documentum Thumbnail Server Directory Traversal Vulnerability 2015-09-09
Security Alert (Security_Alert emc com)

ESA-2015-140: RSA® Identity Management & Governance Multiple Cross-Site Scripting Vulnerabilities 2015-09-09
Security Alert (Security_Alert emc com)

[security bulletin] HPSBOV03506 rev.1 - TCP/IP Services for OpenVMS running BIND, Remote Denial of Service (DoS) 2015-09-08
security-alert hp com

Defense in depth -- the Microsoft way (part 33): arbitrary code execution (and UAC bypass) via RegEdit.exe 2015-09-08
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3354-1] spice security update 2015-09-08
Salvatore Bonaccorso (carnil debian org)

Malware

TrojanDownloader:MSIL/Muxtart.A

Win32 / Spy.Agent.ORM

Win32 / Wemosis.H

Win32 / Dridex.S

Win32 / Dridex.P

Phishing

APPLE	10th September 2015
ACCOUNT STATUS HAS BEEN CHANGED , INVOICE NUMBER #965221

Vulnerebility

SANS News

A look through the spam filters - examining waves of Upatre malspam

Threatpost

FTC, Experts Push Startups to Think About Security From the Beginning

NY Health Provider Excellus Discloses Data Breach Dating to 2013

Pair of Drupal Modules Patch Access Bypass Flaws

Exploit

Android Stagefright - Remote Code Execution

Qlikview <= 11.20 SR11 - Blind XXE Injection Vulnerability

Auto-Exchanger 5.1.0 - CSRF Vulnerability

9.9.2015

Bugtraq

[ERPSCAN-15-016] SAP NetWeaver â?? Hardcoded credentials 2015-09-09
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-015] SAP NetWeaver AS ABAPâ?? Hardcoded Credentials 2015-09-09
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-014] SAP Mobile Platform 3 â?? XXE in Add Repository 2015-09-09
ERPScan inc (erpscan online gmail com)

ESA-2015-110: EMC Documentum Thumbnail Server Directory Traversal Vulnerability 2015-09-09
Security Alert (Security_Alert emc com)

ESA-2015-140: RSA® Identity Management & Governance Multiple Cross-Site Scripting Vulnerabilities 2015-09-09
Security Alert (Security_Alert emc com)

[security bulletin] HPSBOV03506 rev.1 - TCP/IP Services for OpenVMS running BIND, Remote Denial of Service (DoS) 2015-09-08
security-alert hp com

Defense in depth -- the Microsoft way (part 33): arbitrary code execution (and UAC bypass) via RegEdit.exe 2015-09-08
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3354-1] spice security update 2015-09-08
Salvatore Bonaccorso (carnil debian org)

Re: Oracle Hyperion password disclosure... 2015-09-08
jeff kayser jibeconsulting com

Malware

MonitoringTool:Win32/TektonIt
HackTool:Win32/Broduplo
TrojanDownloader:Win32/Dabaker.A
TrojanDownloader:Java/OpenConnection.QE

Phishing

Tesco Bank	8th September 2015
Locked out due to recent changes

Vulnerebility

SANS News

Adobe Updates Shockwave Player

September 2015 Microsoft Patch Tuesday

Threatpost

Android Stagefright Exploit Code Released to Public

Musical Chairs Campaign Found Deploying New Gh0st RAT Variant

Jessy Irwin on Password Security, Opsec and User Education

Security of iMessage System Comes to the Fore Again

Turla APT Group Abusing Satellite Internet Links

TLS Implementations Vulnerable to RSA Key Leaks

Microsoft Patches Graphics Component Flaw Under Attack

Exploit

Qlikview <= 11.20 SR11 - Blind XXE Injection Vulnerability

PHP SplDoublyLinkedList unserialize() Use-After-Free

PHP GMP unserialize() Use-After-Free

PHP SplObjectStorage unserialize() Use-After-Free

PHP Session Deserializer Use-After-Free

DirectAdmin Web Control Panel 1.483 - Multiple Vulnerabilities

Linux/x86 - execve("/bin/cat", ["/bin/cat", "/etc/passwd"], NULL)

8.9.2015

Bugtraq

[CVE-2015-3623] Qlikview blind XXE Security Vulnerability 2015-09-08
alex_haynes outlook com

NETGEAR Wireless Management System - Authentication Bypass and Privilege Escalation. 2015-09-07
Elliott Lewis (elliott lewis uk gmail com)

[SECURITY] [DSA 3353-1] openslp-dfsg security update 2015-09-05
Alessandro Ghedini (ghedo debian org)

JSPMySQL Administrador CSRF & XSS Vulnerabilities 2015-09-05
apparitionsec gmail com

Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability 2015-09-04
David Coomber (davidcoomber infosec gmail com)

Malware

Backdoor:Win32/Shesmi.A
TrojanDownloader:Win32/Puflug.B
TrojanDropper:Win32/PSah.A

Win32/Spy.Agent.ORM

Win32/Wemosis.H

Phishing

Amazon	7th September 2015
Amazon account status has been changed

Vulnerebility

SANS News

September 2015 Microsoft Patch Tuesday

A Close Look at PayPal Overpayment Scams That Target Craigslist Sellers

Threatpost

Adobe Patches Two Shockwave Player Vulnerabilities

eBay Fixes XSS Flaw in Subdomain

Government Releases Policy on Vulnerability Discovery and Disclosure

Exploit

Cisco Sourcefire User Agent 2.2 - Insecure File Permissions

IBM AIX High Availability Cluster Multiprocessing (HACMP) Local Privilege Escalation 0day

Advantech WebAccess 8.0, 3.4.3 ActiveX - Multiple Vulnerabilities

VeryPDF HTML Converter 2.0 - SEH/ToLower() Bypass Buffer Overflow

7.9.2015

Bugtraq

NETGEAR Wireless Management System - Authentication Bypass and Privilege Escalation. 2015-09-07
Elliott Lewis (elliott lewis uk gmail com)

[SECURITY] [DSA 3353-1] openslp-dfsg security update 2015-09-05
Alessandro Ghedini (ghedo debian org)

JSPMySQL Administrador CSRF & XSS Vulnerabilities 2015-09-05
apparitionsec gmail com

Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability 2015-09-04
David Coomber (davidcoomber infosec gmail com)

Avira Mobile Security iOS Application - Cleartext Credentials Vulnerability 2015-09-04
David Coomber (davidcoomber infosec gmail com)

Defense in depth -- the Microsoft way (part 32): yet another (trivial) UAC bypass resp. privilege escalation 2015-09-04
Stefan Kanthak (stefan kanthak nexgo de)

Oracle Hyperion password disclosure... 2015-09-04
Jeff Kayser (jeff kayser jibeconsulting com)

Malware

TrojanSpy:Win32/Banker.AOT
TrojanSpy:Win32/Banker.AOS
TrojanSpy:Win32/Banker.AOP

Phishing

Nobel Trust Ltd.	3rd September 2015
International Escrow Agent

Vulnerebility

SANS News

Security Awareness and Collaboration

Hunting for IOC's with ioc-parser

Threatpost

Exploit

Endian Firewall Proxy Password Change Command Injection

NETGEAR Wireless Management System 2.1.4.15 (Build 1236) - Privilege Escalation

JSPMySQL Administrador - Multiple Vulnerabilities

Zhone ADSL2+ 4P Bridge & Router (Broadcom) - Multiple Vulnerabilities

WordPress Contact Form Generator <= 2.0.1 - Multiple CSRF Vulnerabilities

FireEye Appliance Unauthorized File Disclosure

Elastix < 2.5 , PHP Code Injection Exploit

AutoCAD DWG and DXF To PDF Converter 2.2 - Buffer Overflow

Disconnect.me Mac OS X Client <= 2.0 - Local Privilege Escalation

ActiveState Perl.exe x64 Client 5.20.2 - Crash PoC

5.9.2015

Bugtraq

Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability 2015-09-04
David Coomber (davidcoomber infosec gmail com)

Avira Mobile Security iOS Application - Cleartext Credentials Vulnerability 2015-09-04
David Coomber (davidcoomber infosec gmail com)

Defense in depth -- the Microsoft way (part 32): yet another (trivial) UAC bypass resp. privilege escalation 2015-09-04
Stefan Kanthak (stefan kanthak nexgo de)

Oracle Hyperion password disclosure... 2015-09-04
Jeff Kayser (jeff kayser jibeconsulting com)

[SECURITY] [DSA 3352-1] screen security update 2015-09-04
Laszlo Boszormenyi (gcs debian org)

Malware

BKDR_CARBANAK.C

BKDR_CARBANAK.B

VBA / TrojanDownloader.Agent.AAV

VBA / TrojanDownloader.Agent.AAL

VBA / TrojanDownloader.Agent.AAK

Win32 / Dridex.S

VBA / TrojanDownloader.Agent.AAZ

Phishing

Vulnerebility

SANS News

Threatpost

Attacker Compromised Mozilla Bug System, Stole Private Vulnerability Data - See more at: https://threatpost.com/attacker-compromised-mozilla-bug-system-stole-private-vulnerability-data/114552/#sthash.0WvwhP3t.dpuf

Attacker Compromised Mozilla Bug System, Stole Private Vulnerability Data

Exploit

4.9.2015

Bugtraq

[SECURITY] [DSA 3352-1] screen security update 2015-09-04
Laszlo Boszormenyi (gcs debian org)

[slackware-security] seamonkey (SSA:2015-246-01) 2015-09-03
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3351-1] chromium-browser security update 2015-09-03
Michael Gilbert (mgilbert debian org)

[CVE-2014-7216] Yahoo! Messenger emoticons.xml Multiple Key Value Handling Local Buffer Overflow 2015-09-03
Julien Ahrens (info rcesecurity com)

ESA-2015-144: EMC Documentum Content Server Privilege Escalation Vulnerability 2015-09-03
Security Alert (Security_Alert emc com)

Zhone ADSL2+ 4P Bridge & Router (Broadcom) - Multiple Vulnerabilities 2015-09-03
Vulnerability Lab (research vulnerability-lab com)

Checkmarx CxQL Sandbox bypass (CVE-2014-8778) 2015-09-03
hdau deloitte fr

[SYSS-2015-016] Avaya one-X® Agent - Hard-coded Cryptographic Key 2015-09-03
sven freund syss de

[slackware-security] bind (SSA:2015-245-01) 2015-09-02
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3350-1] bind9 security update 2015-09-02
Moritz Muehlenhoff (jmm debian org)

FreeBSD Security Advisory FreeBSD-SA-15:23.bind 2015-09-02
FreeBSD Security Advisories (security-advisories freebsd org)

[SECURITY] [DSA 3348-1] qemu security update 2015-09-02
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3349-1] qemu-kvm security update 2015-09-02
Salvatore Bonaccorso (carnil debian org)

Malware

Phishing

Vulnerebility

SANS News

Port Scanners: The Good and The Bad

Threatpost

Citovat Wassenaar, HP vytáhne z Mobile Pwn2Own

Federálové Change Policy vyžadovat rozkaz k použití Stingrays

Exploit

3.9.2015

Bugtraq

[SECURITY] [DSA 3348-1] qemu security update 2015-09-02
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3349-1] qemu-kvm security update 2015-09-02
Salvatore Bonaccorso (carnil debian org)

Cisco Security Advisory: Cisco Integrated Management Controller Supervisor and Cisco UCS Director Remote File Overwrite Vulnerability 2015-09-02
Cisco Systems Product Security Incident Response Team (psirt cisco com)

[SECURITY] [DSA 3347-1] pdns security update 2015-09-02
SÃ©bastien Delafond (seb debian org)

ESA-2015-137: EMC Atmos XML External Entity Injection Vulnerability 2015-09-02
Security Alert (Security_Alert emc com)

Malware

TrojanDownloader:Win32/Contaskitar.B
TrojanDownloader:Win32/Retkwark.A
TrojanDownloader:Win32/Qulkonwi.D
TrojanDownloader:Win32/Lophistdol.A
Backdoor:Win32/NetWiredRC.D

TrojanSpy:Win32/Banker.AOO
Backdoor:Win32/Farfli.BJ
TrojanDownloader:Win32/Upatre.BY
TrojanDownloader:Win32/Upatre.BX
TrojanDownloader:Win32/Scadmacs.A
SoftwareBundler:Win32/Owsair
SoftwareBundler:Win32/LoadArcher.A
SoftwareBundler:Win32/LoadArcher
TrojanDownloader:Win32/Upatre.CB

Phishing

Service 2015	2nd September 2015
PLEASE LOGIN TO UPDATE YOUR ACCOUNT INFORMATIONS
Administrator OnlineÂ®	2nd September 2015
âœ”VIEW MAIL!!
Yvonne Perry	2nd September 2015
ONENIGHTSEX NOTICE IS PENDING
Tesco Bank	1st September 2015
Tesco Account suspended due to TOS violations
Mohamed Abdel	1st September 2015
URGENT !!!
email update	1st September 2015
INFO
Mona Yates	1st September 2015
YOU'VE 1 F#CK REQUEST

Vulnerebility

SANS News

Querying the DShield API from RTIR

Threatpost

New Versions of Carbanak Banking Malware Seen Hitting Targets in U.S. and Europe

New Android Ransomware Communicates over XMPP

Cisco Patches File Overwrite Bug in IMC Supervisor and UCS Director

Exploit

SphereFTP Server 2.0 - Crash PoC

Mainframe/System Z Bind Shell

2.9.2015

Bugtraq

[SECURITY] [DSA 3347-1] pdns security update 2015-09-02
SÃ©bastien Delafond (seb debian org)

ESA-2015-137: EMC Atmos XML External Entity Injection Vulnerability 2015-09-02
Security Alert (Security_Alert emc com)

Cross-Site Request Forgery in Cerb 2015-09-02
High-Tech Bridge Security Research (advisory htbridge ch)

[slackware-security] gdk-pixbuf2 (SSA:2015-244-01) 2015-09-01
Slackware Security Team (security slackware com)

CVE-2015-5603: JIRA and the HipChat For JIRA plugin - Velocity Template Injection 2015-09-02
David Black (dblack atlassian com)

KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation 2015-09-01
KoreLogic Disclosures (disclosures korelogic com)

KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation 2015-09-01
KoreLogic Disclosures (disclosures korelogic com)

[CORE-2015-0013] - FortiClient Antivirus Multiple Vulnerabilities 2015-09-01
CORE Advisories Team (advisories coresecurity com)

Malware

Phishing

Tesco Bank	1st September 2015
Tesco Account suspended due to TOS violations
Mohamed Abdel	1st September 2015
URGENT !!!
email update	1st September 2015
INFO
Mona Yates	1st September 2015
YOU'VE 1 F#CK REQUEST
ITç®¡ç†ä¸å¿ƒ	1st September 2015
ã€ç½‘ç»œè¿è¥éƒ¨ã€‘å…³äºŽEMI Sé‚®ä»¶æœ?åŠ¡å?‡çº§çš„é€šçŸ¥ï¼ ï¼ˆè¯·å?Šæ—¶æŸ¥çœ‹ï¼‰
Wells Fargo Bank	1st September 2015
WELLS FARGO NOTIFICATION- MESSAGE ID : 9876123

Vulnerebility

SANS News

What's the situation this week for Neutrino and Angler EK?

Threatpost

Encryption, Lock Mechanism Vulnerabilities Plague AppLock

Google Patches Critical Vulnerabilities in Chrome 45

Victims of June OPM Hack Still Haven’t Been Notified

Netflix Sleepy Puppy Awakens XSS Vulnerabilities in Secondary Applications

Exploit

Bedita 3.5.1 - XSS Vulnerabilities

Edimax BR6228nS/BR6228nC - Multiple Vulnerabilities

Mpxplay Multimedia Commander 2.00a - .m3u Stack-Based Buffer Overflow

SiS Windows VGA Display Manager 6.14.10.3930 - Write-What-Where PoC

XGI Windows VGA Display Manager 6.14.10.1090 - Arbitrary Write PoC

Mpxplay Multimedia Commander 2.00a - .m3u Stack-Based Buffer Overflow

SphereFTP Server 2.0 - Crash PoC

OS X x64 /bin/sh Shellcode, NULL Byte Free, 34 bytes

Cerb 7.0.3 - CSRF Vulnerability

GPON Home Router FTP G-93RG1 - CSRF Command Execution Vulnerability

Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass

1.9.2015

Bugtraq

[CORE-2015-0013] - FortiClient Antivirus Multiple Vulnerabilities 2015-09-01
CORE Advisories Team (advisories coresecurity com)

[security bulletin] HPSBMU03339 rev.1 - HP LoadRunner Controller, Local Execution of Arbitrary Code 2015-09-01
security-alert hp com

[security bulletin] HPSBGN03403 rev.1 - HP Virtualization Performance Viewer, Remote Unauthorized Disclosure of Information 2015-08-31
security-alert hp com

[security bulletin] HPSBMU03401 rev.1 - HP Operations Manager for UNIX and Linux, Remote Unauthorized Modification, Disclosure of Information 2015-08-31
security-alert hp com

Malware

Worm:VBS/Tibni.A

Phishing

Mohamed Abdel	1st September 2015
URGENT !!!
email update	1st September 2015
INFO
Mona Yates	1st September 2015
YOU'VE 1 F#CK REQUEST
ITç®¡ç†ä¸å¿ƒ	1st September 2015
ã€ç½‘ç»œè¿è¥éƒ¨ã€‘å…³äºŽEMI Sé‚®ä»¶æœ?åŠ¡å?‡çº§çš„é€šçŸ¥ï¼ ï¼ˆè¯·å?Šæ—¶æŸ¥çœ‹ï¼‰
Wells Fargo Bank	1st September 2015
WELLS FARGO NOTIFICATION- MESSAGE ID : 9876123
PayPol Services	31st August 2015
CASE ID : 1389795465 \| PLEASE CHECK YOUR PAYPOL ACCOUNT INFORMATION
PayPal - Customer	31st August 2015
IMPORTANT UPDATE REQUIRED IN YOUR PAYPAL ACCOUNT âœ”
Natwest	29th August 2015
Natwest Notice

Vulnerebility

SANS News

Gift card from Marriott?

Encryption of "data at rest" in servers

How to hack

Threatpost

Exploit

Bedita 3.5.1 - XSS Vulnerabilities

Mpxplay Multimedia Commander 2.00a - .m3u Stack-Based Buffer Overflow

31.8.2015

Bugtraq

[security bulletin] HPSBGN03403 rev.1 - HP Virtualization Performance Viewer, Remote Unauthorized Disclosure of Information 2015-08-31
security-alert hp com

[security bulletin] HPSBMU03401 rev.1 - HP Operations Manager for UNIX and Linux, Remote Unauthorized Modification, Disclosure of Information 2015-08-31
security-alert hp com

Dogma India dogmaindia CMS - Auth Bypass Vulnerability 2015-08-28
Vulnerability Lab (research vulnerability-lab com)

Jenkins 1.626 - Cross Site Request Forgery / Code Execution 2015-08-28
smash devilteam pl

LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability 2015-08-28
Vulnerability Lab (research vulnerability-lab com)

PayPal Bug Bounty #119 - Stored Cross Site Scripting Vulnerability 2015-08-28
Vulnerability Lab (research vulnerability-lab com)

[security bulletin] HPSBGN03407 rev.1 - HP Operations Manager for Windows, Remote Unauthorized Modification, Disclosure of Information 2015-08-28
security-alert hp com

[security bulletin] HPSBGN03387 rev.1 - HP Intelligent Provisioning, Remote Code Execution, Unauthorized Access 2015-08-28
security-alert hp com

[SECURITY] [DSA 3346-1] drupal7 security update 2015-08-31
Alessandro Ghedini (ghedo debian org)

[security bulletin] HPSBMU03416 rev.1 - HP Data Protector, Remote Disclosure of Information 2015-08-28
security-alert hp com

[SECURITY] [DSA 3345-1] iceweasel security update 2015-08-29
Salvatore Bonaccorso (carnil debian org)

[slackware-security] mozilla-firefox (SSA:2015-241-01) 2015-08-29
Slackware Security Team (security slackware com)

Re: Re: UAC Bypass Vulnerability on "Windows 7" in Windows Script Host 2015-08-30
kev r yahoo com

[SECURITY] [DSA 3344-1] php5 security update 2015-08-27
Sebastien Delafond (seb debian org)

Malware

TrojanDownloader:Win32/ExtenBro.A
BrowserModifier:Win32/Diplugem
DDoS:Win32/Nitol.J
TrojanDownloader:Win32/Olutall.B
TrojanDownloader:AutoIt/Fadef
SoftwareBundler:Win32/FakeDiX

Phishing

Vulnerebility

SANS News

Detecting file changes on Microsoft systems with FCIV

Threatpost

CoreBot Malware Steals Credentials-For Now

CERT Warns of Slew of Bugs in Belkin N600 Routers

NSF Awards $6M Grants for Internet of Things Security

CoreBot Malware Steals Credentials-For Now

Exploit

PhpWiki 1.5.4 - Multiple Vulnerabilities

Edimax PS-1206MF - Web Admin Auth Bypass

Ganglia Web Frontend < 3.5.1 - PHP Code Execution

Cyberoam Firewall CR500iNG-XP - 10.6.2 MR-1 - Blind SQL Injection Vulnerability

Apple OS X Entitlements Rootpipe Privilege Escalation

Microsoft Office 2007 - msxml5.dll Crash PoC

Viber 4.2.0 - Non-Printable Characters Handling Denial of Service Vulnerability

30.8.2015

Bugtraq

Malware

Trojan.Cryptolocker.AA

BrowserModifier:Win32/Diplugem
TrojanDownloader:Win32/ExtenBro.A
DDoS:Win32/Nitol.J
TrojanDownloader:Win32/Olutall.B
TrojanDownloader:AutoIt/Fadef
SoftwareBundler:Win32/FakeDiX

Win32 / Dridex.M

VBA / TrojanDropper.Agent.CT

Phishing

Natwest	29th August 2015
Natwest Notice

Vulnerebility

SANS News

Automating Metrics using RTIR REST API

Threatpost

Appeals Court Vacates Lower Court’s Decision on National Security Letters

Exploit

MS SQL Server 2000/2005 SQLNS.SQLNamespace COM Object Refresh() Unhandled Pointer Exploit

Samsung SyncThruWeb 2.01.00.26 - SMB Hash Disclosure

Sysax Multi Server 6.40 SSH Component Denial of Service

28.8.2015

Bugtraq

[SECURITY] [DSA 3344-1] php5 security update 2015-08-27
Sebastien Delafond (seb debian org)

[security bulletin] HPSBGN03402 rev.2 - HP Performance Manager, Remote Disclosure of Information 2015-08-27
security-alert hp com

UAC Bypass Vulnerability on "Windows 7" in Windows Script Host 2015-08-27
vozzie gmail com (1 replies)

Malware

TrojanDownloader:Win32/Banload.BDQ
TrojanSpy:Win32/Bancos.ANS
TrojanDownloader:Win32/Banload.BDN
TrojanDownloader:Win32/Banload.BDL

Generic.e!71CDC3201116

PWS:Win32/Fareit.AF
TrojanDownloader:Win32/Zegost.H
Exploit:Win32/CVE-2015-2426
TrojanDownloader:MSIL/Winpud.A

Trojan.Kotver

Phishing

Barclays PLC.	27th August 2015
Barclays Important Notification.
Silvia Ribas.	27th August 2015
FW: DOCUMENTO - 4221.2419

Vulnerebility

SANS News

Test File: PDF With Embedded DOC Dropping EICAR

Threatpost

Adobe Hotfix Patches XXE Vulnerability in ColdFusion

Scanner Finds Malicious Android Apps at Scale

Google to Pause Flash Ads in Chrome Starting Next Week

FBI: Social Engineering, Hacks Lead to Millions Lost to Wire Fraud

Exploit

WordPress Responsive Thumbnail Slider Plugin 1.0 - Arbitrary File Upload

Jenkins 1.626 - Cross Site Request Forgery / Code Execution

Wolf CMS Arbitrary File Upload To Command Execution

Photo Transfer (2) 1.0 iOS - Denial of Service Vulnerability

27.8.2015

Bugtraq

UAC Bypass Vulnerability on "Windows 7" in Windows Script Host 2015-08-27
vozzie gmail com

[security bulletin] HPSBHF03408 rev.1 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G Module, Remote Execution of Arbitrary Code 2015-08-26
security-alert hp com

[security bulletin] HPSBGN03411 rev.1 - HP Operations Agent Virtual Appliance, Remote Unauthorized Disclosure of Information 2015-08-26
security-alert hp com

CVE-2015-6535: Stored XSS in YouTube Embed (WordPress plugin) allows admins to compromise super admins 2015-08-26
grajalerts noreply gmail com

[security bulletin] HPSBGN03405 rev.1 - HP Integration Adaptor, Remote Unauthorized Modification, Disclosure of Information 2015-08-26
security-alert hp com

Malware

TrojanDownloader:Win32/Gratem.A

Backdoor.Trojan.LH2

BrowserModifier:Win32/IstartSurf!lnk
BrowserModifier:Win32/DeltaHomes!lnk
BrowserModifier:Win32/OurSurfing!lnk

Exploit/Stagefright.E

Exploit/Stagefright.M

Exploit/Certifigate.B

Phishing

Silvia Ribas.	27th August 2015
FW: DOCUMENTO - 4221.2419
PayPal	27th August 2015
Update Your PayPal Account!

Vulnerebility

SANS News

PDF + maldoc1 = maldoc2

Threatpost

Target Says SEC Won’t Pursue Enforcement Action as a Result of Data Breach

Patched Ins0mnia Vulnerability Keeps Malicious iOS Apps Hidden

Endress+Hauser Patches Buffer Overflow In Dozens of ICS Products

Exploit

Magento eCommerce - Remote Code Execution

VLC Media Player 2.2.1 - m3u8/m3u Crash PoC

FHFS - FTP/HTTP File Server 2.1.2 Remote Command Execution

FENIX 0.92 - Buffer Overflow

BSIGN 0.4.5 - Buffer Overflow

ZSNES 1.51 - Buffer Overflow

Xion Audio Player 1.5 build 155 Stack Based Buffer Overflow

QEMU Programmable Interrupt Timer Controller Heap Overflow

26.8.2015

Bugtraq

[security bulletin] HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multiple Vulnerabilities 2015-08-24
security-alert hp com

[security bulletin] HPSBMU03413 rev.1 - HP Virtual Connect Enterprise Manager SDK, Multiple Vulnerabilities 2015-08-24
security-alert hp com

[security bulletin] HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and Linux, Multiple Vulnerabilities 2015-08-24
security-alert hp com

[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities 2015-08-24
security-alert hp com

Malware

Backdoor.Uwarrat

OSX / Ventir.A

Win32 / Saynob.2406.A

OSX / Spy.Hapus.A

PDF / TrojanDropper.Agent.C

VBA / TrojanDownloader.Agent.AAC

VBA / TrojanDownloader.Agent.ZX

VBA / TrojanDownloader.Agent.ZS

Win32 / Filecoder.NEA

Win32 / Dridex.M

Phishing

Natwest	26th August 2015
1 IMPORTANT MESSAGE
PayPal	26th August 2015
Update Your Information! âœ‰ 26/08/2015 09:20:31

Vulnerebility

SANS News

Actor that tried Neutrino exploit kit now back to Angler

Threatpost

CERT Warns of Hard-Coded Credentials in DSL SOHO Routers

Researchers Uncover New Italian RAT uWarrior

Exploit

ZSNES 1.51 - Buffer Overflow

VLC Media Player 2.2.1 - m3u8/m3u Crash PoC

25.8.2015

Bugtraq

[security bulletin] HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multiple Vulnerabilities 2015-08-24
security-alert hp com

[security bulletin] HPSBMU03413 rev.1 - HP Virtual Connect Enterprise Manager SDK, Multiple Vulnerabilities 2015-08-24
security-alert hp com

[security bulletin] HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and Linux, Multiple Vulnerabilities 2015-08-24
security-alert hp com

[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities 2015-08-24
security-alert hp com

[security bulletin] HPSBGN03404 rev.1 - HP Service Health Reporter, Remote Unauthorized Modification 2015-08-24
security-alert hp com

[security bulletin] HPSBMU03345 rev.1 - HP Network Node Manager i (NNMi) and Smart Plugins (iSPIs) for HP-UX, Linux, Solaris, and Windows, Remote Disclosure of Information, Unauthorized Modification 2015-08-24
security-alert hp com

[SYSS-2015-026] Denial of Service (CWE-730) and Overly Restrictive Account Lockout Mechanism (CWE-645) in Page2Flip Premium App 2.5 2015-08-24
erlijn vangenuchten syss de

[SYSS-2015-027] Cross-Site Scripting (CWE-79) in Page2Flip Premium App 2.5 2015-08-24
erlijn vangenuchten syss de

[SYSS-2015-028] Cross-Site Scripting (CWE-79) in Page2Flip Premium App 2.5 2015-08-24
erlijn vangenuchten syss de

[SYSS-2015-029] Insecure Direct Object Reference (CWE-932) in Page2Flip Premium App 2.5 2015-08-24
erlijn vangenuchten syss de

[SYSS-2015-032] Broken Authentication and Session Management (CWE-930) in Page2Flip Premium App 2.5 2015-08-24
erlijn vangenuchten syss de

[SYSS-2015-030] Improper Handling of Insufficient Privileges (CWE-274) in Page2Flip Premium App 2.5 2015-08-24
erlijn vangenuchten syss de

SYSS-2015-033: Missing Function Level Access Control (CWE-935) in Page2Flip Premium App 2.5 2015-08-24
erlijn vangenuchten syss de

Dell SonicWall NetExtender Unquoted Autorun Privilege Escalation 2015-08-24
ajs swordshield com

Cross site request forgery vulnerability in Linksys WAG120N 2015-08-23
DonVallejo . (j v vallejo gmail com)

[SYSS-2015-025] Netop Remote Control - Insufficiently Protected Credentials 2015-08-24
matthias deeg syss de

Malware

Win32/Upatre

Infostealer.Canfili

Phishing

service@paypal.co.uk	24th August 2015
ACTION REQUIRED -YOUR BANK HAS NOTIFIED US OF UNAUTHORISED MONEY TRANSFERS FROM YOUR BANK ACCOUNT

Vulnerebility

SANS News

Dropbox Phishing via Compromised Wordpress Site

Threatpost

Charlie Miller to Leave Twitter Security Team

AutoIt Used in Targeted Attacks to Move RATs

Github Mitigates DDoS Attack

Exploit

Microsoft Office 2007 OneTableDocumentStream Invalid Object

Microsoft Office 2007 Malformed Document Stack-Based Buffer Overflow

Firefox PDF.js Privileged Javascript Injection

Pligg CMS 2.0.2 - CSRF Add Admin Exploit

WordPress GeoPlaces3 Theme - Arbitrary File Upload Vulnerbility

Mock SMTP Server 1.0 Remote Crash PoC

GOM Audio 2.0.8 - (.gas) Crash POC

Keeper IP Camera 3.2.2.10 - Authentication Bypass

24.8.2015

Bugtraq

Cross site request forgery vulnerability in Linksys WAG120N 2015-08-23
DonVallejo . (j v vallejo gmail com)

[SYSS-2015-025] Netop Remote Control - Insufficiently Protected Credentials 2015-08-24
matthias deeg syss de

Logstash vulnerability CVE-2015-5619 2015-08-21
Suyog Rao (suyog elastic co)

Malware

Phishing

SUPPORT	24th August 2015
We Advise You To Update Your Account Right Now âœ”
Microsoft	24th August 2015
Update Your Account Amazon
sales	23rd August 2015
YOUR PAYMENT TO SKYPE, RECEIPT NR. 02695125143
Chase Bank	23rd August 2015
[ Chase Bank ] Important Notification
USAA	23rd August 2015
Important Account Update

Vulnerebility

SANS News

Are You Protecting your "Backdoor" ?

Threatpost

White House Support for CISA Worries Privacy Advocates - See more at: https://threatpost.com/#sthash.N0mq2Ham.dpuf

White House Support for CISA Worries Privacy Advocates

AlienSpy RAT Resurfaces as JSocket

Vulnerabilities Identified in Dolphin, Mercury Android Browsers

Exploit

Easy File Sharing Web Server 6.9 - USERID Remote Buffer Overflow

Easy Address Book Web Server 1.6 - USERID Remote Buffer Overflow

24.8.2015

Bugtraq

Logstash vulnerability CVE-2015-5619 2015-08-21
Suyog Rao (suyog elastic co)

[security bulletin] HPSBUX03410 SSRT102175 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) 2015-08-21
security-alert hp com

Re: [SECURITY] [DSA 3325-2] apache2 regression update 2015-08-21
franzskinn gmail com

APPLE-SA-2015-08-20-1 QuickTime 7.7.8 2015-08-20
Apple Product Security (product-security-noreply lists apple com)

Re: Micro Login System v1.0 (userpwd.txt) Password Disclosure Vulnerability 2015-08-20
anonymous yahoo com

[security bulletin] HPSBUX03369 SSRT102037 rev.1 - HP-UX execve(2), Local Elevation of Privilege 2015-08-20
security-alert hp com

[SECURITY] [DSA 3342-1] vlc security update 2015-08-20
Alessandro Ghedini (ghedo debian org)

[oCERT-2015-009] VLC arbitrary pointer dereference 2015-08-20
Andrea Barisani (lcars ocert org)

UBNT Bug Bounty #3 - Persistent Filename Vulnerability 2015-08-20
Vulnerability Lab (research vulnerability-lab com)

UBNT Bug Bounty #1 - Client Side Cross Site Scripting Vulnerability 2015-08-20
Vulnerability Lab (research vulnerability-lab com)

WebSolutions India Design CMS - SQL Injection Vulnerability 2015-08-20
Vulnerability Lab (research vulnerability-lab com)

ChiefPDF Software v2.x - Buffer Overflow Vulnerability 2015-08-20
Vulnerability Lab (research vulnerability-lab com)

PDF Shaper v3.5 - (MSF) Remote Buffer Overflow Vulnerability 2015-08-20
Vulnerability Lab (research vulnerability-lab com)

Malware

Backdoor.Duuzer

Phishing

Chase Bank	23rd August 2015
[ Chase Bank ] Important Notification
USAA	23rd August 2015
Important Account Update
Lloyds Bank	22nd August 2015
YOUR ACCOUNT HAS BEEN FROZEN
Lloyds	22nd August 2015
LLOYDS BANK UPDATE

Vulnerebility

SANS News

Threatpost

Exploit

Microsoft Office 2007 wwlib.dll fcPlcfFldMom Uninitialized Heap Usage

Microsoft Office 2007 wwlib.dll Type Confusion

Microsoft Office 2007 OGL.dll DpOutputSpanStretch::OutputSpan Out of Bounds Write

Microsoft Office 2007 MSO.dll Arbitrary Free

Microsoft Office 2007 MSO.dll Use-After-Free

Windows win32k.sys TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write

Windows win32k.sys TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access

Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table

Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table

Windows win32k.sys TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow

Windows win32k.sys TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow

Windows ATMFD.DLL Write to Uninitialized Address Due to Malformed CFF Table

Windows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access

Windows ATMFD.DLL CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access

Windows ATMFD.DLL CharString Stream Out-of-Bounds Reads

Microsoft Office 2007 MSPTLS Heap Index Integer Underflow

21.8.2015

Bugtraq

[security bulletin] HPSBUX03369 SSRT102037 rev.1 - HP-UX execve(2), Local Elevation of Privilege 2015-08-20
security-alert hp com

[SECURITY] [DSA 3342-1] vlc security update 2015-08-20
Alessandro Ghedini (ghedo debian org)

[oCERT-2015-009] VLC arbitrary pointer dereference 2015-08-20
Andrea Barisani (lcars ocert org)

UBNT Bug Bounty #3 - Persistent Filename Vulnerability 2015-08-20
Vulnerability Lab (research vulnerability-lab com)

UBNT Bug Bounty #1 - Client Side Cross Site Scripting Vulnerability 2015-08-20
Vulnerability Lab (research vulnerability-lab com)

WebSolutions India Design CMS - SQL Injection Vulnerability 2015-08-20
Vulnerability Lab (research vulnerability-lab com)

Malware

Backdoor.Duuzer

Win32/Backzat.Z

Win32/TrojanDownloader.Small.ACX

Win32/PSW.OnLineGames.AQLO

OSX/Ventir.A

Win32/Saynob.2406.A

OSX/Spy.Hapus.A

Phishing

Microsoft	21st August 2015
Opportunity Job
HM Revenue & Customs	21st August 2015
PERIODIC YEAR-END FISCAL INFORMATION
@aol.com	20th August 2015
UPDATE
Amazon Support	20th August 2015
ACCOUNT VEREFICATION
Amazon Support	19th August 2015
ACCOUNT VEREFICATION

Vulnerebility

SANS News

A recent decline in traffic associated with Operation Windigo

Threatpost

Uptick in Neutrino Exploit Kit Traffic Doesn’t Mean Angler Reign Over

Details Surface on Patched Sandbox Violation Vulnerability in iOS

Facebook Updates Information-Sharing Platform

Exploit

WordPress MDC Private Message Plugin 1.0.0 - Persistent XSS

Valhala Honeypot 1.8 - Stack-Based Buffer Overflow

Win2003 x64 - Token Stealing shellcode - 59 bytes

20.8.2015

Bugtraq

[security bulletin] HPSBUX03400 SSRT102211 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) 2015-08-19
security-alert hp com

CVE-2015-3269 Apache Flex BlazeDS Insecure Xml Entity Expansion Vulnerability 2015-08-19
Christofer Dutz (cdutz apache org)

Privilege escalation through RPC commands in EMC Documentum Content Server (incomplete fix in CVE-2015-4532) 2015-08-19
andrew panfilov tel

Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information 2015-08-19
Asher995 gmail com (2 replies)

Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information 2015-08-19
paul szabo sydney edu au

RE: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information 2015-08-19
Chillman, Paul, Vodafone UK (Paul Chillman vodafone com)

[SYSS-2015-041] XSS in OpenText Secure MFT 2015-08-19
adrian vollmer syss de

Malware

Phishing

Amazon Support	20th August 2015
ACCOUNT VEREFICATION
Amazon Support	19th August 2015
ACCOUNT VEREFICATION
PayPal Inc	19th August 2015
[PAYPAL VERIFICATION] âœ‰ LAST REMINDER YOU MUST UPDATE YOUR ACCOUNT INFORMATION âœ”

Vulnerebility

SANS News

Actor using Angler exploit kit switched to Neutrino

Threatpost

Holes Patched in Online Bookmarking App Pocket

Web.com Loses 93,000 Credit Card Numbers in Breach

Inside the Unpatched OS X Vulnerabilities

Exploit

Aruba Mobility Controller 6.4.2.8 - Multiple vulnerabilities

Vifi Radio v1 - CSRF Vulnerability

up.time 7.5.0 Superadmin Privilege Escalation Exploit

up.time 7.5.0 XSS And CSRF Add Admin Exploit

up.time 7.5.0 Arbitrary File Disclose And Delete Exploit

up.time 7.5.0 Upload And Execute File Exploit

19.8.2015

Bugtraq

[SYSS-2015-041] XSS in OpenText Secure MFT 2015-08-19
adrian vollmer syss de

Trend Micro Deep Discovery XSS 2015-08-19
apparitionsec gmail com

Trend Micro Deep Discovery Authentication Bypass 2015-08-19
apparitionsec gmail com

Re: Hawkeye-G v3 CSRF Vulnerability ***[UPDATED CORRECTED] 2015-08-18
aabbccdd05407 gmail com

CVE-2015-5699 - Cumulus Linux's Switch Configuration Tools Backend, clcmd_server, Vulnerable to Local Privilege Escalation 2015-08-18
Gregory Pickett (gpickett71 yahoo com)

FreeBSD Security Advisory FreeBSD-SA-15:20.expat 2015-08-18
FreeBSD Security Advisories (security-advisories freebsd org)

[SECURITY] [DSA 3338-1] python-django security update 2015-08-18
Alessandro Ghedini (ghedo debian org)

Malware

TrojanDownloader:Win32/Upatre.BR
TrojanDownloader:MSIL/Torwofun.B
PWS:Win32/QQpass.GR
PWS:MSIL/Facepass.A
SoftwareBundler:Win32/Bestof
PWS:O97M/Wipha.A

Phishing

admin email	19th August 2015
UPGRADE EMAIL ACCOUNT!
Lisa	18th August 2015
NEW ORDER
285$	18th August 2015
THE OPPORTUNITY TO EARN UP TO $ 500 PER DAY [VKGPM]
Tesco Bank	18th August 2015
Tesco Account suspended due to TOS violations
Tracy Allen	18th August 2015
A NEW CHEAT MATCH IS PENDING
Natwest	18th August 2015
Violation Terms
Mail Administrator	18th August 2015
EXCEEDED LIMIT
Arlene Horton	18th August 2015
STRANGER HAS SENT YOU A QUICKIE REQUEST
Unlimited	18th August 2015
FRESH TOOLS / ONLINE LIVE SUPPORT, VISIT US: HTTP://ASHOKTOOLS.NET
Apple	18th August 2015
YOUR APPLE ID WAS USED TO SIGN IN TO ICLOUD ON AN MACBOOK PRO.

Vulnerebility

SANS News

Microsoft Security Bulletin MS15-093 - Critical OOB - Internet Explorer RCE

Threatpost

Emergency IE Patch Fixes Vulnerability Under Attack

IRS Hack May Implicate Three Times As Many Taxpayers Than Expected

Apple Zero Day Remains Unpatched

Core Infrastructure Initiative Launches Open Source Security Badge Program

Adobe Patches XXE Vulnerability in LiveCycle Data Services

Exploit

Flash Broker-Based Sandbox Escape via Forward Slash Instead of Backslash

Flash Broker-Based Sandbox Escape via Unexpected Directory Lock

Flash Broker-Based Sandbox Escape via Timing Attack Against File Moving

Flash Boundless Tunes - Universal SOP Bypass Through ActionSctipt's Sound Object

Flash PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution

Flash Player Integer Overflow in Function.apply

Flash AVSS.setSubscribedTags Use After Free Memory Corruption

Flash Uninitialized Stack Variable MPD Parsing Memory Corruption

Flash Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory

Flash AS2 Use After Free in TextField.filters

Flash AS2 Use After Free While Setting TextField.filters

Flash Use-After-Free in Display List Handling

Flash Use-After-Free in NetConnection.connect

Adobe Flash Use-After-Free When Setting Variable

Flash AS2 Use After Free in DisplacementMapFilter.mapBitmap

Flash Use-After-Free with MovieClip.scrollRect in AS2

Adobe Flash Use-After-Free When Setting Value

Adobe Flash Out-of-Bounds Memory Read While Parsing a Mutated SWF File

Adobe Flash Out-of-Bounds Memory Read While Parsing a Mutated SWF File (2)

Adobe Flash Out-of-Bounds Memory Read While Parsing a Mutated TTF File Embedded in SWF

Adobe Flash Use-After-Free in XML.childNodes

Easy File Management Web Server 5.6 - USERID Remote Buffer Overflow

FTP Commander 8.02 - SEH Overwrite

OS X 10.10.5 - XNU Local Privilege Escalation

18.8.2015

Bugtraq

Re: [SECURITY] [DSA 3336-1] nss security update 2015-08-17
miguelmellolopes gmail com

EMC Documentum Content Server: arbitrary code execution (incomplete fix in CVE-2015-4532) 2015-08-17
andrew panfilov tel

[SECURITY] [DSA 3336-1] nss security update 2015-08-17
Salvatore Bonaccorso (carnil debian org)

sysadmin privilege in EMC Documentum Content Server 2015-08-17
andrew panfilov tel

Insufficient certificate validation in EMC Secure Remote Services Virtual Edition 2015-08-17
Securify B.V. (lists securify nl)

Weak authentication in EMC Secure Remote Services Virtual Edition Web Portal 2015-08-17
Securify B.V. (lists securify nl)

[ERPSCAN-15-013] SAP NetWeaver AS Java CIM UPLOAD â?? XXE 2015-08-17
ERPScan inc (erpscan online gmail com)

[ERPSCAN-15-012] SAP Afaria 7 XComms â?? Buffer Overflow 2015-08-17
ERPScan inc (erpscan online gmail com)

ESA-2015-130: EMC Documentum WebTop and WebTop Clients Cross-Site Request Forgery Vulnerability 2015-08-17
Security Alert (Security_Alert emc com)

ESA-2015-131: EMC Documentum Content Server Multiple Vulnerabilities 2015-08-17
Security Alert (Security_Alert emc com)

Malware

Trojan.Cryptolocker.Z

Trojan.Cryptolocker.Y

Trojan.Sofacy.C

PWS:O97M/Wipha.A
PWS:Win32/Wipha.A
TrojanDownloader:Win32/Tembatch.B
Exploit:VBS/CVE-2014-6332
Exploit:SWF/CVE-2014-6332

Linux.Pinscan

Phishing

Barclays	18th August 2015
YOUR DEBIT CARD HAS BEEN BLOCKED
TalkTalk	17th August 2015
The payment for your latest TalkTalk Bill could not be processed
NEWF#CKFRIEND	17th August 2015
want to f#ck right now
6367$	17th August 2015
No need to stay awake all night long to earn money. Launch the robot.

Vulnerebility

SANS News

Tool Tip: Kansa Stafford released, PowerShell for DFIR

Threatpost

Risky Schneider Electric SCADA Vulnerabilities Remain Unpatched

Exploit

Risky Schneider Electric SCADA Vulnerabilities Remain Unpatched - See more at: https://threatpost.com/#sthash.fuC1gXrv.dpuf

Risky Schneider Electric SCADA Vulnerabilities Remain Unpatched

Uber to Quadruple Security Staff by 2016

Werkzeug Debug Shell Command Execution

Symantec Endpoint Protection Manager Authentication Bypass and Code Execution

VideoCharge Studio Buffer Overflow (SEH)

FTP Commander 8.02 - SEH Overwrite

Cisco Unified Communications Manager - Multiple Vulnerabilities

vBulletin < 4.2.2 - Memcache Remote Code Execution

Nuts CMS Remote PHP Code Injection / Execution

Magento CE < 1.9.0.1 Post Auth RCE

PHPfileNavigator 2.3.3 - XSS Vulnerabilities

PHPfileNavigator 2.3.3 - CSRF Vulnerability

Sagemcom F@ST 3864 V2 - Get Admin Password

17.8.2015

Bugtraq

Poor security in SOHO routers, again. Changing configuration parameters with a click. 2015-08-17
DonVallejo . (j v vallejo gmail com)

Re: Multiple vulnerabilites in vendor IKE implementations, including Cisco, 2015-08-16
arash yazdanfare gmail com

Re: NEW : VMSA-2015-0003 VMware product updates address critical information disclosure issue in JRE 2015-08-16
13669185678 139 com

Malware

PWS:Win32/Rugond.A
TrojanDropper:Win32/Notdinoti.B
TrojanDropper:Win32/Strakupa.A
TrojanSpy:Win32/Gucotut.A
TrojanDownloader:Win32/Lentrigy.A
TrojanDownloader:MSIL/Runtk.A
Backdoor:Win32/Venik.K

Phishing

FindMeAndF#ckMe	17th August 2015
I WANT TO BE IN YOUR BED
PayPal	17th August 2015
ACCOUNT VERIFICATION REQUIRED
ROCKSTAR SERVER	15th August 2015
GENUINE MING TOOLS CONTACT ROCKSTAR

Vulnerebility

SANS News

Are you a "Hunter"?

Tool Tip: Kansa Stafford released, PowerShell for DFIR

Threatpost

Apple Patches Critical OS X DYLD Flaw in Monster Update - See more at: https://threatpost.com/#sthash.1zChwKF7.dpuf

AT&T Facilitated NSA Surveillance Efforts, Reports

Using BitTorrent Vulnerabilities to Launch Distributed Reflective DoS Attacks

Exploit

Microsoft Windows HTA (HTML Application) - Remote Code Execution (MS14-064)

Sagemcom F@ST 3864 V2 - Get Admin Password

MASM321 11 Quick Editor (.qeditor) 4.0g- .qse SEH Based Buffer Overflow (ASLR & SAFESEH bypass)

XMPlay 3.8.1.12 - .pls Local Crash PoC

16.8.2015

Bugtraq

Malware

Win32 / PSW.Furitron.A

Win32 / PSW.Fantast.22

Phishing

ROCKSTAR SERVER	15th August 2015
GENUINE MING TOOLS CONTACT ROCKSTAR
PayPal	15th August 2015
Your Account has limitation
Apple Inc.	15th August 2015
PLEASE UPDATE YOUR APPLE ACCOUNT INFORMATION !

Vulnerebility

SANS News

Threatpost

Apple Patches Critical OS X DYLD Flaw in Monster Update

Exploit

15.8.2015

Bugtraq

Malware

Trojan.Sofacy.C

Trojan.Cryptolocker.X

Phishing

Apple Inc.	15th August 2015
PLEASE UPDATE YOUR APPLE ACCOUNT INFORMATION !
webmaster	14th August 2015
EMail from Easy Biz (EARN $500 to $1,000 In Just 1-3 Hours a Day!)
Ashley Johnston	14th August 2015
1 Waiting Super QuickCheat Alert

Vulnerebility

SANS News

Threatpost

OwnStar Attack Now Aimed at BMW, Chrysler, Mercedes Cars

Apple Patches Critical OS X DYLD Flaw in Monster Update

Exploit

Gkplugins Picasaweb - Download File

TOTOLINK Routers - Backdoor and RCE Exploit PoC

Joomla com_memorix component - SQL Injection vulnerability

Microsoft HTML Help Compiler 4.74.8702.0 - SEH Based Overflow

Firefox < 39.03 - pdf.js Same Origin Policy Exploit

Ability FTP Server 2.1.4 - afsmain.exe USER Command Remote DoS

Ability FTP Server 2.1.4 - Admin Panel AUTHCODE Command Remote DoS

Ubuntu 14.04 NetKit FTP Client - Crash/DoS PoC

14.8.2015

Bugtraq

Nuance PowerPDF Advanced Metadata Information Disclosure Vulnerability (low|local) 2015-08-13
Christopher Hudel (christopher hudel com)

APPLE-SA-2015-08-13-4 OS X Server v4.1.5 2015-08-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006 2015-08-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-08-13-3 iOS 8.4.1 2015-08-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-08-13-1 Safari 8.0.8, Safari 7.1.8, and Safari 6.2.8 2015-08-13
Apple Product Security (product-security-noreply lists apple com)

[security bulletin] HPSBGN03393 rev.1 - HP Operations Manager i, Remote Code Execution 2015-08-12
security-alert hp com

Malware

Exploit/Stagefright.F

Exploit/Stagefright.G

Exploit/Stagefright.H

Exploit/Stagefright.J

Phishing

Amazon	13th August 2015
AMAZON
WebTeam	13th August 2015
INFO
JAMES F. ENTWISTLE	13th August 2015
JAMES F. ENTWISTLE U.S AMBASSADOR TO NIGERIA
PayPal	13th August 2015
[PayPal Support] Your Account Has Been Limited ! Please Confirm Your Account

Vulnerebility

ISC BIND CVE-2015-5477 Remote Denial of Service Vulnerability
2015-08-14
http://www.securityfocus.com/bid/76092

WordPress Prior to 4.2.4 Multiple Security Vulnerabilities
2015-08-14
http://www.securityfocus.com/bid/76160

WordPress Prior to 4.2.3 Multiple Security Vulnerabilities
2015-08-14
http://www.securityfocus.com/bid/76011

Mozilla Firefox CVE-2015-4492 Use After Free Memory Corruption Vulnerability
2015-08-14
http://www.securityfocus.com/bid/76297

Mozilla Firefox Out of Bounds Multiple Memory Corruption Vulnerabilities
2015-08-14
http://www.securityfocus.com/bid/76294

SANS News

Adwind: another payload for botnet-based malspam

More patches! This time from Apple to Safari, OS X and OS X server

Microsoft patch tuesday problem with Symantec Cloud Endpoint protection?

Threatpost

Stagefright Patch Incomplete Leaving Android Devices Still Exposed

Salesforce Patches XSS on a Subdomain

Zero Day in Android’s Google Admin App Can Bypass Sandbox

Exploit

13.8.2015

Bugtraq

phpipam-1.1.010 XSS Vulnerability 2015-08-12
apparitionsec gmail com

PHPfileNavigator v2.3.3 CSRF Add Arbitrary Users 2015-08-12
apparitionsec gmail com

phpipam-1.1.010 XSS Vulnerability 2015-08-12
apparitionsec gmail com

Malware

BrowserModifier:Win32/SupTab

Linux.Pinscan

Exploit/CVE-2015-1538

Exploit/CVE-2015-1539

Exploit/CVE-2015-3827

Exploit/CVE-2015-3826

Exploit/CVE-2015-3824

Exploit/CVE-2015-3829

Phishing

iLOTTO INTERNET LOTTERY	13th August 2015
GET BACK FOR CLAIMS/TICKETS NO. ILOTTO/2015/ATM
iLOTTO INTERNET LOTTERY	13th August 2015
WON PRIZE TICKETS NO. ILOTTO/2015/ATM
iLOTTO INTERNET LOTTERY	12th August 2015
GET BACK FOR CLAIMS/TICKETS NO. ILOTTO/2015/ATM
Alexandra Smith	12th August 2015
ONENIGHTSEX NOTICE IS PENDING

Vulnerebility

WordPress Prior to 4.2.4 Multiple Security Vulnerabilities
2015-08-13
http://www.securityfocus.com/bid/76160

WordPress Prior to 4.2.3 Multiple Security Vulnerabilities
2015-08-13
http://www.securityfocus.com/bid/76011

Mozilla Firefox CVE-2015-4492 Use After Free Memory Corruption Vulnerability
2015-08-13
http://www.securityfocus.com/bid/76297

Mozilla Firefox Out of Bounds Multiple Memory Corruption Vulnerabilities
2015-08-13
http://www.securityfocus.com/bid/76294

SANS News

Yes Virginia, Stored XSS's Do Exist!

Threatpost

Facebook Awards $100,000 for New Class of Vulnerabilities and Detection Tool

Exploit

Internet Explorer CTreeNode::GetCascadedLang Use-After-Free Vulnerability (MS15-079)

Windows 8.1 DCOM DCE/RPC Local NTLM Reflection Privilege Escalation (MS15-076)

Linux x86 - /bin/sh ROL/ROR Encoded Shellcode

12.8.2015

Bugtraq

[slackware-security] mozilla-firefox (SSA:2015-219-01) 2015-08-08
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3330-1] activemq security update 2015-08-07
Moritz Muehlenhoff (jmm debian org)

QNAP crypto keys logged on unencrypted disk partition in world accessible files 2015-08-07
Andreas Steinmetz (ast domdv de)

[slackware-security] mozilla-nss (SSA:2015-219-02) 2015-08-08
Slackware Security Team (security slackware com)

Device Inspector v1.5 iOS - Command Inject Vulnerabilities 2015-08-07
Vulnerability Lab (research vulnerability-lab com)

Ferrari - PHP CGI Argument Injection (RCE) Vulnerability 2015-08-07
Vulnerability Lab (research vulnerability-lab com)

Malware

VBA / TrojanDownloader.Agent.ZH

VBA / TrojanDownloader.Agent.ZC

VBA / TrojanDownloader.Agent.YX

VBA / TrojanDownloader.Agent.YW

Phishing

noreply@intipaypal	12th August 2015
UPDATE REQUIRED !!
PayPal	12th August 2015
IMPORTANT MESSAGE FROM PAYPAL TEAM .
Mail Delivery Service	11th August 2015
DELIVERY STATUS NOTIFICATION
Wells Fargo	11th August 2015
NOTICE : SIGN-IN TO ONLINE BANKING LOCKED
MS linda	11th August 2015
BEAT EGG MACHINE-æ¬§æ´²-5
linda lin	11th August 2015
BEAT EGG MACHINE-æ¬§æ´²-4
USAA	11th August 2015
YOUR USAA ONLINE CONFIRMATION ALERT

Vulnerebility

SANS News

Windows Service Accounts - Why They're Evil and Why Pentesters Love them!

More patch tuesday: adobe released security update for adobe flash player

August 2015 Microsoft Patch Tuesday

Threatpost

Huge Flash Update Patches More Than 30 Vulnerabilities

Sen. Warren Worried About Banks’ New Encrypted Messaging Platform

Patched Android ‘Serialization’ Vulnerability Affects 55 Percent of Devices

Oracle CSO: You ‘Must Not Reverse Engineer Our Code’

Hack-Fueled ‘Unprecedented’ Insider Trading Ring Nets $100M

Microsoft Patches Critical Vulnerabilities in New Edge Browser

Exploit

Internet Explorer CTreeNode::GetCascadedLang Use-After-Free Vulnerability (MS15-079)

11.8.2015

Bugtraq

[slackware-security] mozilla-firefox (SSA:2015-219-01) 2015-08-08
Slackware Security Team (security slackware com)

[SECURITY] [DSA 3330-1] activemq security update 2015-08-07
Moritz Muehlenhoff (jmm debian org)

QNAP crypto keys logged on unencrypted disk partition in world accessible files 2015-08-07
Andreas Steinmetz (ast domdv de)

[slackware-security] mozilla-nss (SSA:2015-219-02) 2015-08-08
Slackware Security Team (security slackware com)

Device Inspector v1.5 iOS - Command Inject Vulnerabilities 2015-08-07
Vulnerability Lab (research vulnerability-lab com)

Ferrari - PHP CGI Argument Injection (RCE) Vulnerability 2015-08-07
Vulnerability Lab (research vulnerability-lab com)

Thomson Reuters FATCA - Arbitrary File Upload 2015-08-07
jakub palaczynski ingservicespolska pl

[SECURITY] [DSA 3329-1] linux security update 2015-08-07
Salvatore Bonaccorso (carnil debian org)

Malware

Trojan:Win32/Hucnak.D!plock
Trojan:Win32/Hucnak.C!plock
Trojan:Win32/Hucnak.B!plock
Trojan:Win32/Hucnak.A!plock

Trojan.Tapaoux.C

Phishing

United Arab	11th August 2015
You Have (1) New Message
USAA.Web.Services	11th August 2015
Your Account Computer/Device Preference System Update
Barclays Online	10th August 2015
Important Customer Message
PayPal Inc	10th August 2015
DEAR PAYPAL USER , UPDATE OF YOUR ACCOUNT INFORMATIONS
PayPal Inc	10th August 2015
Your Account will be Limited âœ”
Account Notification	9th August 2015
DEAR MEMBER YOUR ACCOUNT HAS BEEN LIMITED âœ”

Vulnerebility

SANS News

.COM.COM Used For Malicious Typo Squatting

Threatpost

Exploit

10.8.2015

Bugtraq

Malware

TrojanDownloader:Win32/Zeagle.G
TrojanDownloader:Win32/Upatre.BW

Trojan.Aniralia

Phishing

Account Notification	9th August 2015
DEAR MEMBER YOUR ACCOUNT HAS BEEN LIMITED âœ”
@aol.com	8th August 2015
EMAIL UPDATE
Apple Inc	8th August 2015
ACCOUNT TEMPORARILY SUSPENDED - YOUR APPLE ID REQUIRES VERIFICATION
NatWest	8th August 2015
ACCOUNT LOCKED

Vulnerebility

SANS News

What Was Old is New Again: Honeypots!

Threatpost

Mozilla Patches Bug Used in Active Attacks

Privacy Badger 1.0 Released With Support For EFF Do Not Track Policy

Darkhotel APT Latest to Use Hacking Team Zero Day

Exploit

WordPress Video Gallery 2.7 SQL Injection

Havij Pro - Crash POC

WordPress WPTF Image Gallery 1.03 - Aribtrary File Download

WordPress Recent Backups Plugin 0.7 - Arbitrary File Download

WordPress Simple Image Manipulator Plugin 1.0 - Arbitrary File Download

WordPress Video Gallery 2.7 SQL Injection

WDS CMS - SQL Injection

WordPress Candidate Application Form Plugin 1.0 - Arbitrary File Download

Havij Pro - Crash POC ,Linux x86 Egg Hunter Shellcode (19 bytes)

8.8.2015

Bugtraq

Thomson Reuters FATCA - Arbitrary File Upload 2015-08-07
jakub palaczynski ingservicespolska pl

[SECURITY] [DSA 3329-1] linux security update 2015-08-07
Salvatore Bonaccorso (carnil debian org)

Re: [FD] Mozilla extensions: a security nightmare 2015-08-06
Stefan Kanthak (stefan kanthak nexgo de) (2 replies)

Re: [FD] Mozilla extensions: a security nightmare 2015-08-07
Reindl Harald (h reindl thelounge net)

RE: [FD] Mozilla extensions: a security nightmare 2015-08-07
Steve Friedl (steve unixwiz net) (1 replies)

RE: [FD] Mozilla extensions: a security nightmare 2015-08-07
Frank Waarsenburg (fwaarsenburg ram-it nl) (1 replies)

Re: [FD] Mozilla extensions: a security nightmare 2015-08-07
Jakob Holderbaum (hi jakob io) (1 replies)

Re: [FD] Mozilla extensions: a security nightmare 2015-08-07
Teddy A PURWADI (teddyap access net id)

Malware

Trojan.Cozer.B

Java/AlienSpy.A

Win32/FakeTC

VBA/TrojanDownloader.Agent.YP

VBA/TrojanDownloader.Agent.YL

VBA/TrojanDownloader.Agent.YK

VBA/TrojanDownloader.Agent.YJ

VBA/TrojanDownloader.Agent.YI

Win32/Bhottle.B

Phishing

NatWest	7th August 2015
ACCOUNT LOCKED
MBNA Limited	6th August 2015
YOUR ACCOUNT HAVE BEEN ACCESSED FROM AN UNAUTHORIZED COMPUTER
Account Support	6th August 2015
WE'VE IIMITED ACCESS TO YOUR PAYPAI ACCOUNT
TD Bank via Me	6th August 2015
YOUR ACCOUNT IS TEMPORARILY LOCKED

Vulnerebility

SANS News

Critical Firefox Update Today

Threatpost

Manipulating WSUS to Own Enterprises

Exploit

PCMan FTP Server 2.0.7 - PUT Command Buffer Overflow

Froxlor Server Management Panel 0.9.33.1 - MySQL Login Information Disclosure

PHP News Script 4.0.0 - SQL Injection

Microweber 1.0.3 - Stored XSS And CSRF Add Admin Exploit

Microweber 1.0.3 File Upload Filter Bypass Remote PHP Code Execution

WordPress Job Manager Plugin 0.7.22 - Persistent XSS

Heroes of Might and Magic III .h3m Map file Buffer Overflow

Linux x86 Memory Sinkhole Privilege Escalation PoC

Windows NDProxy Privilege Escalation XP SP3 x86 and 2003 SP2 x86 (MS14-002)

Dell Netvault Backup 10.0.1.24 - Denial of Service

7.8.2015

Bugtraq

Re: [FD] Mozilla extensions: a security nightmare 2015-08-06
Stefan Kanthak (stefan kanthak nexgo de) (2 replies)

Re: [FD] Mozilla extensions: a security nightmare 2015-08-07
Reindl Harald (h reindl thelounge net)

RE: [FD] Mozilla extensions: a security nightmare 2015-08-07
Steve Friedl (steve unixwiz net) (1 replies)

RE: [FD] Mozilla extensions: a security nightmare 2015-08-07
Frank Waarsenburg (fwaarsenburg ram-it nl) (1 replies)

Re: [FD] Mozilla extensions: a security nightmare 2015-08-07
Jakob Holderbaum (hi jakob io)

Re: [FD] Mozilla extensions: a security nightmare 2015-08-06
Stefan Kanthak (stefan kanthak nexgo de)

Malware

TrojanDownloader:Win32/Tembatch.A
TrojanDownloader:MSIL/Beldex.A
TrojanDownloader:MSIL/Golomak.A
TrojanDropper:Win32/Dexel.A
TrojanSpy:MSIL/Golroted.D

Trojan.Patchbrowse

Phishing

MBNA Limited	6th August 2015
YOUR ACCOUNT HAVE BEEN ACCESSED FROM AN UNAUTHORIZED COMPUTER
Account Support	6th August 2015
WE'VE IIMITED ACCESS TO YOUR PAYPAI ACCOUNT

Vulnerebility

SANS News

Sigcheck and virustotal-search

Threatpost

Feasible ‘Going Dark’ Crypto Solution Nowhere to be Found

Gone in Less Than a Second

Updated DGA Changer Malware Generates Fake Domain Stream

BLEKey Device Breaks RFID Physical Access Controls

‘Prohibition Era’ Of Security Research May Be Ahead

Exploit

6.8.2015

Bugtraq

[security bulletin] HPSBUX03388 SSRT102180 rev.1 - HP-UX running OpenSSL, Remote Disclosure of Information 2015-08-05
security-alert hp com

Re: [FD] Mozilla extensions: a security nightmare 2015-08-05
Stefan Kanthak (stefan kanthak nexgo de) (1 replies)

Re: [FD] Mozilla extensions: a security nightmare 2015-08-05
Ansgar Wiechers (bugtraq planetcobalt net)

SEC Consult SA-20150805-0 :: Websense Content Gateway Stack Buffer Overflow in handle_debug_network 2015-08-05
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 3328-2] wordpress regression update 2015-08-04
Thijs Kinkhorst (thijs debian org)

Malware

TrojanDropper:Win32/Dexel.A
TrojanSpy:MSIL/Golroted.D
TrojanDownloader:MSIL/Bladabindi.I
Adware:Win32/Peapoon
TrojanDownloader:Win32/Paxer.A
TrojanDownloader:Win32/Upatre.BS
TrojanDownloader:Win32/Syten.A
Worm:Win32/Gamarue.AU

OSX.Sudoprint

Infostealer.Atimpo

Phishing

TD Bank via Me	6th August 2015
YOUR ACCOUNT IS TEMPORARILY LOCKED
@aol.com	5th August 2015
EMAIL UPDATE

Vulnerebility

SANS News

Nuclear EK traffic patterns in August 2015

Threatpost

Feasible ‘Going Dark’ Crypto Solution Nowhere to be Found

Google Plans Monthly Security Updates for Nexus Phones

APT Group Gets Selective About Data it Steals

Government Asks for Security Community’s Help on Technical Issues

Granick: Dream of Internet Freedom ‘Dying’

‘Software Liability Is Inevitable’

Exploit

Linux Privilege Escalation Due to Nested NMIs Interrupting espfix64

ISC BIND9 TKEY Remote DoS PoC

5.8.2015

Bugtraq

[SECURITY] [DSA 3328-2] wordpress regression update 2015-08-04
Thijs Kinkhorst (thijs debian org)

Mozilla extensions: a security nightmare 2015-08-04
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3328-1] wordpress security update 2015-08-04
Thijs Kinkhorst (thijs debian org)

[SECURITY] [DSA 3327-1] squid3 security update 2015-08-03
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3326-1] ghostscript security update 2015-08-02
Salvatore Bonaccorso (carnil debian org)

Malware

Adware:Win32/Peapoon
TrojanDownloader:Win32/Paxer.A
TrojanDownloader:Win32/Upatre.BS
TrojanDownloader:Win32/Syten.A
Worm:Win32/Gamarue.AU
TrojanDownloader:Win32/Mavradoi.C
TrojanDropper:Win32/Banload.BAX
TrojanSpy:Win32/Banker.VCW
TrojanDownloader:Win32/Banload.BCV
TrojanDownloader:Win32/Banload.ZEQ

Phishing

Pamela Hicks	4th August 2015
THE MOST PLEASURABLE BLOWJOB EVER
Chase	4th August 2015
Notice : Sign-in to Online Banking Locked
å…¨å›½æ¥¼å‡¤å°?å§å…¼èŒè‰¯å®¶	4th August 2015
å…¨å›½å…¼èŒå°?å§å¦å¦¹æ¥¼å‡¤
Natwest	4th August 2015
SERVICE ANNOUNCEMENT
Smtpmercantile.in	4th August 2015
WE SELL EARTHLINK RDP NO SMTP NEEDED
Melanie Clark	4th August 2015
GET OVER HERE AND F%CK ME
Apple	3rd August 2015
ACCOUNT STATUS HAS BEEN CHANGED , INVOICE NUMBER 655675
USAA	3rd August 2015
YOUR USAA ONLINE CONFIRMATION ALERT

Vulnerebility

SANS News

Nuclear EK traffic patterns in August 2015

Whatever Happened to tmUnblock.cgi ("Moon Worm")

Threatpost

Researchers Uncover ‘Terracotta’ Chinese VPN Service Used by APT Crews for Cover

Updated Rig Exploit Kit Closing in on 1 Million Victims

Exploit

4.8.2015

Bugtraq

[SECURITY] [DSA 3326-1] ghostscript security update 2015-08-02
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3325-1] apache2 security update 2015-08-01
Stefan Fritsch (sf debian org)

[SECURITY] [DSA 3324-1] icedove security update 2015-08-01
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3323-1] icu security update 2015-08-01
Laszlo Boszormenyi (gcs debian org)

Multiple XSS vulnerabilities in FortiSandbox WebUI 2015-08-01
hyp3rlinx lycos com

Malware

Exp.CVE-2015-0339

Exp.CVE-2015-0338

TrojanDropper:Win32/Banload.BAX
TrojanSpy:Win32/Banker.VCW
TrojanDownloader:Win32/Banload.BCV
TrojanDownloader:Win32/Banload.ZEQ

Phishing

Melanie Clark	4th August 2015
GET OVER HERE AND F%CK ME
Apple	3rd August 2015
ACCOUNT STATUS HAS BEEN CHANGED , INVOICE NUMBER 655675
USAA	3rd August 2015
YOUR USAA ONLINE CONFIRMATION ALERT
Discover	2nd August 2015
Disney Cruise Line Employment Offer 2015

Vulnerebility

SANS News

Your SSH Server On Port 8080 Is No Longer "Hidden" Or "Safe"

Whatever Happened to tmUnblock.cgi ("Moon Worm")

Threatpost

Windows 10 Upgrade Spam Carries CTB-Locker Ransomware

EFF, AdBlock and Others Launch New Do Not Track Standard

Thunderstrike 2 OS X Firmware Attack Self-Replicates to Peripherals

DHS Raises Privacy Concerns With Senate Cyber Threat Sharing Bill

Exploit

3.8.2015

Bugtraq

phpFileManager 0.9.8 Remote Command Execution 2015-07-31
hyp3rlinx lycos com

HP ArcSight Logger provides incorrect/invalid/incomplete results for queries with boolean operators 2015-07-31
roberto logsat com

[SECURITY] [DSA 3321-1] xmltooling security update 2015-07-30
Alessandro Ghedini (ghedo debian org)

viagra generic singapore 2015-07-30
info fast-isotretinoin com

Malware

Worm:Win32/NeksMiner.A
TrojanDropper:Win32/Bunitu.G
TrojanSpy:MSIL/Irstil.A
Worm:Win32/Xtrat.D
Worm:Win32/Xtrat.C

Phishing

USAA	3rd August 2015
YOUR USAA ONLINE CONFIRMATION ALERT
Discover	2nd August 2015
Disney Cruise Line Employment Offer 2015
Microsoft	2nd August 2015
Security: Login Notification
Nancy Morales	2nd August 2015
One New SexCall From a Stranger
Paypal Support	2nd August 2015
ACCESS TO YOUR PAYPAL ACCOUNT IS LIMITED
Service Account	2nd August 2015
UPDATE REQUIRED !!
SUPPORT	2nd August 2015
Your account has been Iimited untiI we hear from you! âœ”
Ashok Tools	2nd August 2015
FRESH TOOLS / ONLINE LIVE SUPPORT, VISIT US: HTTP://ASHOKTOOLS.NET
Chase Online	1st August 2015
Kindly Update Your Chase Account.

Vulnerebility

SANS News

Your Security Policy Is So Lame

Your SSH Server On Port 8080 Is No Longer "Hidden" Or "Safe"

Threatpost

Exploit

1.8.2015

Bugtraq

phpFileManager 0.9.8 Remote Command Execution 2015-07-31
hyp3rlinx lycos com

HP ArcSight Logger provides incorrect/invalid/incomplete results for queries with boolean operators 2015-07-31
roberto logsat com

[SECURITY] [DSA 3321-1] xmltooling security update 2015-07-30
Alessandro Ghedini (ghedo debian org)

Malware

Phishing

PayPal	31st July 2015
Early Notice
iTunes	31st July 2015
ITUNES ACCOUNT HAS BEEN FROZEN ID5548A4E824576650D6D4

Vulnerebility

SANS News

Tech tip follow-up: Using the data Invoked with R's system command

Threatpost

Xen Patches VM Escape Flaw

FBI Warns of Increase in DDoS Extortion Scams

Unusual Re-Do of US Wassenaar Rules Applauded

Exploit

KMPlayer 3.9.x - .srt Crash PoC

T-Mobile Internet Manager - Contact Name Crash PoC

31.7.2015

Bugtraq

viagra generic singapore 2015-07-30
info fast-isotretinoin com

[SECURITY] [DSA 3320-1] openafs security update 2015-07-30
Sebastien Delafond (seb debian org)

Cisco Security Advisory: Cisco ASR 1000 Series Aggregation Services Routers Fragmented Packet Denial of Service Vulnerability 2015-07-30
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Dell Netvault Backup Remote Denial of Service 2015-07-30
epoide gmail com

FreeBSD Security Advisory FreeBSD-SA-15:16.openssh [REVISED] 2015-07-30
FreeBSD Security Advisories (security-advisories freebsd org)

[security bulletin] HPSBGN03366 rev.1 - HP Business Process Insight with RC4 Stream Cipher, Remote Disclosure of Information 2015-07-29
security-alert hp com

Malware

Exp.CVE-2015-2590

Win32/Bedep.D

Win32/TrojanDownloader.Nymaim.AY

Win32/Mooze

Win32/TrojanDownloader.Small.CBA

Win32/Spy.Ranbyus.M

Win32/Filecoder.EQ

VBA/TrojanDownloader.Agent.YA

VBA/TrojanDownloader.Agent.XZ

Java/AlienSpy.A

Win32/FakeTC

Phishing

Microsoft	31st July 2015
Dear Sir/Madam,
Apple	30th July 2015
Validating your Apple ID.
Verified by	29th July 2015
YOUR VERIFIED BY VISA PASSWORD HAS BEEN DEACTIVATED

Vulnerebility

Novius OS 'tab' parameter Local File Include Vulnerability
2015-07-29
http://www.securityfocus.com/bid/75533

Oracle Java SE CVE-2015-0488 Remote Security Vulnerability
2015-07-28
http://www.securityfocus.com/bid/74111

Debian OpenJDK CVE-2014-8873 Remote Code Execution Vulnerability
2015-07-28
http://www.securityfocus.com/bid/76019

Oracle Java SE CVE-2015-4732 Remote Security Vulnerability
2015-07-28
http://www.securityfocus.com/bid/75823

Oracle Java SE CVE-2015-0469 Remote Security Vulnerability
2015-07-28
http://www.securityfocus.com/bid/74072

Oracle Java SE CVE-2015-2601 Remote Security Vulnerability
2015-07-28
http://www.securityfocus.com/bid/75867

Oracle Java SE CVE-2015-4749 Remote Security Vulnerability
2015-07-28
http://www.securityfocus.com/bid/75890

SANS News

Tech tip: Invoke a system command in R

Threatpost

Cisco Fixes DoS Vulnerability in ASR 1000 Routers

Writing Advanced OS X Malware an ‘Elegant’ Solution to Improving Detection

Moonpig Warns Customers of ‘Security Issue’

Exploit

30.7.2015

Bugtraq

[security bulletin] HPSBGN03366 rev.1 - HP Business Process Insight with RC4 Stream Cipher, Remote Disclosure of Information 2015-07-29
security-alert hp com

Cross-Site Scripting (XSS) in qTranslate WordPress Plugin 2015-07-29
High-Tech Bridge Security Research (advisory htbridge ch)

[security bulletin] HPSBGN03367 rev.1 - HP TransactionVision with RC4 Stream Cipher, Remote Disclosure of Information 2015-07-29
security-alert hp com

phpFileManager 0.9.8 CSRF Backdoor Shell Vulnerability 2015-07-29
apparitionsec gmail com

[slackware-security] bind (SSA:2015-209-01) 2015-07-28
Slackware Security Team (security slackware com)

FreeBSD Security Advisory FreeBSD-SA-15:17.bind 2015-07-28
FreeBSD Security Advisories (security-advisories freebsd org)

FreeBSD Security Advisory FreeBSD-SA-15:16.openssh 2015-07-28
FreeBSD Security Advisories (security-advisories freebsd org)

FreeBSD Security Advisory FreeBSD-SA-15:15.tcp 2015-07-28
FreeBSD Security Advisories (security-advisories freebsd org)

FreeBSD Security Advisory FreeBSD-SA-15:14.bsdpatch 2015-07-28
FreeBSD Security Advisories (security-advisories freebsd org)

Malware

TrojanSpy:MSIL/Irstil.A
Worm:Win32/Xtrat.D
Worm:Win32/Xtrat.C
TrojanClicker:Win32/Frosparf.G
TrojanClicker:Win32/Frosparf.F
TrojanDropper:Win32/Zbot.D

Phishing

Verified by	29th July 2015
YOUR VERIFIED BY VISA PASSWORD HAS BEEN DEACTIVATED
NatWest CreditCard	29th July 2015
YOU HAVE ONE SECURITY MESSAGE FROM NATWEST CREDITCARD

Vulnerebility

SANS News

Threatpost

Click-Malware Podvod Šíření přes JavaScript Přílohy

Yahoo touts Úspěch Bug Bounty Programu

Nový Chrome rozšíření pomáhá v boji klávesnice Biometrické profilování

Výzkumníci Manipulovat pušky Precision Cílení System

Exploit

phpFileManager 0.9.8 - CSRF Vulnerability

Tendoo CMS 1.3 - XSS Vulnerabilities

Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution

29.7.2015

Bugtraq

[SECURITY] [DSA 3319-1] bind9 security update 2015-07-28
Salvatore Bonaccorso (carnil debian org)

SEC Consult SA-20150728-0 :: McAfee Application Control Multiple Vulnerabilities 2015-07-28
SEC Consult Vulnerability Lab (research sec-consult com)

Multiple unresolved vulnerabilities in Basware Banking/Maksuliikenne 2015-07-28
Samuel Lavitt - CVE-2015-0942 (CVE-2015-0942 precipice fi)

Malware

TrojanSpy:MSIL/Irstil.A
Worm:Win32/Xtrat.D
Worm:Win32/Xtrat.C
TrojanClicker:Win32/Frosparf.G
TrojanClicker:Win32/Frosparf.F
TrojanDropper:Win32/Zbot.D

Phishing

Lloyds Bank	29th July 2015
Your Llodys Online Account Has Been Blocked
Capital One	28th July 2015
RE: Important Alert
PayPal	28th July 2015
service@paypal.com

Vulnerebility

SANS News

Malicious spam continues to serve zip archives of javascript files

Guest Diary: Xavier Mertens - Integrating VirusTotal within ELK

Android Stagefright multimedia viewer prone to remote exploitation

Threatpost

White House Says No Thanks to Snowden Pardon Petition

Exploit

phpFileManager 0.9.8 - Remote Command Execution Vulnerability

28.7.2015

Bugtraq

Apple iTunes & AppStore - Filter Bypass & Persistent Invoice Vulnerability 2015-07-27
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3318-1] expat security update 2015-07-26
Laszlo Boszormenyi (gcs debian org)

[SECURITY] [DSA 3317-1] lxc security update 2015-07-25
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3316-1] openjdk-7 security update 2015-07-25
Moritz Muehlenhoff (jmm debian org)

Malware

Trojan.Rikamanu

Backdoor.Spedear

W97M.APMP

TrojanDropper:Win32/Zbot.D
Trojan:Win32/Blakamba.gen!A

Phishing

Chase	27th July 2015
PayPal Safety Measures Against Online Fraud!
Chase	27th July 2015
ALERT MESSAGE FROM CHASE ONLINE(SM)

Vulnerebility

SANS News

Angler's best friends

Guest Diary: Xavier Mertens - Integrating VirusTotal within ELK

Threatpost

Valve Patches Password Reset Vulnerability in Steam - See more at: https://threatpost.com/#sthash.hA8elqhb.dpuf

Census Bureau Says Breach Didn’t Compromise Sensitive Data

PHP File Manager Riddled With Vulnerabilities, Including Backdoor

Pair of Bugs Open Honeywell Home Controllers Up to Easy Hacks

Valve Patches Password Reset Vulnerability in Steam

Exploit

Hawkeye-G v3.0.1.4912 Persistent XSS & Information Leakage

WordPress Unite Gallery Lite Plugin 1.4.6 - Multiple Vulnerabilities

WordPress Count Per Day Plugin 3.4 - SQL Injection

Xceedium Xsuite - Multiple Vulnerabilities

Foxit Reader - PNG Conversion Parsing tEXt Chunk Arbitrary Code Execution

Libuser Library - Multiple Vulnerabilities

27.7.2015

Bugtraq

Malware

Worm:Win32/Gamarue.AU

Backdoor:MSIL/Povbop.A
TrojanDownloader:Win32/Codumwis.A

Phishing

Tesco Bank Plc	26th July 2015
YOUR ACCOUNT SECURITY - JULY 2015
Chase	26th July 2015
Online Banking: Reacivate your account
Barclays	25th July 2015
IMPORTANT - ONLINE BANKING UPDATE
Ebay customer service	25th July 2015
PayPal Dispute : Your Paypal payment has been held
PayPal	24th July 2015
service@paypal.com
Service PayPal	24th July 2015
YOUR ACCOUNT HAS BEEN LIMITED WE HEAR FROM YOU

Vulnerebility

SANS News

Angler's best friends

Threatpost

Car Hacking Gets the Attention of Detroit and Washington

Google Helps Lead Effort Against Automated Traffic From Data Centers

Class Action Suit Against Neiman Marcus Over Data Breach Revived

Exploit

25.7.2015

Bugtraq

Hawkeye-G v3 CSRF Vulnerability ***[UPDATED CORRECTED] 2015-07-24
apparitionsec gmail com

[SECURITY] [DSA 3315-1] chromium-browser security update 2015-07-24
Michael Gilbert (mgilbert debian org)

Hawkeye-G v3.0.1.4912 CSRF Vulnerability CVE-2015-2878 2015-07-24
apparitionsec gmail com

[SECURITY] [DSA 3314-1] typo3-src end of life 2015-07-23
Moritz Muehlenhoff (jmm debian org)

Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser 2015-07-23
Qualys Security Advisory (qsa qualys com)

Malware

Phishing

Ebay customer service	25th July 2015
PayPal Dispute : Your Paypal payment has been held
PayPal	24th July 2015
service@paypal.com
Service PayPal	24th July 2015
YOUR ACCOUNT HAS BEEN LIMITED WE HEAR FROM YOU
PayPal	23rd July 2015
LOGIN TO UPDATE YOUR ACCOUNT INFORMATIONS.

Vulnerebility

SANS News

Patching in 2 days? - "tell him he's dreaming"

Threatpost

Stakeholders Argue Against Restrictive Wassennaar Proposal - See more at: https://threatpost.com/#sthash.0U326EDO.dpuf

Zúčastněné strany argumentovat proti omezujících Wassennaar Návrh

Fiat Chrysler připomíná, 1,4 milionů automobilů Po Software Bug je Odhalení

Exploit

Hawkeye-G v3.0.1.4912 CSRF Vulnerability

24.7.2015

Bugtraq

Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser 2015-07-23
Qualys Security Advisory (qsa qualys com)

ThaiWeb CMS 2015Q3 - SQL Injection Web Vulnerability 2015-07-23
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3313-1] linux security update 2015-07-23
Salvatore Bonaccorso (carnil debian org)

Cisco Security Advisory: Cisco IOS Software TFTP Server Denial of Service Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Unified MeetingPlace Unauthorized Password Change Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Application Policy Infrastructure Controller Access Control Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

ESA-2015-118: EMC Avamar Directory Traversal Vulnerability 2015-07-22
Security Alert (Security_Alert emc com)

Multiple (remote and local) Vulnerabilities in Xceedium Xsuite [MZ-15-02] 2015-07-22
modzero (security modzero ch)

Malware

TrojanSpy:MSIL/Tese.A
TrojanSpy:MSIL/Nitwil.A
TrojanDownloader:Win32/Banload.BCM
TrojanDownloader:Win32/Banload.BCL
TrojanDownloader:Win32/Banload.BCH
TrojanDownloader:Win32/Banload.BCA
TrojanSpy:Win32/Bholog.B
Backdoor:Win32/PcClient.CQ
Backdoor:Win32/Zegost.C
Backdoor:Win32/Dodiw.A

Phishing

PayPal	23rd July 2015
LOGIN TO UPDATE YOUR ACCOUNT INFORMATIONS.
PayPal	22nd July 2015
Your PayPal account has been temporarily closed!
PayPal	21st July 2015
Order confirmation:Thank you for your purchase. for security reason update or cancel your verification

Vulnerebility

SANS News

Searching Through the VirusTotal Database

Threatpost

Several Critical Flaws Patched in Drupal Module

WordPress Patches Critical XSS Vulnerability in All Builds

Four Zero Days Disclosed in Internet Explorer Mobile

Bartalex Variants Spotted Dropping Pony, Dyre Malware

Exploit

23.7.2015

Bugtraq

Cisco Security Advisory: Cisco IOS Software TFTP Server Denial of Service Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Unified MeetingPlace Unauthorized Password Change Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Application Policy Infrastructure Controller Access Control Vulnerability 2015-07-22
Cisco Systems Product Security Incident Response Team (psirt cisco com)

ESA-2015-118: EMC Avamar Directory Traversal Vulnerability 2015-07-22
Security Alert (Security_Alert emc com)

Multiple (remote and local) Vulnerabilities in Xceedium Xsuite [MZ-15-02] 2015-07-22
modzero (security modzero ch)

Multiple XSS Vulnerabilities in Paid Memberships Pro WordPress Plugin 2015-07-22
High-Tech Bridge Security Research (advisory htbridge ch)

SQL Injection in Count Per Day WordPress Plugin 2015-07-22
High-Tech Bridge Security Research (advisory htbridge ch)

[SECURITY] [DSA 3312-1] cacti security update 2015-07-22
Alessandro Ghedini (ghedo debian org)

NetCracker Resource Management 8.0 - SQL Injection Vulnerability 2015-07-22
jychia sec gmail com

NetCracker Resource Management 8.0 - XSS Vulnerability 2015-07-22
jychia sec gmail com

Open-Web-Analytics-1.5.7 Cryptographic, Password Disclosure & XSS Vulnerabilities 2015-07-22
apparitionsec gmail com

FreeBSD Security Advisory FreeBSD-SA-15:13.tcp 2015-07-22
FreeBSD Security Advisories (security-advisories freebsd org)

Malware

TrojanDownloader:Win32/Banload.BCM
TrojanDownloader:Win32/Banload.BCL
TrojanDownloader:Win32/Banload.BCH
TrojanDownloader:Win32/Banload.BCA
TrojanSpy:Win32/Bholog.B
Backdoor:Win32/PcClient.CQ
Backdoor:Win32/Zegost.C
Backdoor:Win32/Dodiw.A
TrojanSpy:MSIL/Grelog.A
PWS:Win32/Zbot!VM

Phishing

PayPal	23rd July 2015
LOGIN TO UPDATE YOUR ACCOUNT INFORMATIONS.
PayPal	22nd July 2015
Your PayPal account has been temporarily closed!

Vulnerebility

SANS News

Some more 0-days from ZDI

Threatpost

Exploit

OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation

Counter-Strike 1.6 'GameInfo' Query Reflection DoS PoC

22.7.2015

Bugtraq

WorldCIST'2016 - Brazil: Call for Workshops Proposals - Best Papers published by ISI/SCI Journals 2015-07-21
Maria Lemos (marialemos72 gmail com)

CVE-2015-5379: Axigen XSS vulnerability for html attachments 2015-07-21
Ioan Indreias (ioan indreias axigen com)

[security bulletin] HPSBMU03380 rev.1 - HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabilities 2015-07-20
security-alert hp com

Malware

Backdoor:Win32/Dodiw.A
TrojanSpy:MSIL/Grelog.A
PWS:Win32/Zbot!VM
TrojanDownloader:MSIL/Bassit.A
Backdoor:Win32/Venik.L
TrojanProxy:MSIL/Mictanort.A
TrojanSpy:Win32/Flancos.A
TrojanProxy:Win32/Mediana
TrojanDownloader:Win32/Mytonel.D
Backdoor:Win32/Chaapt.A

Phishing

PayPal	21st July 2015
Order confirmation:Thank you for your purchase. for security reason update or cancel your verification
H0rnyBuddyAlert	21st July 2015
NEW FIND F#CKFRIENDS ALERT
Natwest Bank	21st July 2015
Natwest Bank Alert: Unauthorised Access
Support-TeamÂ™	21st July 2015
[ WARNING ] CONFIRM YOU ACCOUNT PAYPAL OUR NEW SYSTEM ,
PayPal	21st July 2015
YOUR ACCOUNT PAYPAL IS LIMITED YOU HAVE TO SOLVE THE PROBLEM IN 24 HOURS !
Barclays Online	21st July 2015
Access to your Barclays accounts has been temporarily suspended.

Vulnerebility

SANS News

Bartalex malspam pushing Pony/Dyre

Searching Through the VirusTotal Database

Exploit

SysAid Help Desk 'rdslogs' Arbitrary File Upload

Internet Download Manager - OLE Automation Array Remote Code Execution

Joomla! Helpdesk Pro Plugin < 1.4.0 - Multiple Vulnerabilities

win32/xp[TR] sp3 MessageBox - 24Bytes

21.7.2015

Bugtraq

[security bulletin] HPSBMU03377 rev.1 - HP Release Control running RC4, Remote Disclosure of Information 2015-07-20
security-alert hp com

[security bulletin] HPSBUX03379 SSRT101976 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) 2015-07-20
security-alert hp com

[SECURITY] [DSA 3311-1] mariadb-10.0 security update 2015-07-20
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3310-1] freexl security update 2015-07-19
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3309-1] tidy security update 2015-07-18
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3308-1] mysql-5.5 security update 2015-07-18
Salvatore Bonaccorso (carnil debian org)

Malware

TrojanSpy:Win32/BrobanMos.A
TrojanDownloader:Win32/Banload.BBL
TrojanDownloader:Win32/Banload.BBN
TrojanDownloader:Win32/Banload.BBM
Adware:MSIL/Bawswerps
TrojanSpy:MSIL/Keylogger.BP
TrojanDownloader:Win32/Inexsmar.A
TrojanSpy:Win32/Aneatop.A
TrojanDropper:MSIL/Golbla.C
TrojanDownloader:Win32/Nefhop.A

Phishing

Vulnerebility

SANS News

Special Microsoft Bulletin Patching Remote Code Execution Flaw in OpenType Font Drivers

Exploit

Microsoft Word Local Machine Zone Remote Code Execution Vulnerability

TcpDump rpki_rtr_pdu_print Out-of-Bounds Denial of Service

20.7.2015

Bugtraq

AirDroid ID - Client Side JSONP Callback Vulnerability 2015-07-17
Vulnerability Lab (research vulnerability-lab com)

FoxyCart Bug Bounty #1 - Filter Bypass & Persistent Vulnerability 2015-07-17
Vulnerability Lab (research vulnerability-lab com)

UDID+ v2.5 iOS - Mail Command Inject Vulnerability 2015-07-17
Vulnerability Lab (research vulnerability-lab com)

Oracle E-Business Suite Servlet URL Redirection Vulnerability 2015-07-17
owais md khan gmail com

Novell GroupWise 2014 WebAccess vulnerable to XSS attacks 2015-07-17
adrian vollmer syss de

Malware

JS/Exploit.Agent.NJY

VBA/TrojanDownloader.Agent.WJ

VBA/TrojanDownloader.Agent.WR

Phishing

METROBANKDIRECT	19th July 2015
Account Blocked
Navy Federal	19th July 2015
Security Preferences

Vulnerebility

SANS News

Autoruns and VirusTotal

Sigcheck and VirusTotal

The Value a "Fresh Set Of Eyes" (FSOE)

Exploit

19.7.2015

Bugtraq

Oracle E-Business Suite Servlet URL Redirection Vulnerability 2015-07-17
owais md khan gmail com

Novell GroupWise 2014 WebAccess vulnerable to XSS attacks 2015-07-17
adrian vollmer syss de

SEC Consult SA-20150716-0 :: Permanent Cross-Site Scripting in Oracle Application Express 2015-07-16
SEC Consult Vulnerability Lab (research sec-consult com)

Elasticsearch CVE-2015-5531 2015-07-16
Kevin Kluge (kevin elastic co)

Elasticsearch CVE-2015-5377 2015-07-16
Kevin Kluge (kevin elastic co)

Malware

Phishing

Dropbox	18th July 2015
IMPORTANT DROPBOX DOCUMENT ENCLOSED
LateNightFriend	18th July 2015
HUNGRY FOR A F&CK FRIEND
USAA	17th July 2015
YOUR USAA ONLINE CONFIRMATION ALERT

Vulnerebility

SANS News

Exploit

18.7.2015

Bugtraq

Oracle E-Business Suite Servlet URL Redirection Vulnerability 2015-07-17
owais md khan gmail com

Novell GroupWise 2014 WebAccess vulnerable to XSS attacks 2015-07-17
adrian vollmer syss de

SEC Consult SA-20150716-0 :: Permanent Cross-Site Scripting in Oracle Application Express 2015-07-16
SEC Consult Vulnerability Lab (research sec-consult com)

Elasticsearch CVE-2015-5531 2015-07-16
Kevin Kluge (kevin elastic co)

Elasticsearch CVE-2015-5377 2015-07-16
Kevin Kluge (kevin elastic co)

ESA-2015-123: EMC Documentum WebTop Open Redirect Vulnerability 2015-07-16
Security Alert (Security_Alert emc com)

ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability 2015-07-16
Security Alert (Security_Alert emc com)

Malware

Phishing

USAA	17th July 2015
YOUR USAA ONLINE CONFIRMATION ALERT
Royal Bank Support	17th July 2015
ROYAL BANK \| PLEASE UPDATE YOUR RBC ACOUNT INFORMATION .

Vulnerebility

SANS News

Exploit

D-Link Cookie Command Execution

WordPress BuddyPress Activity Plus Plugin 1.5 - CSRF Vulnerability

17.7.2015

Bugtraq

SEC Consult SA-20150716-0 :: Permanent Cross-Site Scripting in Oracle Application Express 2015-07-16
SEC Consult Vulnerability Lab (research sec-consult com)

Elasticsearch CVE-2015-5531 2015-07-16
Kevin Kluge (kevin elastic co)

Elasticsearch CVE-2015-5377 2015-07-16
Kevin Kluge (kevin elastic co)

ESA-2015-123: EMC Documentum WebTop Open Redirect Vulnerability 2015-07-16
Security Alert (Security_Alert emc com)

ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability 2015-07-16
Security Alert (Security_Alert emc com)

Malware

TrojanDownloader:Win32/Upatre.BR
TrojanDropper:Win32/Plimrost.A
TrojanProxy:Win32/Poindampa.A
TrojanDropper:AutoIt/Jenxcus
Backdoor:Win32/Zegost.DV
TrojanDownloader:Win32/Zegost.C
Worm:Win32/Imafly.B
TrojanDownloader:MSIL/Prardrukat.A
Backdoor:Win32/Venik.I
Backdoor:Win32/Venik.J

Phishing

Metrobankdirect	16th July 2015
Account Blocked

Vulnerebility

SANS News

Exploit

15 TOTOLINK Router Models - Multiple RCE Vulnerabilities

4 TOTOLINK Router Models - CSRF and XSS Vulnerabilities

4 TOTOLINK Router Models - Backdoor Credentials

8 TOTOLINK Router Models - Backdoor and RCE

16.7.2015

Bugtraq

Backdoor credentials found in 4 TOTOLINK router models 2015-07-15
Pierre Kim (pierre kim sec gmail com)

4 TOTOLINK router models vulnerable to CSRF and XSS attacks 2015-07-15
Pierre Kim (pierre kim sec gmail com)

15 TOTOLINK router models vulnerable to multiple RCEs 2015-07-15
Pierre Kim (pierre kim sec gmail com)

Cisco Security Advisory: Cisco Videoscape Delivery System Denial of Service Vulnerability 2015-07-15
Cisco Systems Product Security Incident Response Team (psirt cisco com)

XSS, Code Execution, DOS, Password Leak, Weak Authentication in GetSimpleCMS 3.3.5 2015-07-15
Tim Coen (tc coen gmail com)

XSS vulnerability in OFBiz forms 2015-07-15
lilian_iatco yahoo com

Malware

TrojanDownloader:MSIL/Prardrukat.A
Backdoor:Win32/Venik.I
Backdoor:Win32/Venik.J

Phishing

Lloyds Bank	15th July 2015
UPDATE NOTICE
Storage Limit	15th July 2015
howiem@bigfoot.com Mailbox Exceeded Limit,Verify Your Password

Vulnerebility

SANS News

After Flash, what will exploit kits focus on next?

Exploit

Kaseya Virtual System Administrator - Multiple Vulnerabilities

Joomla DOCman Component - Multiple Vulnerabilities

15.7.2015

Bugtraq

Malware

TrojanDropper:MSIL/Golbla.B
VirTool:MSIL/Injector.EW
TrojanSpy:Win32/Nivdort.BO
TrojanSpy:Win32/Nivdort.BN
Trojan:Win32/Kovter.C!reg
TrojanSpy:Win32/Bradop.E
TrojanDownloader:Win32/Travalork.A
TrojanSpy:Win32/Bradop.G
Trojan:Win32/Apmit.A!plock
Trojan:Win32/Banload.E

Phishing

Storage Limit	15th July 2015
howiem@bigfoot.com Mailbox Exceeded Limit,Verify Your Password

Vulnerebility

SANS News

July 2015 Microsoft Patch Tuesday

Adobe Updates Flash Player, Shockwave and PDF Reader

PHP 5.x Security Updates

freq.py super powers?

VMware Security Bulletins

OPENSSL update fixes Certificate Verification issue

Cisco PSIRT reporting Customers affected by ASA VPN DoS attacks

Detecting Random - Finding Algorithmically chosen DNS names (DGA)

SSL, SSL - Where Art Thou SSL?

BizCN gate actor changes from Fiesta to Nuclear exploit kit

Working with base64

A .BUP File Is An OLE File

Analyzing Quarantine Files

Another example of Angler exploit kit pushing CryptoWall 3.0

Apple "Patch Tuesday"

Exploit

Impero Education Pro - SYSTEM Remote Command Execution

Pimcore CMS Build 3450 - Directory Traversal

Internet Download Manager - (.ief) Crash PoC

Internet Download Manager - (Find Download) Crash PoC

ZOC Terminal Emulator 7 - (Quick Connection) Crash PoC

14.7.2015

Bugtraq

CFP: Passwords 2015, Dec 7-9, Cambridge, UK 2015-07-10
Per Thorsheim (per thorsheim net)

CVE-2015-4670 - AjaxControlToolkit File Upload Directory Traversal 2015-07-13
Brian Cardinale (brian cardinaleconsulting com)

[SYSS-2015-031] sysPass - SQL Injection 2015-07-13
disclosure syss de

phpSQLiteCMS CSRF, Unrestricted File Type Upload, Privilege Escalation & XSS CSRF, Unrestricted File Type Upload, Privilege Escalation & XSS 2015-07-13
apparitionsec gmail com

[slackware-security] mozilla-thunderbird (SSA:2015-192-01) 2015-07-12
Slackware Security Team (security slackware com)

SQL Injection, Reflected XSS, Path Traversal, Function Execution in ZenPhoto 1.4.8 2015-07-10
Tim Coen (tc coen gmail com)

[security bulletin] HPSBGN03373 rev.1 - HP Release Control running TLS, Remote Disclosure of Information 2015-07-10
security-alert hp com

Cisco Security Advisory: OpenSSL Alternative Chains Certificate Forgery Vulnerability (July 2015) Affecting Cisco Products 2015-07-10
Cisco Systems Product Security Incident Response Team (psirt cisco com)

ESA-2015-115: EMC RecoverPoint for Virtual Machines (VMs) Restriction Bypass Vulnerability 2015-07-10
Security Alert (Security_Alert emc com)

CVE-2014-7952, Android ADB backup APK injection vulnerability 2015-07-10
Imre RAD (imre rad search-lab hu)

[security bulletin] HPSBGN03351 rev.2 - HP IceWall SSO Dfw, SSO Certd, MCRP, and Federation Agent running OpenSSL, Remote Disclosure of Information 2015-07-10
security-alert hp com

[security bulletin] HPSBGN03371 rev.1 - HP IceWall Products running OpenSSL, Remote Denial of Service (DoS) 2015-07-10
security-alert hp com

NEW VMSA-2015-0005 : VMware Workstation, Player and Horizon View Client for Windows updates address a host privilege escalation vulnerability 2015-07-10
VMware Security Response Center (security vmware com)

[SECURITY] [DSA 3307-1] pdns-recursor security update 2015-07-09
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3306-1] pdns security update 2015-07-09
Alessandro Ghedini (ghedo debian org)

[slackware-security] openssl (SSA:2015-190-01) 2015-07-09
Slackware Security Team (security slackware com)

FreeBSD Security Advisory FreeBSD-SA-15:12.openssl 2015-07-09
FreeBSD Security Advisories (security-advisories freebsd org)

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software 2015-07-09
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Extra information for CVE-2014-2513 - EMC Documentum Content Server: arbitrary code execution 2015-07-08
andrew panfilov tel

[SECURITY] [DSA 3305-1] python-django security update 2015-07-08
Alessandro Ghedini (ghedo debian org)

[CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection 2015-07-08
CORE Advisories Team (advisories coresecurity com)

[security bulletin] HPSBUX03363 rev.1 - HP-UX Apache Web Server running OpenSSL, Remote Disclosure of Information 2015-07-08
security-alert hp com

Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution 2015-07-08
hdau deloitte fr

SQL Injection in easy2map-photos wordpress plugin v1.09 2015-07-08
Larry W. Cashdollar (larry0 me com)

Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5 2015-07-08
Larry W. Cashdollar (larry0 me com)

Symantec EP 12.1.4013 Disabling Vulnerability 2015-07-08
apparitionsec gmail com

[slackware-security] bind (SSA:2015-188-04) 2015-07-08
Slackware Security Team (security slackware com)

[slackware-security] ntp (SSA:2015-188-03) 2015-07-08
Slackware Security Team (security slackware com)

[slackware-security] cups (SSA:2015-188-01) 2015-07-08
Slackware Security Team (security slackware com)

[slackware-security] mozilla-firefox (SSA:2015-188-02) 2015-07-08
Slackware Security Team (security slackware com)

Malware

Phishing

USAA	14th July 2015
New Message From Usaa Bank
Paypal service	12th July 2015
YOUR ACCOUNT WILL BE LIMITED
Mail User	11th July 2015
INCOMING EMAILS
Virgin Money UK	11th July 2015
VIRGIN E-MAIL ALERT !
PayPal	11th July 2015
WE'RE INVESTIGATING A PAYPAI PAYMENT REVERSAI (CASE ID #PP-003-498-237-832)
Chase	10th July 2015
ACTION NEEDED: ONLINE BANKING ALERT!?

Vulnerebility

SANS News

Jump List Files Are OLE Files

Exploit

Accellion FTA getStatus verify_oauth_token Command Execution

VNC Keyboard Remote Code Execution

Adobe Flash opaqueBackground Use After Free

Western Digital Arkeia Remote Code Execution

phpSQLiteCMS - Multiple Vulnerabilities

FreiChat 9.6 - SQL Injection

Arab Portal 3 - SQL Injection Vulnerability

phpVibe - Aribtrary File Disclosure ArticleFR 3.0.6 - Multiple Vulnerabilities

WordPress Swim Team Plugin 1.44.10777 - Arbitrary File Download

ZenPhoto 1.4.8 - Multiple Vulnerabilities

Full Player 8.2.1 - Memory Corruption PoC

2.7.2015

Bugtraq

iTunes 12.2 and QuickTime 7.7.7 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:\Program Files\... 2015-07-01
Stefan Kanthak (stefan kanthak nexgo de)

Exploit Code for ipTIME firmwares < 9.58 (root RCE against 127 router models) 2015-07-01
Pierre Kim (pierre kim sec gmail com)

ESA-2015-112: EMC Isilon OneFS Command Injection Vulnerability 2015-07-01
Security Alert (Security_Alert emc com)

Path Traversal in BlackCat CMS 2015-07-01
High-Tech Bridge Security Research (advisory htbridge ch)

Blueberry Express v5.9.x - SEH Buffer Overflow Vulnerability 2015-07-01
Vulnerability Lab (research vulnerability-lab com)

ESA-2015-108: EMC Documentum D2 Multiple DQL Injection Vulnerabilities 2015-07-01
Security Alert (Security_Alert emc com)

ESA-2015-111: EMC Documentum WebTop Client Products Multiple Vulnerabilities 2015-07-01
Security Alert (Security_Alert emc com)

FCS Scanner v1.0 & v1.4 - Command Inject Vulnerability 2015-07-01
Vulnerability Lab (research vulnerability-lab com)

Ebay Magento Bug Bounty #14 - Persistent Description Vulnerability 2015-07-01
Vulnerability Lab (research vulnerability-lab com)

Pinterest Bug Bounty #1 - Persistent contact_name Vulnerability 2015-07-01
Vulnerability Lab (research vulnerability-lab com)

Extra information for CVE-2014-4626 - EMC Documentum Content Server: authenticated user is able to elevate privileges, hijack Content Server filesystem, execute arbitrary commands by creating malicious dm_job objects 2015-07-01

Malware

Infostealer.Bancos.BE

W97M.Downloader.E

W97M.Downloader.D

W97M.Downloader.C

Phishing

Apple	1st July 2015
[ APPLE ] : VIEW YOUR RECENT SECURITY-ACCOUNT
Mail User	30th June 2015
INCOMING MAIL
iTunes	30th June 2015
ITUNES ACCOUNT HAS BEEN FROZEN ID1381A4C512582B66FF55
Dear Valued Member	30th June 2015
WARNINGS!!
Mr. Martin	30th June 2015
APPROVED PAYMENT.
Microsoft	29th June 2015
You just need to confirm your billing address.

Vulnerebility

Exploit

D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities

McAfee SiteAdvisor 3.7.2 (firefox) Use After Free PoC

1.7.2015

Bugtraq

APPLE-SA-2015-06-30-3 Mac EFI Security Update 2015-001 2015-06-30
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-06-30-4 Safari 8.0.7, Safari 7.1.7, and Safari 6.2.7 2015-06-30
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005 2015-06-30
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2015-06-30-1 iOS 8.4 2015-06-30
Apple Product Security (product-security-noreply lists apple com)

Google Chrome Address Spoofing (Request For Comment) 2015-06-30
David Leo (david leo deusen co uk)

CVE-2015-4674 - TimeDoctor autoupdate over plain-HTTP 2015-06-29
Fernando MuÃ±oz (fernando null-life com)

Malware

Trojan:Win32/Lodbak

Boot.Pitou

Trojan.Pitou

Phishing

Mail User	30th June 2015
INCOMING MAIL
iTunes	30th June 2015
ITUNES ACCOUNT HAS BEEN FROZEN ID1381A4C512582B66FF55
Dear Valued Member	30th June 2015
WARNINGS!
Mr. Martin	30th June 2015
APPROVED PAYMENT.
Microsoft	29th June 2015
You just need to confirm your billing address.

Vulnerebility

Exploit

30.6.2015

Bugtraq

[SECURITY] [DSA 3297-1] unattended-upgrades security update 2015-06-29
Alessandro Ghedini (ghedo debian org)

novius-os.5.0.1 Persistent XSS, LFI & Open Redirect Vulnerabilities 2015-06-29
apparitionsec gmail com

Malware

Phishing

Mail User	30th June 2015
INCOMING MAIL
iTunes	30th June 2015
ITUNES ACCOUNT HAS BEEN FROZEN ID1381A4C512582B66FF55
Dear Valued Member	30th June 2015
WARNINGS!!
Mr. Martin	30th June 2015
APPROVED PAYMENT.
Microsoft	29th June 2015
You just need to confirm your billing address.
Vodafone	28th June 2015
You Have One Unread Message

Vulnerebility

Exploit

Adobe Flash Player Drawing Fill Shader Memory Corruption

Watchguard XCS <=10.0 - Multiple Vulnerabilities

Novius 5.0.1 - Multiple Vulnerabilities

WedgeOS <= 4.0.4 - Multiple Vulnerabilities

CollabNet Subversion Edge Management 4.0.11 - Local File Inclusion

Fiyo CMS 2.0_1.9.1 - SQL Injection

C2Box 4.0.0(r19171) - CSRF Vulnerability

Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities

encoded 64 bit execve shellcode

Novius 5.0.1 - Multiple Vulnerabilities

29.6.2015

Bugtraq

novius-os.5.0.1 Persistent XSS, LFI & Open Redirect Vulnerabilities 2015-06-29
apparitionsec gmail com

CollabNet Subversion Edge indes local file inclusion 2015-06-28
Oliver-Tobias Ripka (otr bockcay de)

CollabNet Subversion Edge missing single login restriction 2015-06-28
Oliver-Tobias Ripka (otr bockcay de)

CollabNet Subversion Edge weak password storage mechanism 2015-06-28
Oliver-Tobias Ripka (otr bockcay de)

CollabNet Subversion Edge missing XSRF protection 2015-06-28
Oliver-Tobias Ripka (otr bockcay de)

CollabNet Subversion Edge weak password policy 2015-06-28
Oliver-Tobias Ripka (otr bockcay de)

Malware

Trojan:Win32/Lodbak

Phishing

Microsoft	29th June 2015
You just need to confirm your billing address.
Vodafone	28th June 2015
You Have One Unread Message

Vulnerebility

Exploit

27.6.2015

Bugtraq

Malware

Phishing

Bank Of America	27th June 2015
* IMPORTANT * Ensure The Safty For Your Online Banking Account
iTunes	26th June 2015
ITUNES ACCOUNT HAS BEEN FROZEN ID2108A4C525152AF4847A
PayPal Service	26th June 2015
You just need to confirm your billing address.
Bank of Scotland	25th June 2015
Account Review Notification.

Vulnerebility

Exploit

Thycotic Secret Server 8.8.000004 - Stored XSS

ManageEngine Asset Explorer 6.1 - Stored XSS

26.6.2015

Bugtraq

Cisco Security Advisory: Multiple Default SSH Keys Vulnerabilities in Cisco Virtual WSA, ESA, and SMA 2015-06-25
Cisco System

Cisco Security Advisory: Multiple Default SSH Keys Vulnerabilities in Cisco Virtual WSA, ESA, and SMA 2015-06-25
Cisco Systems Product Security Incident Response Team (psirt cisco com)

ESA-2015-102: EMC Unisphere for VMAX Remote Code Execution Vulnerability 2015-06-25
Security Alert (Security_Alert emc com)

Netgear Prosafe VPN Firewalls - Multiple vulnerabilities 2015-06-25
post encripto no

[ERPSCAN-15-011] SAP Mobile Platform 3.0 - XXE 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-008] SAP Afaria 7 XcListener - DoS in the module XeClient.Dll 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-010] SYBASE SQL Anywhere 12 and 16 - DoS 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-009] SAP Afaria 7 XcListener - Missing authorization check 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-007] SAP Management Console ReadProfile Parameters - Information disclosure 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-005] SAP Mobile Platform - XXE 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-006] SAP NetWeaver Portal ReportXmlViewer - XXE 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-004] SAP NetWeaver Portal XMLValidationComponent - XXE 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-003] SAP NetWeaver Dispatcher Buffer Overflow - RCE, DoS 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[SECURITY] [DSA 3295-1] cacti security update 2015-06-24
Salvatore Bonaccorso (carnil debian org)

s Product Security Incident Response Team (psirt cisco com)

ESA-2015-102: EMC Unisphere for VMAX Remote Code Execution Vulnerability 2015-06-25
Security Alert (Security_Alert emc com)

Netgear Prosafe VPN Firewalls - Multiple vulnerabilities 2015-06-25
post encripto no

[ERPSCAN-15-011] SAP Mobile Platform 3.0 - XXE 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-008] SAP Afaria 7 XcListener - DoS in the module XeClient.Dll 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-010] SYBASE SQL Anywhere 12 and 16 - DoS 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-009] SAP Afaria 7 XcListener - Missing authorization check 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-007] SAP Management Console ReadProfile Parameters - Information disclosure 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-005] SAP Mobile Platform - XXE 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-006] SAP NetWeaver Portal ReportXmlViewer - XXE 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-004] SAP NetWeaver Portal XMLValidationComponent - XXE 2015-06-25
Darya Maenkova (d maenkova erpscan com)

[ERPSCAN-15-003] SAP NetWeaver Dispatcher Buffer Overflow - RCE, DoS 2015-06-25
Darya Maenkova (d maenkova erpscan com)

Malware

Trojan:JS/HideLink.A

PWS:Win32/Emotet.G

Gen1 Trojan.Shunnael!

Trojan.Shunnael

Phishing

PayPal Service	26th June 2015
You just need to confirm your billing address.
Bank of Scotland	25th June 2015
Account Review Notification.
System Notification	24th June 2015
EMAIL ACCOUNT DE-ACTIVATION ALERT...
Barclays Bank	24th June 2015
1 New Security Message From Barclays Online Personal Banking!
Apple	24th June 2015
Your Apple ID has been suspended [#487298]
USAA	24th June 2015
YOUR USAA ONLINE CONFIRMATION ALERT

Vulnerebility

Exploit

Koha <= 3.20.1 - Multiple SQL Injections

Koha <= 3.20.1 - Path Traversal

Koha <= 3.20.1 - Multiple XSS and XSRF Vulnerabilities

Linux/x86 - chmod('/etc/passwd',0777) shellcode (42 bytes)

Linux/x86 - chmod('/etc/gshadow') shellcode (37 bytes)

Linux/x86 chmod('/etc/shadow','0777') shellcode (42 bytes)

25.6.2015

Bugtraq

[SECURITY] [DSA 3295-1] cacti security update 2015-06-24
Salvatore Bonaccorso (carnil debian org)

CVE-2015-4464 Insufficient Authorization Checks Request Handling Remote Authentication Bypass for Kguard Digital Video Recorders 2015-06-24
Federick Joe P Fajardo (fjpfajardo ph ibm com)

CVE-2015-3443 XSS in Thycotic Secret Server version 8.6.000000 to 8.8.000004 2015-06-24
Marco Delai (Marco Delai csnc ch)

[SECURITY] [DSA 3294-1] wireshark security update 2015-06-23
Moritz Muehlenhoff (jmm debian org)

Malware

Backdoor:Win32/Tenpeq.D

PowerShell / Filecoder.A

Win32 / Filecoder.NBR

Trojan.Sofacy.B

Backdoor.Layork.B

Backdoor.Credmines

Phishing

System Notification	24th June 2015
EMAIL ACCOUNT DE-ACTIVATION ALERT...
Barclays Bank	24th June 2015
1 New Security Message From Barclays Online Personal Banking!
Apple	24th June 2015
Your Apple ID has been suspended [#487298]
USAA	24th June 2015
YOUR USAA ONLINE CONFIRMATION ALERT
Dropbox_notification	23rd June 2015
IMPORTANT DOCUMENT
PayPal	23rd June 2015
Receipt for your payment to peter.hall53@btopenworld.com

Vulnerebility

Exploit

Adobe Flash Player ShaderJob Buffer Overflow

GeniXCMS 0.0.3 - XSS Vulnerabilities

WordPress Huge-IT Slider 2.7.5 - Multiple Vulnerabilities

GeniXCMS 0.0.3 - register.php SQL Injection Vulnerabilities

Joomla SimpleImageUpload - Arbitrary File Upload

Vesta Control Panel 0.9.8 - OS Command Injection

Windows ClientCopyImage Win32k Exploit

Linux/x86 - mkdir HACK & chmod 777 and exit(0) - 29 Bytes

Linux/x86 - Netcat BindShell Port 5555 - 60 bytes

linux/x86-64 execve(/bin/sh) 30 bytes

Linux/x86 Downloand & Execute

Linux/x86 Reboot - 28 Bytes

24.6.2015

Bugtraq

ESA-2015-110: EMC Documentum Thumbnail Server Directory Traversal Vulnerability 2015-06-23
Security Alert (Security_Alert emc com)

ESA-2015-109: EMC Documentum D2 Cross-Site Scripting 2015-06-23
Security Alert (Security_Alert emc com)

KMPlayer 3.9.1.136 Capture Unicode Buffer Overflow (ASLR Bypass) 2015-06-23
n4ser farhadi gmail com

The "localhosed" attack - stealing IE local machine cookies and exposing its internal IP address 2015-06-22
Amit Klein (aksecurity gmail com)

ManageEngine Asset Explorer v6.1 - Persistent Vulnerability 2015-06-22
Vulnerability Lab (research vulnerability-lab com)

Malware

Win32 / Bamital.GI

JS / Kryptik.AVZ

Win32 / TrojanDownloader.Rottentu.A

Win32 / Potao.D

Win32 / Potao

Phishing

Apple	24th June 2015
Your Apple ID has been suspended [#487298]
USAA	24th June 2015
YOUR USAA ONLINE CONFIRMATION ALERT
Dropbox_notification	23rd June 2015
IMPORTANT DOCUMENT
PayPal	23rd June 2015
Receipt for your payment to peter.hall53@btopenworld.com
Barclays	22nd June 2015
Suspicious Activity Detected On Your Account

Vulnerebility

Exploit

23.6.2015

Bugtraq

KMPlayer 3.9.1.136 Capture Unicode Buffer Overflow (ASLR Bypass) 2015-06-23
n4ser farhadi gmail com

The "localhosed" attack - stealing IE local machine cookies and exposing its internal IP address 2015-06-22
Amit Klein (aksecurity gmail com)

ManageEngine Asset Explorer v6.1 - Persistent Vulnerability 2015-06-22
Vulnerability Lab (research vulnerability-lab com)

[oCERT-2015-008] FreeRADIUS insufficent CRL application 2015-06-22
Andrea Barisani (lcars ocert org)

mysql-lite-administrator XSS vulnerabilities 2015-06-21
apparitionsec gmail com

[security bulletin] HPSBMU03356 rev.1 - HP Business Service Automation Essentials (BSAE) running TLS, Remote Disclosure of Information 2015-06-22
security-alert hp com

GeniXCMS XSS Vulnerabilities 2015-06-22
apparitionsec gmail com

[SECURITY] [DSA 3293-1] pyjwt security update 2015-06-20
Alessandro Ghedini (ghedo debian org)

[CVE-2015-3188] Apache Storm remote code execution vulnerability 2015-06-20
P. Taylor Goetz (ptgoetz apache org)

Malware

Win32 / LockScreen.BMA

Win32 / Sopinar.A

Win32 / Spy.Bizzana.A

Win32 / Zacom.G

Win32 / Agent.VNL

Phishing

PayPal	23rd June 2015
Receipt for your payment to peter.hall53@btopenworld.com
Barclays	22nd June 2015
Suspicious Activity Detected On Your Account
USAA	22nd June 2015
YOUR USAA ONLINE CONFIRMATION ALERT
Wells Fargo	22nd June 2015
IMPORTANT NOTICE REGARDING YOUR ACCOUNT

Vulnerebility

CUPS < 2.0.3 - Multiple Vulnerabilities

Photoshop CC2014 and Bridge CC 2014 PDF Parsing Memory Corruption Vulnerabilities

Photoshop CC2014 and Bridge CC 2014 PNG Parsing Memory Corruption Vulnerabilities

Photoshop CC2014 and Bridge CC 2014 Gif Parsing Memory Corruption Vulnerabilities

Paintshop Pro X7 GIF Conversion Heap Memory Corruption Vulnerabilities (LZWMinimumCodeSize)

Exploit

CUPS < 2.0.3 - Multiple Vulnerabilities

Photoshop CC2014 and Bridge CC 2014 PDF Parsing Memory Corruption Vulnerabilities

Photoshop CC2014 and Bridge CC 2014 PNG Parsing Memory Corruption Vulnerabilities

Photoshop CC2014 and Bridge CC 2014 Gif Parsing Memory Corruption Vulnerabilities

Paintshop Pro X7 GIF Conversion Heap Memory Corruption Vulnerabilities (LZWMinimumCodeSize)

22.6.2015

Bugtraq

Ebay Magento Bug Bounty #17 - Client Side Cross Site Scripting Web Vulnerability 2015-06-19
Vulnerability Lab (research vulnerability-lab com)

Ebay Magento Bug Bounty #10 - Persistent Filename Vulnerability 2015-06-19
Vulnerability Lab (research vulnerability-lab com)

Ebay Magento Bug Bounty #12 - Cross Site Request Forgery Web Vulnerability 2015-06-19
Vulnerability Lab (research vulnerability-lab com)

ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Delete Vulnerability 2015-06-19
Vulnerability Lab (research vulnerability-lab com)

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities 2015-06-19
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3292-1] cinder security update 2015-06-19
Sebastien Delafond (seb debian org)

DUO Security push Timing Attack 2015-06-18
jpierini paysw com

[SECURITY] [DSA 3291-1] drupal7 security update 2015-06-18
Sebastien Delafond (seb debian org)

[SECURITY] [DSA 3290-1] linux security update 2015-06-18
Ben Hutchings (benh debian org)

Malware

Exploit:JS/Sevdaq.A

Linux.Shelldos.A

Phishing

USAA	22nd June 2015
YOUR USAA ONLINE CONFIRMATION ALERT
Wells Fargo	22nd June 2015
IMPORTANT NOTICE REGARDING YOUR ACCOUNT
iTunes Service	21st June 2015
ITUNES ID UPDATE
PayPal support	21st June 2015
UPDATE YOUR PAYPAL ACCOUNT
PayPal Inc âœ”	21st June 2015
YOUR ACCOUNT HAS BEEN LIMITED âœ”
PayPal Service	21st June 2015
You just need to confirm your billing address.
PayPal	20th June 2015
Your Account Access Has Been Limited

Vulnerebility

Exploit

18.6.2015

Bugtraq

[SECURITY] [DSA 3291-1] drupal7 security update 2015-06-18
Sebastien Delafond (seb debian org)

[SECURITY] [DSA 3290-1] linux security update 2015-06-18
Ben Hutchings (benh debian org)

[security bulletin] HPSBGN03338 rev.1 - HP Service Manager running RC4, Remote Disclosure of Information 2015-06-17
security-alert hp com

Malware

Backdoor.Wecoym

Trojan.Gatak.B

Trojan.Feratuser

Phishing

Lloyds	18th June 2015
YOUR LLYODS ACCOUNT WILL BE BLOCKED #LY739268029
PayPal Service	18th June 2015
You just need to confirm your billing address.
Chase	17th June 2015
CHASE ALERT!
paypal	17th June 2015
WE'VE IIMITED ACCESS TO YOUR PAYPAI ACCOUNT
Michelle	17th June 2015
INTERESTED IN A GUARANTEED FIRST PAGE GOOGLE RANK?
PayPal Service	17th June 2015
WE NOTICE UNUSUAL ACTIVITY LOGIN

Vulnerebility

Exploit

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities

ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Delete Vulnerability

WinylPlayer 3.0.3 Memory Corruption PoC

HansoPlayer 3.4.0 Memory Corruption PoC

18.6.2015

Bugtraq

[security bulletin] HPSBGN03338 rev.1 - HP Service Manager running RC4, Remote Disclosure of Information 2015-06-17
security-alert hp com

[security bulletin] HPSBGN03350 rev.1 - HP SiteScope Using RC4, Remote Disclosure of Information 2015-06-17
security-alert hp com

VCE3570: VCE Vision(TM) Intelligent Operations Cryptographic and Cleartext Vulnerabilities 2015-06-17
VCE - PSIRT (VCEPSIRT vce com)

Reflected Cross-Site Scripting (XSS) in SearchBlox 2015-06-17
High-Tech Bridge Security Research (advisory htbridge ch)

OS Command Injection in Vesta Control Panel 2015-06-17
High-Tech Bridge Security Research (advisory htbridge ch)

ESA-2015-043: RSA® Validation Manager Security Update for Multiple Vulnerabilities 2015-06-16
Security Alert (Security_Alert emc com)

ESA-2015-106: EMC Unified Infrastructure Manager/Provisioning (UIM/P) Authentication Bypass Vulnerability 2015-06-16
Security Alert (Security_Alert emc com)

BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability 2015-06-16
d4rkr0id gmail com

Malware

Backdoor:MSIL/IRCbot.J

Backdoor.Wecoym

Trojan.Gatak.B

Phishing

PayPal Service	18th June 2015
You just need to confirm your billing address.
Chase	17th June 2015
CHASE ALERT!
paypal	17th June 2015
WE'VE IIMITED ACCESS TO YOUR PAYPAI ACCOUNT
Michelle	17th June 2015
INTERESTED IN A GUARANTEED FIRST PAGE GOOGLE RANK?
PayPal Service	17th June 2015
WE NOTICE UNUSUAL ACTIVITY LOGIN
PayPal Service	16th June 2015
WE NOTICE UNUSUAL ACTIVITY LOGIN

Vulnerebility

Exploit

BlackCat CMS 1.1.1 Arbitrary File Download

16.6.2015

Bugtraq

[SECURITY] [DSA 3289-1] p7zip security update 2015-06-15
Ben Hutchings (benh debian org)

WebdesignJiNi Cms Sql Injection Vulnerability 2015-06-14
iedb team gmail com

Productsurf Cms Sql Injection Vulnerability 2015-06-14
iedb team gmail com

[SECURITY] [DSA 3252-2] sqlite3 security update 2015-06-14
Alessandro Ghedini (ghedo debian org)

[RT-SA-2015-002] SQL Injection in TYPO3 Extension Akronymmanager 2015-06-15
RedTeam Pentesting GmbH (release redteam-pentesting de)

[SECURITY] [DSA 3287-1] openssl security update 2015-06-13

Malware

Backdoor.Wecoym

Trojan.Gatak.B

Phishing

EARTHLINK	16th June 2015
BUY GENUINE EARTHLINK RDP NO SMTP NEEDED AND EMAILS
Chase	16th June 2015
ONLINE BANKING VERIFICATION FROM CHASE ONLINE
Amazon UK	15th June 2015
IMPORTANT SECURITY MESSAGE
Apple	15th June 2015
You May To Update Your AccounT ID
google help desk	15th June 2015
YOU HAVE A PENDING INCOMING DOC SHARED WITH YOU VIA GOOGLE DOC

Vulnerebility

Exploit

Cisco AnyConnect Secure Mobility 2.x, 3.x, 4.x - Client DoS PoC

Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - CSRF Vulnerability

E-Detective Lawful Interception System - Multiple Vulnerabilities

TYPO3 Akronymmanager Extension 0.5.0 - SQL Injection

Apexis IP CAM - Information Disclosure

Linux/x86 - /etc/passwd Reader (58 bytes)

Ubuntu 12.04, 14.04, 14.10, 15.04 - overlayfs Local Root (Shell)

Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - CSRF Vulnerability

Ubuntu 12.04, 14.04, 14.10, 15.04 - overlayfs Local Root (Shadow File)

Filezilla 3.11.0.2 - SFTP Module Denial of Service Vulnerability

Putty 0.64 - Denial of Service Vulnerability

15.6.2015

Bugtraq

[RT-SA-2015-002] SQL Injection in TYPO3 Extension Akronymmanager 2015-06-15
RedTeam Pentesting GmbH (release redteam-pentesting de)

[SECURITY] [DSA 3287-1] openssl security update 2015-06-13
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3288-1] libav security update 2015-06-13
Moritz Muehlenhoff (jmm debian org)

Buffer Overflow in My Wifi Router Software 2015-06-13
sudson08 gmail com

[SECURITY] [DSA 3286-1] xen security update 2015-06-13
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3285-1] qemu-kvm security update 2015-06-12
Salvatore Bonaccorso (carnil debian org)

[slackware-security] openssl (SSA:2015-162-01) 2015-06-11
Slackware Security Team (security slackware com)

Malware

Phishing

Apple	15th June 2015
You May To Update Your AccounT ID
google help desk	15th June 2015
YOU HAVE A PENDING INCOMING DOC SHARED WITH YOU VIA GOOGLE DOC
iTunes	14th June 2015
ITUNES ACCOUNT HAS BEEN FROZEN ID3348A4BA153409F53151
EARTHLINK	14th June 2015
BUY GENUINE EARTHLINK RDP NO SMTP NEEDED AND EMAILS
Support	14th June 2015
ACCOUNT NOTIFICATION
Pay Pal	14th June 2015
YOUR ACCOUNT WILL BE LIMITED âœ”
PayPal Security Team	14th June 2015
REMINDER - ACTION REQUIRED: IMPORTANT ACCOUNT SECURITY INTEGRATION

Vulnerebility

Exploit

Milw0rm Clone Script 1.0 - (Auth Bypass) SQL Injection Vulnerability

Filezilla 3.11.0.2 - SFTP Module Denial of Service Vulnerability

Putty 0.64 - Denial of Service Vulnerability

13.6.2015

Bugtraq

[slackware-security] openssl (SSA:2015-162-01) 2015-06-11
Slackware Security Team (security slackware com)

FreeBSD Security Advisory FreeBSD-SA-15:10.openssl 2015-06-12
FreeBSD Security Advisories (security-advisories freebsd org)

[SYSS-2015-020] ZENWorks Mobile Management - Cross-Site Scripting 2015-06-12
ludwig stage syss de

ZCMS SQL Injection & Persistent XSS 2015-06-12
apparitionsec gmail com

[slackware-security] php (SSA:2015-162-02) 2015-06-11
Slackware Security Team (security slackware com)

Nakid-CMS CSRF, Persistent XSS & LFI 2015-06-11
apparitionsec gmail com

[KIS-2015-03] Concrete5 <= 5.7.4 (Access.php) SQL Injection Vulnerability 2015-06-11
Egidio Romano (research karmainsecurity com)

Malware

TrojanDropper:AutoIt/Bokill.A

Win32 / Spy.Zbot.ABV

Win32 / Bundpil.A

Win32 / Adware.MultiPlug.EE

Win32 / Adware.MultiPlug.DJ

Phishing

USAA	13th June 2015
Update Your Account
American Express	13th June 2015
Confirm your American Express online details.
PayPal Security Team	12th June 2015
REMINDER - ACTION REQUIRED: IMPORTANT ACCOUNT SECURITY INTEGRATION
Mercantile	11th June 2015
EARTHLINK RDP, COMCAST RDP, UNLIMITED SMTP

Vulnerebility

Exploit

ClickHeat <= 1.14 Change Admin Password CSRF

Nakid CMS - Multiple Vulnerabilities

Opsview <= 4.6.2 - Multiple XSS Vulnerabilities

ZCMS 1.1 - Multiple Vulnerabilities

WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversal

WordPress Aviary Image Editor Add On For Gravity Forms 3.0 Beta Shell Upload

12.6.2015

Bugtraq

[KIS-2015-03] Concrete5 <= 5.7.4 (Access.php) SQL Injection Vulnerability 2015-06-11
Egidio Romano (research karmainsecurity com)

[KIS-2015-02] Concrete5 <= 5.7.3.1 Multiple Reflected Cross-Site Scripting Vulnerabilities 2015-06-11
Egidio Romano (research karmainsecurity com)

[KIS-2015-01] Concrete5 <= 5.7.3.1 (sendmail) Remote Code Execution Vulnerability 2015-06-11
Egidio Romano (research karmainsecurity com)

Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin 2015-06-10
Larry W. Cashdollar (larry0 me com)

Cisco Security Advisory: Cisco IOS XR Software Crafted IPv6 Packet Denial of Service Vulnerability 2015-06-11
Cisco Systems Product Security Incident Response Team (psirt cisco com)

D-Link DSP-W110 - multiple vulnerabilities 2015-06-11
Peter Adkins (peter adkins kernelpicnic net)

[security bulletin] HPSBUX03337 SSRT102066 rev.1 - HP-UX Apache Web Server Suite running Apache Web Server, Tomcat v6.x, or PHP v5.4.x, Remote Denial of Service (DoS) and Other Vulnerabilities 2015-06-11
security-alert hp com

Malware

Linux / Moose

BAT / Filecoder.AQ

Win32 / Agent.QKJ

Win32 / TrojanDownloader.Wauchos.AK

Win32 / Neurevt.I

Win32 / Spy.Zbot.ABV

Phishing

Mercantile	11th June 2015
EARTHLINK RDP, COMCAST RDP, UNLIMITED SMTP
PayPal	11th June 2015
Update your PayPal !

Vulnerebility

Exploit

OSSEC 2.7 <= 2.8.1 - Local Root Escalation

11.6.2015

Bugtraq

Heroku Bug Bounty #2 - (API) Re Auth Session Bypass Vulnerability 2015-06-10
Vulnerability Lab (research vulnerability-lab com)

Use-After-Free in PHP 2015-06-10
High-Tech Bridge Security Research (advisory htbridge ch)

Multiple Vulnerabilities in ISPConfig 2015-06-10
High-Tech Bridge Security Research (advisory htbridge ch)

Arbitrary File Disclosure and Open Redirect in Bonita BPM 2015-06-10
High-Tech Bridge Security Research (advisory htbridge ch)

[RT-SA-2015-004] Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery 2015-06-10
RedTeam Pentesting GmbH (release redteam-pentesting de)

[RT-SA-2015-003] Alcatel-Lucent OmniSwitch Web Interface Weak Session ID 2015-06-10
RedTeam Pentesting GmbH (release redteam-pentesting de)

[security bulletin] HPSBUX03341 SSRT102068 rev.1 - HP-UX Apache Tomcat v7.x, Remote Denial of Service (DoS) and Other Vulnerabilities 2015-06-09
security-alert hp com

Malware

Backdoor:MSIL/Bladabindi.BG
Worm:Win32/Rebhip.Y
Worm:Win32/Rebhip.Z
Backdoor:Win32/Zegost.THD

Backdoor:Win32/Zegost.THD
TrojanDownloader:Win32/Redosdru.C

Phishing

PayPal	11th June 2015
Receipt for your PayPal payment to farmville,games@facebook.com
Ð–Ð°Ð½Ð½Ð° Ð¡ÐµÑ€Ð³ÐµÐµÐ²Ð½Ð°	10th June 2015
Ð¡Ð°Ð¹Ñ‚ Ð±Ñ‹ÑÑ‚Ñ€Ð¾ Ð¸ Ð´ÐµÑˆÐµÐ²Ð¾
æ¥¼å‡¤å°?å§è‰¯å®¶å…¼èŒä¿¡æ¯	10th June 2015
5:28:42
EARTHLINK	10th June 2015
WE SELL ONLY GENUINE EARTHLINK RDP NO SMTP NEEDE

Vulnerebility

Exploit

ProFTPD 1.3.5 Mod_Copy Command Execution

Paypal Currencucy Converter Basic For Woocommerce File Read

Wordpress History Collection <=1.1.1 Arbitrary File Download

Pandora FMS 5.0, 5.1 - Authentication Bypass

Wordpress RobotCPA Plugin V5 - Local File Inclusion

HP WebInspect <= 10.4 XML External Entity Injection

Heroku Bug Bounty #2 - (API) Re Auth Session Bypass Vulnerability

Libmimedir VCF Memory Corruption PoC

FiverrScript CSRF Vulnerability (Add New Admin)

GeoVision (GeoHttpServer) Webcams Remote File Disclosure Exploit

ISPConfig 3.0.5.4p6 - Multiple Vulnerabilities

Bonita BPM 6.5.1 - Multiple Vulnerabilities

Alcatel-Lucent OmniSwitch - CSRF Vulnerability

AnimaGallery 2.6 - Local File Inclusion

WordPress Encrypted Contact Form Plugin 1.0.4 - CSRF Vulnerability

10.6.2015

Bugtraq

Heroku Bug Bounty #2 - (API) Re Auth Session Bypass Vulnerability 2015-06-10
Vulnerability Lab (research vulnerability-lab com)

Use-After-Free in PHP 2015-06-10
High-Tech Bridge Security Research (advisory htbridge ch)

Multiple Vulnerabilities in ISPConfig 2015-06-10
High-Tech Bridge Security Research (advisory htbridge ch)

Arbitrary File Disclosure and Open Redirect in Bonita BPM 2015-06-10
High-Tech Bridge Security Research (advisory htbridge ch)

[RT-SA-2015-004] Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery 2015-06-10
RedTeam Pentesting GmbH (release redteam-pentesting de)

[RT-SA-2015-003] Alcatel-Lucent OmniSwitch Web Interface Weak Session ID 2015-06-10
RedTeam Pentesting GmbH (release redteam-pentesting de)

[security bulletin] HPSBUX03341 SSRT102068 rev.1 - HP-UX Apache Tomcat v7.x, Remote Denial of Service (DoS) and Other Vulnerabilities 2015-06-09
security-alert hp com

Elasticsearch vulnerability CVE-2015-4165 2015-06-09
Kevin Kluge (kevin elastic co)

Malware

Trojan.Dokabot

Trojan.Hepbot

W32.Duqu.B

Phishing

æ¥¼å‡¤å°?å§è‰¯å®¶å…¼èŒä¿¡æ¯	10th June 2015
5:28:42
EARTHLINK	10th June 2015
WE SELL ONLY GENUINE EARTHLINK RDP NO SMTP NEEDED
EARTHLINK	9th June 2015
WE SELL ONLY GENUINE EARTHLINK RDP NO SMTP NEEDED
iTunes	9th June 2015
ITUNES ACCOUNT HAS BEEN FROZEN ID2725A4B441384E14AFD3
Apple	8th June 2015
Verify your Apple ID information
PayPal	8th June 2015
Update Your PayPal Account !
Chase	8th June 2015
ALERT MESSAGE FROM CHASE ONLINE(SM)

Vulnerebility

Exploit

SV: Milw0rm Clone Script v1.0 - (time based) SQLi

9.6.2015

Bugtraq

[SECURITY] [DSA 3282-1] strongswan security update 2015-06-08
Yves-Alexis Perez (corsac debian org)

Symphony CMS XSS Vulnerability 2015-06-08
apparitionsec gmail com

AnimaGallery 2.6 (theme and lang cookie parameter) Local File Include Vulnerability 2015-06-08
d4rkr0id gmail com

[SECURITY] [DSA 3281-1] Debian Security Team PGP/GPG key change notice 2015-06-07
Thijs Kinkhorst (thijs debian org)

[SECURITY] [DSA 3280-1] php5 security update 2015-06-07
Moritz Muehlenhoff (jmm debian org)

Malware

Trojan.Woolerg

Backdoor:MSIL/NetWiredRC.A
TrojanDropper:Win32/Plugx.J
TrojanDownloader:MSIL/Dowector.A
BrowserModifier:Win32/IminentSProtection
BrowserModifier:Win32/AskToolbarNotifier

Phishing

Apple	8th June 2015
Verify your Apple ID information
PayPal	8th June 2015
Update Your PayPal Account !
Chase	8th June 2015
ALERT MESSAGE FROM CHASE ONLINE(SM)
ÐšÑÐµÐ½Ð¸Ñ? Ð“Ð»ÐµÐ±Ð¾Ð²Ð½Ð°	7th June 2015
Ð?Ðµ Ð¶Ð´Ð¸Ñ‚Ðµ, Ð´ÐµÐ¹ÑÑ‚Ð²ÑƒÐ¹Ñ‚Ðµ!
PayPal	6th June 2015
[Notice] : Update Your Account Information Case ID PP 003-498-237

Vulnerebility

Exploit

Wordpress Plugin 'WP Mobile Edition' - LFI Vulnerability

8.6.2015

Bugtraq

Symphony CMS XSS Vulnerability 2015-06-08
apparitionsec gmail com

AnimaGallery 2.6 (theme and lang cookie parameter) Local File Include Vulnerability 2015-06-08
d4rkr0id gmail com

[SECURITY] [DSA 3281-1] Debian Security Team PGP/GPG key change notice 2015-06-07
Thijs Kinkhorst (thijs debian org)

[SECURITY] [DSA 3280-1] php5 security update 2015-06-07
Moritz Muehlenhoff (jmm debian org)

Hardcoded AES 256 bit key used in Kankun IoT/Smart socket and its mobile App 2015-06-06
Payatu Research (research payatu com)

[SECURITY] [DSA 3279-1] redis security update 2015-06-06
Alessandro Ghedini (ghedo debian org)

Symphony CMS 2.6.2 2015-06-06
apparitionsec gmail com

CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 2015-06-06
venkatesh nitin gmail com

Xloner v3.1.2 wordpress plugin authenticated command execution and XSS 2015-06-05
Larry W. Cashdollar (larry0 me com)

Expedia Product Security Advisory: Cruise Ship Centers Information Disclosure 2015-06-05
Mike Sheward (msheward expedia com)

CVE-2015-4109 - WordPress Users Ultra Plugin [SQL injection] 2015-06-05
pan vagenas gmail com

1 Click Extract Audio v2.3.6 - Activex Buffer Overflow 2015-06-05
Vulnerability Lab (research vulnerability-lab com)

1 Click Audio Converter v2.3.6 - Activex Buffer Overflow 2015-06-05
Vulnerability Lab (research vulnerability-lab com)

Wing FTP Server Remote Code Execution vulnerability 2015-06-05
alex_haynes outlook com

Malware

Infostealer.Malumpos

TrojanDownloader:Win32/Noucti.A

Backdoor.Kickesgo

Backdoor.Gwapoors

Backdoor.Salgorea.B

Phishing

ÐšÑÐµÐ½Ð¸Ñ? Ð“Ð»ÐµÐ±Ð¾Ð²Ð½Ð°	7th June 2015
Ð?Ðµ Ð¶Ð´Ð¸Ñ‚Ðµ, Ð´ÐµÐ¹ÑÑ‚Ð²ÑƒÐ¹Ñ‚Ðµ!
PayPal	6th June 2015
[Notice] : Update Your Account Information Case ID PP 003-498-237
PayPal Service âœ”	6th June 2015
YOUR PAYPAL ACCOUNT WILL BE LIMITED UPDATE IT NOW . âœ”
PayPal Service	6th June 2015
You just need to confirm your billing address.

Vulnerebility

Exploit

D-Link DSL-2780B DLink_1.01.14 - Unauthenticated Remote DNS Change

TP-Link ADSL2+ TD-W8950ND - Unauthenticated Remote DNS Change

D-Link DSL-2730B AU_2.01 - Authentication Bypass DNS Change

D-Link DSL-526B ADSL2+ AU_2.01 - Unauthenticated Remote DNS Change

5.6.2015

Bugtraq

1 Click Extract Audio v2.3.6 - Activex Buffer Overflow 2015-06-05
Vulnerability Lab (research vulnerability-lab com)

1 Click Audio Converter v2.3.6 - Activex Buffer Overflow 2015-06-05
Vulnerability Lab (research vulnerability-lab com)

Wing FTP Server Remote Code Execution vulnerability 2015-06-05
alex_haynes outlook com

[CVE-2015-4108] Wing FTP Server Cross-site Request Forgery vulnerabilities 2015-06-05
alex_haynes outlook com

CA20150604-01: Security Notice for CA Common Services 2015-06-04
Kotas, Kevin J (Kevin Kotas ca com)

[security bulletin] HPSBGN03343 rev.1 - HP WebInspect, Remote Unauthorized Access 2015-06-04
security-alert hp com

CVE-2015-4153 - WordPress zM Ajax Login & Register Plugin [Local File Inclusion] 2015-06-04
pan vagenas gmail com

Malware

TrojanDownloader:Win32/Noucti.A

Backdoor.Kickesgo

Backdoor.Gwapoors

Backdoor.Salgorea.B

Phishing

Verfaction Paypal	4th June 2015
YOUR ACCOUNT HAS BEEN IIMITED UNTII WE HEAR FROM YOU
Chase Bank	3rd June 2015
UNLOCK YOUR USER ID

Vulnerebility

Exploit

JDownloader 2 Beta - Directory Traversal Vulnerability

Seagate Central 2014.0410.0026-F Remote Root Exploit

Wordpress Really Simple Guest Post <= 1.0.6 - File Include

WordPress zM Ajax Login & Register Plugin 1.0.9 Local File Inclusion

1 Click Audio Converter 2.3.6 - Activex Buffer Overflow

1 Click Extract Audio 2.3.6 - Activex Buffer Overflow

Jildi FTP Client 1.5.6 (SEH) BOF

ZTE AC 3633R USB Modem Multiple Vulnerabilities

4.6.2015

Bugtraq

ESA-2015-091: RSA® Web Threat Detection Cross-Site Request Forgery Vulnerability 2015-06-03
Security Alert (Security_Alert emc com)

Local PHP File Inclusion in ResourceSpace 2015-06-03
High-Tech Bridge Security Research (advisory htbridge ch)

Jildi FTP Client 1.5.2 b1138 - Buffer Overflow Vulnerability 2015-06-03
banana88 inbox com

Safari Address Spoofing - Impact, Code, How It Works, History 2015-06-03
David Leo (david leo deusen co uk)

[SECURITY] [DSA 3249-2] jqueryui security update 2015-06-02
Sebastien Delafond (seb debian org)

Malware

Bot-FKS

TrojanDownloader:Win32/Upatre.BJ

TrojanDownloader:Win32/Upatre.BG

Ransom:Win32/Roduk.A!dllDefCon
Ransom:PowerShell/Roduk.ADefCon
TrojanDownloader:PowerShell/Roduk.ADefCon

Trojan.Ransomcrypt.T

Backdoor.Salgorea.B

Ransom:PowerShell/Polock.A

Phishing

Chase Bank	3rd June 2015
UNLOCK YOUR USER ID
Apple	3rd June 2015
Your Apple ID has expired in less than 48 hours! Sign in To Comfirm Your Apple Id Now .
NatWest	2nd June 2015
PROACTIVELY TAKEN ACTION TO DISABLE ONLINE ACCESS !

Vulnerebility

Exploit

vfront-0.99.2 CSRF & Persistent XSS

WebDrive 12.2 (B4172) - Buffer Overflow Vulnerability

Jildi FTP Client Buffer Overflow PoC

3.6.2015

Bugtraq

[SECURITY] [DSA 3277-1] wireshark security update 2015-06-02
Moritz Muehlenhoff (jmm debian org)

WebDrive 12.2 (B4172) - Buffer Overflow Vulnerability 2015-06-02
Vulnerability Lab (research vulnerability-lab com)

vfront-0.99.2 CSRF & Persistent XSS 2015-06-02
apparitionsec gmail com

Enhanced SQL Portal 5.0.7961 XSS Vulnerability 2015-06-02
apparitionsec gmail com

Freebox OS Web interface 3.0.2 XSS, CSRF 2015-06-01
huyngocbk gmail com

t2'15: Call for Papers 2015 (Helsinki / Finland) 2015-06-01
Tomi Tuominen (tomi tuominen t2 fi)

Malware

Ransom:PowerShell/Polock.A PWS:Win32/OnLineGames.AH

IOS.Oneclickfraud

Phishing

Apple	3rd June 2015
Your Apple ID has expired in less than 48 hours! Sign in To Comfirm Your Apple Id Now .
NatWest	2nd June 2015
PROACTIVELY TAKEN ACTION TO DISABLE ONLINE ACCESS !
limited.services@paypal.com	2nd June 2015
YOUR PAYPAI ACCOUNT WILL BE DEACTIVATED (#PP - 2015)
Joey	1st June 2015
FASHION GIFT

Vulnerebility

Exploit

PonyOS <= 3.0 - tty ioctl() Local Kernel Exploit

2.6.2015

Bugtraq

CVE-2015-4039 - WordPress WP Membership plugin [Stored XSS] 2015-06-01
pan vagenas gmail com

CVE-2015-4038 - WordPress WP Membership plugin [Privilege escalation] 2015-06-01
pan vagenas gmail com

WebDrive Buffer OverFlow PoC 2015-06-01
banana88 inbox com

Ektron CMS 9.10 SP1 - XSS Vulnerability 2015-05-31
jerold v00d00sec com

Ektron CMS 9.10 SP1 - CSRF Vulnerability 2015-05-31
jerold v00d00sec com

[SECURITY] [DSA 3276-1] symfony security update 2015-05-31
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3269-2] postgresql-9.1 regression update 2015-05-31
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3275-1] fusionforge security update 2015-05-30
Salvatore Bonaccorso (carnil debian org)

Malware

IOS.Oneclickfraud

Trojan.Cryptolocker.V

Trojan.ChangeDNS! Html

Phishing

limited.services@paypal.com	2nd June 2015
YOUR PAYPAI ACCOUNT WILL BE DEACTIVATED (#PP - 2015)
Joey	1st June 2015
FASHION GIFT
Ms. Carman L. Lapointe	1st June 2015
UNPAID BENEFICIARY!!!
Paypal	1st June 2015
YOUR ACCOUNT LIMITED - UPDATE YOUR INFORMATION ACCOUNT !!
iTunes	1st June 2015
ITUNES ACCOUNT WAS BEEN FROZEN ID2310A4AB53348E4546EA
Service âœ”	1st June 2015
YOUR PAYPAL ACCOUNT WILL BE LIMITED . âœ”

Vulnerebility

Exploit

Realtek SDK Miniigd UPnP SOAP Command Execution

Airties login-cgi Buffer Overflow

IBM Security AppScan Standard <= 9.0.2 - OLE Automation Array Remote Code Execution

WebDrive 12.2 (Build # 4172) - Buffer OverFlow PoC

D-Link Devices HNAP SOAPAction-Header Command Execution

WordPress dzs-zoomsounds Plugins <= 2.0 - Remote File Upload Vulnerability

Aruba ClearPass Policy Manager Stored XSS

PonyOS <= 3.0 - VFS Permissions Exploit

PonyOS <= 3.0 - ELF Loader Privilege Escalation

1.6.2015

Bugtraq

CVE-2015-4039 - WordPress WP Membership plugin [Stored XSS] 2015-06-01
pan vagenas gmail com

CVE-2015-4038 - WordPress WP Membership plugin [Privilege escalation] 2015-06-01
pan vagenas gmail com

WebDrive Buffer OverFlow PoC 2015-06-01
banana88 inbox com

Ektron CMS 9.10 SP1 - XSS Vulnerability 2015-05-31
jerold v00d00sec com

Ektron CMS 9.10 SP1 - CSRF Vulnerability 2015-05-31
jerold v00d00sec com

[SECURITY] [DSA 3276-1] symfony security update 2015-05-31
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3269-2] postgresql-9.1 regression update 2015-05-31
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3275-1] fusionforge security update 2015-05-30
Salvatore Bonaccorso (carnil debian org)

Malware

Phishing

Paypal	1st June 2015
YOUR ACCOUNT LIMITED - UPDATE YOUR INFORMATION ACCOUNT !!
iTunes	1st June 2015
ITUNES ACCOUNT WAS BEEN FROZEN ID2310A4AB53348E4546EA
Service âœ”	1st June 2015
YOUR PAYPAL ACCOUNT WILL BE LIMITED . âœ”
EARTHLINK	1st June 2015
EARTHLINK RDP AND EMAILS FOR SALE OFFICIAL RESELLER

Vulnerebility

Exploit

IBM Security AppScan Standard <= 9.0.2 - OLE Automation Array Remote Code Execution

WebDrive 12.2 (Build # 4172) - Buffer OverFlow PoC

WordPress dzs-zoomsounds Plugins <= 2.0 - Remote File Upload Vulnerability

PonyOS <= 3.0 - VFS Permissions Exploit

PonyOS <= 3.0 - ELF Loader Privilege Escalation

29.5.2015

Bugtraq

[security bulletin] HPSBHF03340 rev.1 - HP ThinPro Linux and HP Smart Zero Core running HP Easy Setup Wizard, Local Unauthorized Access, Elevation of Privilege 2015-05-28
security-alert hp com

Audacity 2.0.5 contains Arbitrary DLL Injection Code Execution 2015-05-28
mystyle_rahul yahoo co in

[SEARCH-LAB advisory] More than fifty vulnerabilities in D-Link NAS and NVR devices 2015-05-28
Gergely Eberhardt (gergely eberhardt search-lab hu)

DbNinja 3.2.6 Flash XSS Vulnerabilities 2015-05-28
apparitionsec gmail com

Malware

Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4

Phishing

WellsFargo Alert	29th May 2015
Important Update On Your WELLSFARGO Account
PayPal	29th May 2015
Your account PayPal is limited you have to solve the problem in 24 hours
Barclays Bank	28th May 2015
Your Barclays monthly e-statement/document has just arrived.
Sun Trust Banking	27th May 2015
Avoid Notification
Apple	27th May 2015
ALERT: UPDATE YOUR APPLE ACCOUNT. 26/05/2015 08:10:38

Vulnerebility

Exploit

28.5.2015

Bugtraq

[Onapsis Security Advisory 2015-006] SAP HANA Information Disclosure via SQL IMPORT FROM statement 2015-05-27
Onapsis Research Labs (research onapsis com)

[Onapsis Security Advisory 2015-007] SAP HANA Log Injection Vulnerability 2015-05-27
Onapsis Research Labs (research onapsis com)

Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability 2015-05-27
David Coomber (davidcoomber infosec gmail com)

[SECURITY] [DSA 3268-2] ntfs-3g security update 2015-05-26
Salvatore Bonaccorso (carnil debian org)

CVE-2015-4084 - WordPress Free Counter Plugin [Stored XSS] 2015-05-26
pan vagenas gmail com

[SECURITY] [DSA 3273-1] tiff security update 2015-05-25
Moritz Muehlenhoff (jmm debian org)

Synology Photo Station multiple Cross-Site Scripting vulnerabilities 2015-05-25
Securify B.V. (lists securify nl)

Reflected Cross-Site Scripting in Synology DiskStation Manager 2015-05-25
Securify B.V. (lists securify nl)

Command injection vulnerability in Synology Photo Station 2015-05-25
Securify B.V. (lists securify nl)

Malware

Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4

Phishing

Sun Trust Banking	27th May 2015
Avoid Notification
Apple	27th May 2015
ALERT: UPDATE YOUR APPLE ACCOUNT. 26/05/2015 08:10:38
service@paypal.co.uk	26th May 2015
Limited Account
Apple	26th May 2015
âœ” Your recent purchase with your Apple ID.
Skype	25th May 2015
Receipt for your PayPal payment to Skype !

Vulnerebility

Drupal Views Module Access Bypass Vulnerability
2015-05-29
http://www.securityfocus.com/bid/74462

Exploit

WordPress Plugin Free Counter 1.1 Stored XSS

27.5.2015

Bugtraq

Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability 2015-05-27
David Coomber (davidcoomber infosec gmail com)

[SECURITY] [DSA 3268-2] ntfs-3g security update 2015-05-26
Salvatore Bonaccorso (carnil debian org)

CVE-2015-4084 - WordPress Free Counter Plugin [Stored XSS] 2015-05-26
pan vagenas gmail com

[SECURITY] [DSA 3273-1] tiff security update 2015-05-25
Moritz Muehlenhoff (jmm debian org)

Synology Photo Station multiple Cross-Site Scripting vulnerabilities 2015-05-25
Securify B.V. (lists securify nl)

Reflected Cross-Site Scripting in Synology DiskStation Manager 2015-05-25
Securify B.V. (lists securify nl)

Command injection vulnerability in Synology Photo Station 2015-05-25
Securify B.V. (lists securify nl)

[SECURITY] [DSA 3265-2] zendframework regression update 2015-05-24
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3272-1] ipsec-tools security update 2015-05-23
Salvatore Bonaccorso (carnil debian org)

Malware

Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4

Phishing

Apple	27th May 2015
ALERT: UPDATE YOUR APPLE ACCOUNT. 26/05/2015 08:10:38
service@paypal.co.uk	26th May 2015
Limited Accounta
Apple	26th May 2015
âœ” Your recent purchase with your Apple ID.

Vulnerebility

Exploit

WordPress Plugin Free Counter 1.1 Stored XSS

Acoustica Pianissimo 1.0 Build 12 (Registration ID) Buffer Overflow PoC

26.5.2015

Bugtraq

Synology Photo Station multiple Cross-Site Scripting vulnerabilities 2015-05-25
Securify B.V. (lists securify nl)

Reflected Cross-Site Scripting in Synology DiskStation Manager 2015-05-25
Securify B.V. (lists securify nl)

Command injection vulnerability in Synology Photo Station 2015-05-25
Securify B.V. (lists securify nl)

[SECURITY] [DSA 3265-2] zendframework regression update 2015-05-24
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3272-1] ipsec-tools security update 2015-05-23
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3271-1] nbd security update 2015-05-23
Alessandro Ghedini (ghedo debian org)

Malware

Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4

Phishing

Apple	26th May 2015
âœ” Your recent purchase with your Apple ID.
Skype	25th May 2015
Receipt for your PayPal payment to Skype !
iTunes	25th May 2015
ITUNES ACCOUNT WAS BEEN FROZEN ID5377A4A560411EFA6B89
iTunes	25th May 2015
ITUNES ACCOUNT WAS BEEN FROZEN ID5431A4A501521EFAB94D
iTunes	25th May 2015
ITUNES ACCOUNT WAS BEEN FROZEN ID7146A4A545301DC8F95D
Mercantile	25th May 2015
FRESH TOOLS ADDED TO THE SHOP NOW

Vulnerebility

Exploit

Wordpress Video Gallery Plugin 2.8 Arbitrary Mail Relay

WordPress NewStatPress Plugin 0.9.8 Multiple Vulnerabilities

WordPress Landing Pages Plugin 1.8.4 Multiple Vulnerabilities

WordPress GigPress Plugin 2.3.8 - SQL Injection

Apache Jackrabbit WebDAV XXE Exploit

Wordpress MailChimp Subscribe Forms 1.1 Remote Code Execution

Wordpress church_admin Plugin 0.800 Stored XSS

Wordpess Simple Photo Gallery 1.7.8 Blind SQL Injection

Sendio ESP Information Disclosure Vulnerability

Clickheat 1.13+ Remote Command Execution

25.5.2015

Bugtraq

[CORE-2015-0010] - Sendio ESP Information Disclosure Vulnerability 2015-05-22
CORE Advisories Team (advisories coresecurity com)

[SECURITY] [DSA 3270-1] postgresql-9.4 security update 2015-05-22
Christoph Berg (myon debian org)

[SECURITY] [DSA 3268-1] ntfs-3g security update 2015-05-22
Salvatore Bonaccorso (carnil debian org)

Malware

RDN/Generic.grp!hy
Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4

Phishing

iTunes	25th May 2015
ITUNES ACCOUNT WAS BEEN FROZEN ID5377A4A560411EFA6B89
iTunes	25th May 2015
ITUNES ACCOUNT WAS BEEN FROZEN ID5431A4A501521EFAB94D
iTunes	25th May 2015
ITUNES ACCOUNT WAS BEEN FROZEN ID7146A4A545301DC8F95D
Mercantile	25th May 2015
FRESH TOOLS ADDED TO THE SHOP NOW

Vulnerebility

Exploit

FTP Media Server 3.0 - Authentication Bypass and Denial of Service

22.5.2015

Bugtraq

[SECURITY] [DSA 3266-1] fuse security update 2015-05-21
Salvatore Bonaccorso (carnil debian org)

Webgrind XSS vulnerability 2015-05-21
hyp3rlinx gmail com

CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability) 2015-05-21
Julian Reschke (julian reschke greenbytes de)

CVE for Apple's ECDHE-ECDSA SecureTransport bug? 2015-05-20
Jeffrey Walton (noloader gmail com)

[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update 2015-05-20
Salvatore Bonaccorso (carnil debian org)

Malware

Exploit-SWF.x
RDN/Generic.grp!hy
Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4

Phishing

Barclays	21st May 2015
IMPORTANT - ONLINE BANKING UPDATE
Halifax Bank	21st May 2015
PLEASE CHECK ACCOUNT
PayPal Inc,	21st May 2015
NOTICE : YOUR ACCOUNT PAYPAL HAS BEEN LIMITED !

Vulnerebility

Exploit

Microsoft Windows - Local Privilege Escalation (MS15-051)

Windows - CNG.SYS Kernel Security Feature Bypass PoC (MS15-052)

Windows 8.0 - 8.1 x64 - TrackPopupMenu Privilege Escalation (MS14-058)

Forma LMS 1.3 Multiple SQL Injection Vulnerabilities

WordPress WP Symposium Plugin 15.1 SQL Injection Vulnerability

21.5.2015

Bugtraq

[security bulletin] HPSBUX03333 SSRT102029 rev.1 - HP-UX Running NTP, Remote Denial of Service (DoS), or Other Vulnerabilities 2015-05-20
security-alert hp com

[security bulletin] HPSBUX03334 SSRT102000 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Other Vulnerabilities 2015-05-20
security-alert hp com

EisbÃ¤r SCADA (All Versions - iOS, Android & W8) - Persistent UI Vulnerability 2015-05-20
Vulnerability Lab (research vulnerability-lab com)

Stored XSS in WP Photo Album Plus WordPress Plugin 2015-05-20
High-Tech Bridge Security Research (advisory htbridge ch)

WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability 2015-05-20
Vulnerability Lab (research vulnerability-lab com)

ManageEngine EventLog Analyzer V:10.0 CSRF Vulnerability 2015-05-19
akashchavan0708 gmail com

Staff FTP v3.04 Software - DLL Hijacking Vulnerability 2015-05-19
metacom27 gmail com

[SECURITY] [DSA 3263-1] proftpd-dfsg security update 2015-05-19
Sebastien Delafond (seb debian org)

Staff FTP v3.04 Software - DLL Hijacking Vulnerability 2015-05-20
Vulnerability Lab (research vulnerability-lab com)

HiDisk 2.4 iOS - (currentFolderPath) Persistent Vulnerability 2015-05-20
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3264-1] icedove security update 2015-05-19
Moritz Muehlenhoff (jmm debian org)

[security bulletin] HPSBGN03286 rev.1 - HP LoadRunner, Buffer Overflow 2015-05-19
security-alert hp com

APPLE-SA-2015-05-19-1 Watch OS 1.0.1 2015-05-19
Apple Product Security (product-security-noreply lists apple com)

[security bulletin] HPSBPI03322 rev.1 - HP Access Control Software, Local Unauthorized Access 2015-05-19
security-alert hp com

[SECURITY] [DSA 3175-2] kfreebsd-9 security update 2015-05-18
Alessandro Ghedini (ghedo debian org)

WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability 2015-05-19
metacom27 gmail com

iClassSchedule 1.6 iOS & Android - Persistent UI Vulnerability 2015-05-18
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3262-1] xen security update 2015-05-18
Moritz Muehlenhoff (jmm debian org)

OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities 2015-05-18
Vulnerability Lab (research vulnerability-lab com)

Wireless Photo Transfer v3.0 iOS - File Include Vulnerability 2015-05-18
Vulnerability Lab (research vulnerability-lab com)

CRUCMS Crucial Networking - SQL Injection Vulnerability 2015-05-18
Vulnerability Lab (research vulnerability-lab com)

[slackware-security] mozilla-thunderbird (SSA:2015-137-01) 2015-05-17
Slackware Security Team (security slackware com)

ESA-2015-087 EMC Document Sciences xPression SQL Injection Vulnerability 2015-05-16
Security Alert (Security_Alert emc com)

[SECURITY] [DSA 3261-1] libmodule-signature-perl security update 2015-05-15
Salvatore Bonaccorso (carnil debian org)

[SE-2014-02] Unconfirmed / unpatched vulnerabilities in Google App Engine 2015-05-15
Security Explorations (contact security-explorations com)

phpMyAdmin 4.4.6 Man-In-the-Middle API Github 2015-05-14
submit cxsec org

[SECURITY] CVE-2014-7810: Apache Tomcat Security Manager Bypass 2015-05-14
Mark Thomas (markt apache org)

SEC Consult SA-20150514-0 :: Multiple vulnerabilities in Loxone Smart Home (part 2) 2015-05-14
SEC Consult Vulnerability Lab (research sec-consult com)

Sidu 5.2 Admin XSS Vulnerability 2015-05-14
apparitionsec gmail com

Malware

Exploit-SWF.x
RDN/Generic.grp!hy
Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4

Phishing

Microsoft	21st May 2015
Dear Gumtree Member,
USAA	20th May 2015
NEW MESSAGE FROM USAA
Alisha Tarologist	20th May 2015
TELL ME WHAT YOUR BIGGEST WORRY IS
Chase	20th May 2015
Account Security Update
Nationwide Building Society	19th May 2015
NATIONWIDE ACCESS RESTRICTED NOTICE
Barclays	19th May 2015
We need to verify your account

Vulnerebility

Exploit

Phoenix Contact ILC 150 ETH PLC Remote Control Script

WordPress FeedWordPress Plugin 2015.0426 - SQL Injection

Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation

ZOC SSH Client Buffer Overflow Vulnerability (SEH)

Linux/x86 execve "/bin/sh" - shellcode 26 bytes

7.3.2015

Bugtraq

Last Call - Workhsops of CISTI'2015: 10th Iberian Conference on Information Systems and Technologies 2015-03-05
ML (marialemos72 gmail com)

Ultimate PHP Board (UPB) 2.2.7 Cross Site Scripting Vulnerability 2015-03-05
prathan ptr gmail com

[ MDVSA-2015:054 ] bind 2015-03-04
security mandriva com

WeBid 1.1.1 Unrestricted File Upload Exploit 2015-03-04
prathan ptr gmail com

[ MDVSA-2015:055 ] freetype2 2015-03-04
security mandriva com

Malware

RDN/Generic.grp!hy
Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4
RDN/Generic.bfr!1A1B5134B133

Phishing

TV Stream	7th March 2015
Watch TV!
David	6th March 2015
POST FREE CLASSIFIED ADS ON ADSROAD
Paypal	6th March 2015
YOUR PAYPAL ACCOUNT HAS BEEN LIMITED
Wells Fargo	6th March 2015
[ WELLS FARGO ] IMPORTANT NOTIFICATION
PayPal	6th March 2015
PayPal: View your recent activity
Security Centre	5th March 2015
UPDATE YOUR INFORMATION
Barclays	4th March 2015
Barclays - Important Notification.
PayPal	4th March 2015
Issue PP-001-487-280-335

Vulnerebility

Exploit

HP Data Protector 8.10 Remote Command Execution

ProjectSend r561 - SQL Injection Vulnerability

4.3.2015

Bugtraq

[ MDVSA-2015:054 ] bind 2015-03-04
security mandriva com

WeBid 1.1.1 Unrestricted File Upload Exploit 2015-03-04
prathan ptr gmail com

[ MDVSA-2015:055 ] freetype2 2015-03-04
security mandriva com

[CVE-2015-2102] Clipbucket 2.7 RC3 0.9 - Blind SQL Injection 2015-03-04
prathan ptr gmail com

[SECURITY] [DSA 3179-1] icedove security update 2015-03-03
Moritz Muehlenhoff (jmm debian org)

[security bulletin] HPSBST03265 rev.1 - HP VMA SAN Gateway running Bash Shell and OpenSSL, Remote Denial of Service (DoS), Unauthorized Access, and Disclosure of Information 2015-03-03
security-alert hp com

[ MDVSA-2015:052 ] tomcat 2015-03-03
security mandriva com

Malware

RDN/Generic.grp!hy
Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4
RDN/Generic.bfr!1A1B5134B133

Phishing

Barclays	4th March 2015
Barclays - Important Notification.
PayPal	4th March 2015
Issue PP-001-487-280-335

Vulnerebility

Exploit

Symantec Web Gateway 5 restore.php Post Authentication Command Injection

Seagate Business NAS Unauthenticated Remote Command Execution

Solarwinds Orion Service - SQL Injection Vulnerabilities

BEdita CMS 3.5.0 - Multiple Vulnerabilities

PHPMoAdmin Unauthorized Remote Code Execution (0-Day)

Linux Kernel IRET Instruction #SS Fault Handling - Crash PoC

Linux Kernel PPP-over-L2TP Socket Level Handling - Crash PoC

Linux Kernel Associative Array Garbage Collection - Crash PoC

2.3.2015

Bugtraq

[ MDVSA-2015:049 ] cups 2015-03-02
security mandriva com

[CVE-2015-1583] ATutor LCMS - CSRF Vulnerability in Version 2.2 2015-02-28
edricteo outlook sg

BEdita CMS - XSS & CSRF Vulnerability in Version 3.5.0 2015-02-28
edricteo outlook sg

SEC Consult SA-20150227-0 :: Multiple vulnerabilities in Loxone Smart Home 2015-02-27
SEC Consult Vulnerability Lab (research sec-consult com)

Wordpress Media Cleaner Plugin - XSS Vulnerability 2015-02-27
iletisim ismailsaygili com tr

[SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags 2015-02-27
Jeremy Boynes (jboynes apache org)

Malware

Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4
RDN/Generic.bfr!1A1B5134B133
Generic.dx!E87F1C1B381E

Phishing

Satya Vathi	2nd March 2015
BANCA IMI SECURITIES CORP.
Satya Vathi	2nd March 2015
BANK ASIA LTD
PayPal	2nd March 2015
[PayPal] your account information appears to be missing
PayPal	2nd March 2015
IMPORTANT: Please re-update your account information.
EARTH LINK RDP	1st March 2015
WE RE-SELL GENUINE EARTHLINK RDPS( CHANGE OF WEBSITE)
Santander UK	1st March 2015
Santander Bank Important Notification
Halifax	1st March 2015
Update Your Online Account
Payments	1st March 2015
YOUR PENDING PURCHASE
Marilynn Johengen	1st March 2015
Now you can take control over every situation, Deb S!!
service@paypal.co.uk	28th February 2015
YOUR ACCOUNT PAYPAL HAS BEEN LIMITED.
Service PayPal	27th February 2015
Your account is currently restricted.
Alert	27th February 2015
3Ð³Ô NotÑ–cÐµ \| PÐ°ymÐµnt DeclÑ–nÐµÔ
Apple Team	27th February 2015
VERIFY YOUR APPLE ID

Vulnerebility

Exploit

Seagate Business NAS <= 2014.00319 - Pre-Authentication Remote Code Execution (0day)

27.2.2015

Bugtraq

[SECURITY] [DSA 3176-1] request-tracker4 security update 2015-02-26
Salvatore Bonaccorso (carnil debian org)

Wireless File Transfer Pro Android - Multiple CSRF Vulnerabilities 2015-02-26
Vulnerability Lab (research vulnerability-lab com)

Data Source: Scopus CMS - SQL Injection Web Vulnerability 2015-02-26
Vulnerability Lab (research vulnerability-lab com)

DSS TFTP 1.0 Server - Path Traversal Vulnerability 2015-02-26
Vulnerability Lab (research vulnerability-lab com)

D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities 2015-02-26
Peter Adkins (peter adkins kernelpicnic net)

[slackware-security] mozilla-firefox (SSA:2015-056-01) 2015-02-26
Slackware Security Team (security slackware com)

[slackware-security] mozilla-thunderbird (SSA:2015-056-02) 2015-02-26
Slackware Security Team (security slackware com)

[security bulletin] HPSBUX03273 SSRT101951 rev.1 - HP-UX running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities 2015-02-26
security-alert hp com

[security bulletin] HPSBUX03244 SSRT101885 rev.2 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Other Vulnerabilites 2015-02-26
security-alert hp com

[SECURITY] [DSA 3175-1] kfreebsd-9 security update 2015-02-25
Moritz Muehlenhoff (jmm debian org)

[security bulletin] HPSBUX03162 SSRT101885 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Other Vulnerabilites 2015-02-25
security-alert hp com

[SECURITY] [DSA 3174-1] iceweasel security update 2015-02-25
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3173-1] libgtk2-perl security update 2015-02-25
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3172-1] cups security update 2015-02-25
Sebastien Delafond (seb debian org)

Malware

Generic PUP.x!47D5B92EC2DE
Generic Downloader.x!C3BE171842B5
RDN/Generic BackDoor!bbv!681E8DE9F748
Generic.bfr!6EABCAE20244
RDN/Generic.bfr!id!89DA4F0B9AFE
RDN/Generic BackDoor!bbv!63D0D36E010A
Generic.dx!9DA85BB0FFAB
Generic FakeAlert!E35608C04D28
RDN/Generic.tfr!ei!40A74770E65E
RDN/Generic.tfr!ei!57CF1966A13B
RDN/Generic.bfr!id!744B66331525
W32/Spybot.bfr!0391BECB1EFF
RDN/Generic.dx!64703124682A
RDN/Generic PUP.x!C3C9518B2E91
Generic.bfr!AC16DBD5D6E8
RDN/Generic.bfr!id!3A6E60A6E410
RDN/Generic.tfr!ei!2DD5F2DB4CCF
RDN/Generic PWS.y!FA849BA90082
Generic Downloader.x!3F5003F05153
RDN/Generic.dx!djn!3316DFE3E56C
RDN/Generic.dx!djn!3104020682F0
RDN/Generic BackDoor!bbv!3B3C64828E7B
RDN/Generic BackDoor!bbv!4882A71A6585
RDN/Generic PUP.x!0AF6343C4EAB
RDN/Generic.bfr!id!26DB9531DF97
RDN/Generic.dx!djn!3BAFE3140147
Generic PUP.x!DDE5C72A8342
Generic PUP.z!F996094B0BA4
RDN/Generic.bfr!1A1B5134B133
Generic.dx!E87F1C1B381E

Phishing

Musâ…½â…¼e.Gaâ…°ns	26th February 2015
Boost Perforâ…¿anâ…½e anâ…¾ Maâ…¹â…°â…¿ize Your Athâ…¼etiâ…½ Enâ…¾uranâ…½e
Paypal Support	26th February 2015
YOUR PAYPAL ACCOUNT HAS BEEN LIMITEDâœ‰
PayPal	26th February 2015
Important: We noticed unusual activity in your PayPal account (Ref #PP-004-621-793-008)3
Internal Revenue Service	26th February 2015
INCOME TAX REFUND REJECTED
Csloxinfo Internet Service ser	26th February 2015
System Warning!!!
Apple Team	25th February 2015
VERIFY YOUR APPLE ID
Diego Glenn	25th February 2015
After trying this you will never diet again!
Barclays Online	25th February 2015
ACCOUNT SECURITY ALERT.
Bank of America	25th February 2015
Bank of America Alert: Sign in to Online Banking Locked

Vulnerebility

Exploit

26.2.2015

Bugtraq

[SECURITY] [DSA 3169-1] eglibc security update 2015-02-23
Aurelien Jarno (aurel32 debian org)

[SECURITY] [DSA 3168-1] ruby-redcloth security update 2015-02-22
Sebastien Delafond (seb debian org)

CVE-2014-8487: Kony EMM insecurity Direct Object Reference 2015-02-22
michael hendrickx helpag com

[SECURITY] [DSA 3167-1] sudo security update 2015-02-22
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3166-1] e2fsprogs security update 2015-02-22
Michael Gilbert (mgilbert debian org)

[SECURITY] [DSA 3165-1] xdg-utils security update 2015-02-22
Michael Gilbert (mgilbert debian org)

[SECURITY] [DSA 3171-1] samba security update 2015-02-23
Salvatore Bonaccorso (carnil debian org)

Malware

RDN/Generic.dx!djl!A782C2548727
Generic PUP.x!A8E86E585ADA
Generic PUP.x!A7779D616CA5
Generic PUP.z!2C1F2C934005
RDN/Generic.bfr!id!BBF9DB1F1E3D
RDN/Generic BackDoor!bb3!3E23EEAE42AA
RDN/StartPage-CQ!c!12A6C161820C
RDN/Spybot.bfr!40F29AB4C339
RDN/Spybot.bfr!41743C60B87A
Generic PUP.z!393D64577F4B
RDN/Generic.dx!djl!B177488FF277
Generic BackDoor!B3B73964FE47
RDN/Generic.dx!djl!B1F83451D13D
RDN/Generic.dx!2866436408EA
RDN/Generic.bfr!B49CADDC45EA
RDN/Generic.bfr!id!B8E2EB87196D
RDN/Generic BackDoor!bb3!BD9FA1986446
RDN/Generic.dx!djl!9B51352A08D4
RDN/Generic PUP.x!A0A0B84662B6
W32/Spybot.bfr!A053813168FD
RDN/Generic.grp!ia!003F4ABAFC5D
RDN/Spybot.bfr!17A0546D71D1
W32/Nabucur!2002CBEA82DD
RDN/Spybot.bfr!2805CF524AF8
RDN/Generic PWS.y!bct!890FCC431415
Ransom!0AA2F54E9FFA
Generic.dx!8022F8836C59
RDN/Generic PWS.y!A3A716E2192E
RDN/Downloader.gen.a!6903120E1CCB
RDN/Generic PUP.x!c2a!9E0DE784E882

Phishing

Csloxinfo Internet Service ser	26th February 2015
System Warning!!!
Apple Team	25th February 2015
VERIFY YOUR APPLE ID
Diego Glenn	25th February 2015
After trying this you will never diet again!
Barclays Online	25th February 2015
ACCOUNT SECURITY ALERT.
Bank of America	25th February 2015
Bank of America Alert: Sign in to Online Banking Locked
Apple Team	24th February 2015
VERIFY YOUR APPLE ID
PayPal	24th February 2015
Your PayPal Account Will Be Closed ! Please Update Your Account

Vulnerebility

Exploit

25.2.2015

Bugtraq

[SECURITY] [DSA 3169-1] eglibc security update 2015-02-23
Aurelien Jarno (aurel32 debian org)

[SECURITY] [DSA 3168-1] ruby-redcloth security update 2015-02-22
Sebastien Delafond (seb debian org)

CVE-2014-8487: Kony EMM insecurity Direct Object Reference 2015-02-22
michael hendrickx helpag com

[SECURITY] [DSA 3167-1] sudo security update 2015-02-22
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3166-1] e2fsprogs security update 2015-02-22
Michael Gilbert (mgilbert debian org)

[SECURITY] [DSA 3165-1] xdg-utils security update 2015-02-22
Michael Gilbert (mgilbert debian org)

Malware

RDN/Generic Downloader.x!mt!A1EB06E12558
RDN/Downloader.gen.a!4D289BA21246
RDN/Downloader.gen.a!3996A43F450A
Generic.bfr!3E093AD84312
Generic.dx!2B110F720C58
RDN/Generic.tfr!ei!6BB2D748BD16
RDN/Downloader.gen.a!6B691EF24F81
RDN/Generic BackDoor!bb3!1388A03040C3
RDN/Downloader.gen.a!51D92143C853
RDN/Downloader.gen.a!4FAAEBFBDDB6
RDN/Generic Downloader.x!B5B7D38EC65C
RDN/Downloader.gen.a!51E5D557C592
RDN/Downloader.gen.a!518E5A2DE8F8
RDN/Downloader.gen.a!50971DB1FCFD
Generic.bfr!193EC9CF4578
W32/Sality.gen!37B24D6FE482
RDN/Downloader.gen.a!031BA981D8BB
RDN/Generic.dx!4C60DEBFDE55
RDN/Generic.dx!380F439A2BDD
RDN/Generic Dropper!wd!F77DD033EEAD
RDN/Downloader.gen.a!6DDE6FAEC82F
GenericR-DAM!83465DB5A767
RDN/Downloader.gen.a!5EFBA7E7E18E
RDN/Downloader.gen.a!5F4A1C61B63C
RDN/Downloader.gen.a!4B347FD38EAD
RDN/Generic.dx!djl!A37382DAE042
RDN/Downloader.gen.a!4E2922DC3BED
Generic.tfr!304E7F9A4793
RDN/Downloader.gen.a!45FB9D6371A6
Generic.dx!45A6CB5637E1

Phishing

Apple Team	24th February 2015
VERIFY YOUR APPLE ID
PayPal	24th February 2015
Your PayPal Account Will Be Closed ! Please Update Your Account
AppeID Support	23rd February 2015
Verify Your Apple ID
Daniel Paez	23rd February 2015
Account Notification!!

Vulnerebility

Exploit

HP Client Automation Command Injection

24.2.2015

Bugtraq

[SECURITY] [DSA 3169-1] eglibc security update 2015-02-23
Aurelien Jarno (aurel32 debian org)

[SECURITY] [DSA 3168-1] ruby-redcloth security update 2015-02-22
Sebastien Delafond (seb debian org)

CVE-2014-8487: Kony EMM insecurity Direct Object Reference 2015-02-22
michael hendrickx helpag com

[SECURITY] [DSA 3167-1] sudo security update 2015-02-22
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3166-1] e2fsprogs security update 2015-02-22
Michael Gilbert (mgilbert debian org)

[SECURITY] [DSA 3165-1] xdg-utils security update 2015-02-22
Michael Gilbert (mgilbert debian org)

[SECURITY] [DSA 3171-1] samba security update 2015-02-23
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3164-1] typo3-src security update 2015-02-21
Moritz Muehlenhoff (jmm debian org)

Malware

RDN/Generic PWS.y!bct!23B47C46A0FF
RDN/Generic BackDoor!7A67E3986342
W32/Nabucur!82A06F7CE023
RDN/Generic PWS.y!bct!8F8333ABA99C
RDN/Generic.bfr!ic!86022D6615B1
RDN/Generic.tfr!ei!572B20E1C2DD
RDN/Generic Downloader.x!ms!ADE709B3A8E4
RDN/Generic BackDoor!9EF080A50A42
RDN/Generic PWS.y!bct!65598F56A633
RDN/Generic BackDoor!bbs!00AB15DA7E1F
RDN/Generic.dx!djk!A6BD6E0F1E20
Generic.bfr!B6B12D427296
RDN/Generic.dx!djk!00542E465F70
RDN/Generic Downloader.x!ms!006958E9507D
Generic PUP.z!C9469E0932BC
RDN/Generic.dx!djk!0071BE0F2EA1
Generic.bfr!B53D1E4C2C12
RDN/Generic Downloader.x!ms!001AF8671137
Generic.bfr!0606718B719F
Generic.bfr!A199BA80C2D0
RDN/Generic.dx!djk!7666C239638F
RDN/Generic PUP.z!70847FF10C68
RDN/Generic.bfr!C301BE4517A6
Generic PUP.z!F8BE0AC8530D
Generic BackDoor!985306BD6598
Generic PUP.z!5368C10B75C2
W32/Nabucur!822542E984B0
RDN/Generic BackDoor!40931031274F
RDN/Generic BackDoor!bbk!4AEAB9A14588
RDN/Spybot.bfr!746832399280

Phishing

PayPal	24th February 2015
Your PayPal Account Will Be Closed ! Please Update Your Account
AppeID Support	23rd February 2015
Verify Your Apple ID
Daniel Paez	23rd February 2015
Account Notification!!

Vulnerebility

Exploit

WeBid 1.1.1 Unrestricted File Upload Exploit

Clipbucket 2.7 RC3 0.9 - Blind SQL Injection

Zabbix 2.0.5 - Cleartext ldap_bind_password Password Disclosure (MSF)

Zeuscart v.4 - Multiple Vulnerabilities

phpBugTracker 1.6.0 - Multiple Vulnerabilities

WordPress Easy Social Icons Plugin 1.2.2 - CSRF Vulnerability

PHP DateTime Use After Free Vulnerability

23.2.2015

Bugtraq

iTunes 12.1.1 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:\Program Files\... 2015-02-19
Stefan Kanthak (stefan kanthak nexgo de)

Defense in depth -- the Microsoft way (part 28): yes, we can (create even empty, but properly quoted pathnames) 2015-02-19
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3163-1] libreoffice security update 2015-02-19
Alessandro Ghedini (ghedo debian org)

Malware

W32/Nabucur!FD0A5300782D
Generic.bfr!C883EEC3831C
RDN/Generic Dropper!DDEF940D1C24
RDN/Generic.bfr!ic!F856C2392213
RDN/Generic.tfr!ei!619A673BFADE
Generic Downloader.x!1726C3C24D5B
Generic.bfr!AA26B5366EBC
Generic.bfr!D9478C899259
Generic.bfr!080AD7EA055F
RDN/Generic Downloader.bfr!4D600F4637D9
RDN/Generic PUP.x!FC9265D268D2
RDN/Generic Dropper!0BFD505E7330
RDN/Generic.bfr!A5F8CFB9ACC3
RDN/Generic.dx!05D6F6B7C44E
Generic.dx!6267083D71F2
Generic.bfr!EC597019C9D3
Generic.bfr!EB62AEDC43EE
Generic.bfr!BB1134E71CE2
Generic.bfr!D874E401DA49
RDN/Generic.dx!7323DCABA891
W32/Nabucur!BE65C017F802
RDN/Generic PUP.x!BD5C35234657
Generic.bfr!E0DA23D8A3A5
RDN/Downloader.a!uo!6435998D37B7
RDN/Generic BackDoor!C8A687CD3B2D
Generic.bfr!E3469AA9FAF8
Generic.bfr!07A826E33C9D
Generic.dx!FDA67CEDBF74
Generic.bfr!CFEEB5875C54
Generic.bfr!E1ED4A23684A

Phishing

Virgin Media	22nd February 2015
An update from Virgin Media

Vulnerebility

Exploit

22.2.2015

Bugtraq

iTunes 12.1.1 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:\Program Files\... 2015-02-19
Stefan Kanthak (stefan kanthak nexgo de)

Defense in depth -- the Microsoft way (part 28): yes, we can (create even empty, but properly quoted pathnames) 2015-02-19
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3163-1] libreoffice security update 2015-02-19
Alessandro Ghedini (ghedo debian org)

[SECURITY] [DSA 3162-1] bind9 security update 2015-02-18
Florian Weimer (fw deneb enyo de)

PHP Code Execution in jui_filter_rules Parsing Library 2015-02-18
Timo Schmid (tschmid ernw de)

Malware

RDN/Generic PWS.y!bcr!8E85F42EC2F7
Generic.bfr!DCD505B1E2E9
Generic.bfr!DB7D84B5A171
Generic.bfr!DDB5E6DA7E1A
RDN/Generic PUP.z!2F5EEC00F6A9
Generic.bfr!DB1E61D41072
Generic.bfr!DB0458B0B2B7
Generic.bfr!EF6611A46EBA
RDN/Generic.bfr!ic!88D857A54CC1
RDN/Generic.bfr!ic!C935A69FB40A
Generic.bfr!DBC109FB2298
Generic.bfr!DC458CC2F0C4
RDN/Generic.grp!7BDD7D8121A7
Generic.bfr!DAFD84BAA736
Generic.bfr!DAD504D8CA5F
Generic.bfr!DAB520422F1E
Generic.bfr!6CDAF9426679
RDN/Generic BackDoor!bbs!72D3BF138D46
Generic.bfr!DA151018862A
RDN/Generic.grp!70D1AAD09EA3
Generic PUP.x!5C64AD1BED9C
Generic.bfr!DAA39857BC00
Generic.bfr!DA3BD0BEEF22
Generic.bfr!DA80F4CD675F
RDN/Spybot.bfr!p!73734738686E
RDN/Generic.dx!djh!6FC7F88F7F76
RDN/Generic.dx!EE4CF940457C
Generic.bfr!DB23683B8674
Generic Downloader.x!72619AFA412D
RDN/Generic PWS.y!bcr!8B900F9BCC2F

Phishing

RXX_VIAGRA	22nd February 2015
Save 30%
PayPal	22nd February 2015
[ PayPal ] : View your recent activity . #PP = 69901296200527096
PayPal Inc Service	21st February 2015
IMPORTANT NOTICE
Pvsatyanarayana Raju	21st February 2015
LLOYDS TSB BANK PLC.
First Online	21st February 2015
Login Alert
service@paypal	20th February 2015
CP A Y P A L : ACCOUNT SUSPENDED
PayPaI Service	20th February 2015
DEAR COSTUMER : PLEASE CHECK YOUR ACCOUNT
PayPal	20th February 2015
[ PayPal ] : 39View your recent activity . âœ” #PP 896482440
PayPal	20th February 2015
[ PayPal ] : 36View your recent activity . âœ” #PP 15935677467159348
Apple	20th February 2015
[SUSPICIOUS MESSAGE] Please verify your Apple ID 20/02/2015 12:38:14
PayPal	20th February 2015
Reminder: Your account will be limted until we hear from you

Vulnerebility

Exploit

19.2.2015

Bugtraq

PHP Code Execution in jui_filter_rules Parsing Library 2015-02-18
Timo Schmid (tschmid ernw de)

[CVE-2015-1517] Piwigo - SQL Injection in Version 2.7.3 2015-02-18
sven bsddaemon org

[RT-SA-2014-016] Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite 2015-02-18
RedTeam Pentesting GmbH (release redteam-pentesting de)

Crushftp 7.2.0 - Multiple CSRF & XSS Vulnerabilitiesþ 2015-02-17
Rehan Ahmed (knight_rehan hotmail com)

Malware

RDN/Generic.dx!djf!593D91D70983
RDN/Generic.dx!djf!EF9E818ADF54
Generic.bfr!200B84809135
Generic PUP.z!E8F0A6126272
Generic PUP.z!B94221B67251
RDN/Generic.tfr!41A3490AE7FA
Generic PUP.x!00DE2BA47CAD
RDN/Generic Downloader.x!mr!4B928E0F961B
RDN/Generic PUP.z!fc!3509A1A98309
RDN/Generic Downloader.x!mr!4A67720CAB96
RDN/Generic.dx!3449D60DBB8D
Generic Downloader.x!1E7DE45A54C2
RDN/Generic.dx!2276A6EE5296
Generic PUP.z!B27B3E6740A2
RDN/Generic PUP.z!fc!0F64E56F768D
RDN/Generic PUP.z!fc!D7D856F3B930
Generic PUP.z!DFB9DCB9BD6B
Generic Downloader.x!D6BEA77C1868
Generic.dx!06EEFBD1DAFB
RDN/Generic BackDoor!bbr!DDC86D6259BF
RDN/Spybot.bfr!D2EC7DD2981A
RDN/Generic Dropper!wc!9D9CCDDC3B05
Generic PUP.x!AD99F29BF3DA
Generic PUP.z!45A2ABC5485A
Generic.dx!43FBE27F15CF
Generic.tfr!CBBF86C4038D
Generic PUP.z!84D36C4F703E
Generic.grp!1C1139948DF1
Generic PUP.x!CD5109DB400A
RDN/Generic PUP.z!CD5C1A0114B7

Phishing

Vulnerebility

Exploit

18.2.2015

Bugtraq

NetGear WNDR Authentication Bypass / Information Disclosure 2015-02-17
Peter Adkins (peter adkins kernelpicnic net)

Ebay Inc Magento Bug Bounty #5 - Persistent Validation & Mail Encoding Web Vulnerability 2015-02-17
Vulnerability Lab (research vulnerability-lab com)

CVE-2015-1614 csrf/xss in in wordpress Plugin Image Metadata cruncher 2015-02-17
kingkaustubh me com

[slackware-security] sudo (SSA:2015-047-03) 2015-02-16
Slackware Security Team (security slackware com)

[slackware-security] patch (SSA:2015-047-01) 2015-02-16
Slackware Security Team (security slackware com)

[slackware-security] seamonkey (SSA:2015-047-02) 2015-02-16
Slackware Security Team (security slackware com)

Reflected File Download in AOL Search Website 2015-02-16
Ricardo Iramar dos Santos (riramar gmail com) (1 replies)

Malware

Generic PUP.z!C29AE8EB56F2
RDN/Generic Dropper!wc!8C2FAE708392
RDN/Generic BackDoor!bbr!8FF602F4CE68
RDN/Generic.dx!djf!9D4149CAD8E5
W32/Nabucur!7738F75816CC
RDN/Generic PUP.z!034E7ED7020A
Generic.bfr!52394B4514BD
Downloader-FSH!3BBFA0A910A7
RDN/Generic.bfr!ic!042D515141E2
Generic.bfr!20EBAE286C06
RDN/Generic.dx!djf!FDE7BDE7B04D
RDN/Spybot.bfr!205842EFEB7B
Generic BackDoor!627CB67F126D
Generic.dx!1E23B8D32CE2
Downloader.gen.a!1A3AEABD19B8
RDN/Generic.tfr!497531700FB7
Generic PUP.z!B9D958C7DD4C
Generic.bfr!1EFE872D0991
RDN/Downloader.gen.a!6D9121989853
RDN/Generic.dx!EEA4D30599B7
Generic.bfr!032C04E9E284
RDN/Spybot.bfr!p!3200F8126047
RDN/Generic.grp!39FE3510BDD4
RDN/Generic.tfr!2042030924D6
RDN/Generic PUP.z!fc!7CFE40E19108
RDN/Generic.hra!ce!3DEEED3B0108
Generic.tfr!C654A8719DC3
GenericR-CZG!8BC197C4F35C
RDN/Generic PUP.z!6A9EF519BB05
RDN/Generic.bfr!00153955E305

Phishing

Customer Service.Amazon	16th February 2015
Verification-Amazon:Ticket Number PA8-9UP-P84-398SD2-5RD91X099P.
Barclays Online	16th February 2015
ACCOUNT SECURITY ALERT.
Chase Bank	16th February 2015
[ CHASE BANK ] Important Notification
PayPal	16th February 2015
[PayPal]:You Account Has Been Limited !!
PayPal	16th February 2015
IMPORTANT MESSAGE FROM PAYPAL-TEAM.

Vulnerebility

Exploit

X360 VideoPlayer ActiveX Control Buffer Overflow

Java JMX Server Insecure Configuration Java Code Execution

Guppy CMS 5.0.9 & 5.00.10 Authentication Bypass/Change Email

GuppY CMS 5.0.9 & 5.00.10 Multiple CSRF Vulnerabilities

17.2.2015

Bugtraq

Reflected File Download in AOL Search Website 2015-02-16
Ricardo Iramar dos Santos (riramar gmail com) (1 replies)

Re: Reflected File Download in AOL Search Website 2015-02-16
Mike Antcliffe (mikeantcliffe logicallysecure com)

Multiple Cross site scripting in wordpress Plugin Image Metadata cruncher 2015-02-15
kingkaustubh me com

Cosmoshop - XSS on Admin-Login Mask 2015-02-14
innate gmx de

[CVE-2015-1585] Fat Free CRM - CSRF Vulnerability in Version 0.13.5 2015-02-14
sven bsddaemon org

CVE-2015-1593 - Linux ASLR integer overflow: Reducing stack entropy by four 2015-02-14
Hector Marco (hecmargi upv es)

CVE-2015-1600 - Netatmo Weather Station Cleartext Password Leak 2015-02-13
jullrich sans edu

UNIT4 Prosoft HRMS XSS Vulnerability 2015-02-13
jerold v00d00sec com

[security bulletin] HPSBGN03258 rev.1 - HP Insight Control server deployment Windows Pre-boot Execution Environment, Microsoft Schannel (Winshock) Remote Code Execution 2015-02-13
security-alert hp com

Malware

RDN/Generic.dx!3E341076E464
Generic.tfr!4CB617EB1566
RDN/Generic.bfr!ic!E73DC74F1535
RDN/Generic BackDoor!bbr!C8AA35AD149F
Generic PUP.x!3A88AE4B6F1E
Generic Downloader.x!A8F0F1BCBC06
Generic PUP.z!8BDD6503D1C4
Generic PUP.z!8B17A24F05B0
Generic.grp!8B00F6BBB60E
Generic.dx!6FBBFDA98466
RDN/Generic PWS.y!E5FB0B1F0FAC
RDN/Generic.dx!E614E42DBD43
RDN/Generic Downloader.x!4ADDC8DE73DE
4shared!7FCBB00E3590
RDN/Generic Dropper!wc!E4A3C7D614A4
RDN/Generic.tfr!ei!3975B00C3B35
Generic Downloader.x!39A9182DDB11
4shared!D0948D6919DD
Generic PUP.z!8A5627477584
4shared!74A37CF83F82
RDN/Generic Dropper!wc!E5A37F87EAE8
Generic PUP.x!8D91BF01B5D9
RDN/Generic Downloader.x!mr!0ECF7FB6409F
RDN/Generic PWS.y!bcr!E34453E576F3
RDN/Generic PWS.y!E41C09AAF3AF
RDN/Generic PWS.y!E37CCF377091
RDN/Generic Malware.jb!c!59DB7B3C21B2
Generic PUP.z!8945C6981CD3
Generic PUP.z!88DC5000E5BB
RDN/Generic.bfr!E3295DF5E207

Phishing

Customer Service.Amazon	16th February 2015
Verification-Amazon:Ticket Number PA8-9UP-P84-398SD2-5RD91X099P.
Barclays Online	16th February 2015
ACCOUNT SECURITY ALERT.
Chase Bank	16th February 2015
[ CHASE BANK ] Important Notification
PayPal	16th February 2015
[PayPal]:You Account Has Been Limited !!
PayPal	16th February 2015
IMPORTANT MESSAGE FROM PAYPAL-TEAM.
Tesco Bank	15th February 2015
PLEASE CONFIRM YOUR ONLINE BANKING ACCOUNT

Vulnerebility

Exploit

eTouch SamePage 4.4.0.0.239 - Multiple Vulnerabilities

16.2.2015

Bugtraq

UNIT4 Prosoft HRMS XSS Vulnerability 2015-02-13
jerold v00d00sec com

CVE-2015-1574 - Google Email App 4.2.2 remote denial of service 2015-02-13
Hector Marco (hecmargi upv es)

Malware

W32/Nabucur!FE3B8E2429A5
RDN/Generic PUP.z!CD2A27BA3335
W32/Nabucur!AB261E1FF731
RDN/Spybot.bfr!p!7456266404ED
RDN/Generic BackDoor!4F3454D621E2
GenericR-CYY!D5CF39E97A22
RDN/Generic.dx!djf!036825D51B88
RDN/Generic.tfr!ei!037A5BBFD289
RDN/Generic.dx!djf!74D9ACEB45AC
RDN/Generic BackDoor!bbr!FB30C90F4A32
W32/Nabucur!D402DFB53514
RDN/DNSChanger.bfr!f!1C0649EF0A43
RDN/Generic PWS.y!965091106961
Downloader.gen.a!80D48BCEA30B
Generic Downloader.x!7E5A7D349451
RDN/Generic BackDoor!AB7086BDE935
RDN/Downloader.a!uo!F9C8DF52B261
RDN/Generic.tfr!9B55D1D14EDE
Generic BackDoor!CB24BA5414CD
RDN/FakeAV-M.bfr!i!A328729FFD12
W32/Nabucur!AE618BF80BED
RDN/Generic.dx!djf!98B59D41374C
Generic FakeAlert!98FFAB2636BA
Generic FakeAlert!A6E607CAC5D4
Generic FakeAlert!CAD88EAB989F
Generic PUP.z!F56E62C26082
RDN/Generic BackDoor!BB7CC50935BD
RDN/Generic PUP.x!0FD62BC63AF1
Generic PUP.z!3F83018CC005
RDN/Spybot.bfr!3F5F9CF7B6FE

Phishing

Chase Bank	16th February 2015
[ CHASE BANK ] Important Notification
PayPal	16th February 2015
[PayPal]:You Account Has Been Limited !!
PayPal	16th February 2015
IMPORTANT MESSAGE FROM PAYPAL-TEAM.
Tesco Bank	15th February 2015
PLEASE CONFIRM YOUR ONLINE BANKING ACCOUNT
American Express	15th February 2015
Unusual activity in your American Express account

Vulnerebility

Exploit

13.2.2015

Bugtraq

[ MDVSA-2015:046 ] ntp 2015-02-12
security mandriva com

[ MDVSA-2015:045 ] e2fsprogs 2015-02-12
security mandriva com

[ MDVSA-2015:047 ] elfutils 2015-02-12
security mandriva com

[ MDVSA-2015:048 ] postgresql 2015-02-12
security mandriva com

[ MDVSA-2015:044 ] perl-Gtk2 2015-02-12
security mandriva com

Open-Xchange Security Advisory 2015-02-12 2015-02-12
Martin Heiland (martin heiland open-xchange com)

Shakacon 2015 Last Call for Papers (July 6-9 2015, Honolulu, Hawaii) 2015-02-12
Jonathan Brossard (endrazine gmail com)

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software 2015-02-11
Cisco Systems Product Security Incident Response Team (psirt cisco com)

[SECURITY] [DSA 3161-1] dbus security update 2015-02-11
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3160-1] xorg-server security update 2015-02-11
Moritz Muehlenhoff (jmm debian org)

Malware

RDN/Generic BackDoor!bbr!93842C94C78F
RDN/Generic BackDoor!bbr!A31F33B21B71
RDN/Generic BackDoor!bbr!E93BC710CB2C
RDN/Generic.dx!EBF91D6E3224
Generic.bfr!0262C498EEF1
RDN/Generic.bfr!90E0FA68F2C5
W32/Nabucur!7CE3FF841163
Generic.bfr!00A2BB2CA651
RDN/Generic.dx!dj3!91638CEED9F1
RDN/BackDoor-FBSA!a!25336C9D4A13
RDN/Spybot.bfr!7A400037FAB1
W32/Sdbot.worm!FEA7847C1048
RDN/Generic.bfr!ic!4BB5A4B987DD
RDN/Generic PUP.z!fc!8EBC07F79354
PWS-Mmorpg.gen!10ADACE4567C
RDN/Generic.tfr!8D6803A22C9E
RDN/Generic.dx!dj3!22B6F59E26CF
RDN/Keylog-Ardamax.dll!6EAC872398BA
Generic PUP.x!8AB289685704
Generic.tfr!899311523978
RDN/Generic Dropper!5869456F8066
RDN/Generic Malware.bj!85961D924D18
RDN/Autorun.worm.gen!C6847562ECEC
Generic.bfr!F04426234A54
Generic.bfr!F9090514609D
RDN/Spybot.bfr!86F22FD46930
Generic BackDoor!88CF9700093E
RDN/Generic.dx!F2251649A098
Generic.dx!872B8DB65909
RDN/Generic BackDoor!bbr!815A104EC022

Phishing

PayPal	12th February 2015
[IMPORTANT] : YOUR ACCOUNT WILL BE LIMITED , PLEASE UPDATE YOUR INFORMATION âœ”
PayPal Inc.	12th February 2015
PAYPAL \|SECURITY TEAM :YOUR ACCOUNT PAYPAL HAS BEEN LIMITED.

Vulnerebility

Exploit

Exponent CMS 2.3.1 - Multiple XSS Vulnerabilities

Wordpress Video Gallery 2.7.0 - SQL Injection Vulnerability

12.2.2015

Bugtraq

[SECURITY] [DSA 3160-1] xorg-server security update 2015-02-11
Moritz Muehlenhoff (jmm debian org)

Elasticsearch vulnerability CVE-2015-1427 2015-02-11
Kevin Kluge (kevin kluge elasticsearch com)

Cisco Security Advisory: Cisco Secure Access Control System SQL Injection Vulnerability 2015-02-11
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Ninja Forms WordPress Plugin Multiple Cross-Site Scripting Vulnerability 2015-02-11
sn 1dn eu

[ANN] MSKB 3004375 available for Windows 2000 and later too (but NOT from Mcirosoft) 2015-02-11
Stefan Kanthak (stefan kanthak nexgo de)

T-Mobile Internet Manager - DLL Hijacking (mfc71enu.dll) 2015-02-11
Vulnerability Lab (research vulnerability-lab com)

Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability 2015-02-11
Vulnerability Lab (research vulnerability-lab com)

BlinkSale Bug Bounty #1 - Encode & Validation Vulnerability 2015-02-11
Vulnerability Lab (research vulnerability-lab com)

Facebook Bug Bounty #23 - Session ID & CSRF Vulnerability 2015-02-11
Vulnerability Lab (research vulnerability-lab com)

Multiple Vulnerabilities in my little forum 2015-02-11
High-Tech Bridge Security Research (advisory htbridge com)

Two Reflected XSS Vulnerabilities in Easing Slider WordPress Plugin 2015-02-11
High-Tech Bridge Security Research (advisory htbridge com)

[SECURITY] [DSA 3159-1] ruby1.8 security update 2015-02-10
Alessandro Ghedini (ghedo debian org)

[ MDVSA-2015:043 ] otrs 2015-02-10
security mandriva com

[ MDVSA-2015:041 ] cabextract 2015-02-10
security mandriva com

[ MDVSA-2015:040 ] zarafa 2015-02-10
security mandriva com

[ MDVSA-2015:042 ] clamav 2015-02-10
security mandriva com

[security bulletin] HPSBMU03246 rev.1 - HP Insight Control for Linux Central Management Server Pre-boot Execution Environment running Bash Shell, Multiple Vulnerabilities 2015-02-10
security-alert hp com

[security bulletin] HPSBMU03245 rev.1 - HP Insight Control server deployment Linux Preboot Execution Environment running Bash Shell, Multiple Vulnerabilities 2015-02-10
security-alert hp com

[security bulletin] HPSBGN03255 rev.1 - HP OpenCall Media Platform (OCMP) running SSLv3, Remote Denial of Service (DoS),Disclosure of Information 2015-02-10
security-alert hp com

[ MDVSA-2015:039 ] glibc 2015-02-10
security mandriva com

[RT-SA-2014-013] Cross-Site Scripting in IBM Endpoint Manager Relay Diagnostics Page 2015-02-10
RedTeam Pentesting GmbH (release redteam-pentesting de)

Mooplayer 1.3.0 'm3u' SEH Buffer Overflow POC 2015-02-10
saman j l33t gmail com

[security bulletin] HPSBGN03251 rev.1 - HP Storage Essentials running SSLv3, Remote Disclosure of Information 2015-02-09
security-alert hp com

[SECURITY] [DSA 3158-1] unrtf security update 2015-02-09
Salvatore Bonaccorso (carnil debian org)

[SECURITY] CVE-2014-0227 Apache Tomcat Request Smuggling 2015-02-09
Mark Thomas (markt apache org)

Cookie hijacking: Internet Explorer UXSS (CVE-2015-0072) 2015-02-09
bhdresh gmail com

Radexscript CMS 2.2.0 - SQL Injection vulnerability 2015-02-09
ITAS Team (itas team itas vn)

Malware

Generic PUP.z!1DB9E0B63BB3
Generic.bfr!DADA04B2F630
Generic PUP.z!328E83851A87
RDN/Generic.tfr!ei!7A0DF0FB17E0
Generic PUP.z!E2F6BD605DED
Generic Downloader.x!362E18FFD4CA
RDN/Generic BackDoor!bbr!7F239C3E92AC
Generic.bfr!EC71A26CA59D
Generic PUP.z!2E1F98AEAAB9
Generic PUP.z!DD3B5200DA91
RDN/Generic.dx!73D755C25D91
Generic PUP.x!72D866863849
Generic PUP.x!240806CE3545
Generic.bfr!C400F7019EBC
Generic PUP.x!D0DCD4E07D04
Generic PUP.x!FAB498C571DC
RDN/Generic.bfr!B268482C3872
Generic PUP.z!E92F6BA9A1B2
Generic PUP.x!E9660DCB0F34
Generic.bfr!D06D080C13BB
Generic PUP.z!E954A73C2BE1
Generic.bfr!97884EF2FC48
W32/PdfCrypt.b!899BC1372DD9
Generic.tfr!FACF45AA13A1
RDN/Spybot.bfr!38CC11FC53DC
Generic.dx!994F43805A6F
Generic.tfr!6B3193792EDE
Generic.tfr!C78540207BAA
Generic.bfr!D0B1707EE0AA
Generic PUP.z!A8F5FC66ABC4

Phishing

PayPal	12th February 2015
[IMPORTANT] : YOUR ACCOUNT WILL BE LIMITED , PLEASE UPDATE YOUR INFORMATION âœ”
PayPal Inc.	12th February 2015
PAYPAL \|SECURITY TEAM :YOUR ACCOUNT PAYPAL HAS BEEN LIMITED.
PayPal Inc.	11th February 2015
PAYPAL \|SECURITY TEAM :YOUR ACCOUNT PAYPAL HAS BEEN LIMITED.
alerts@citibank.com	11th February 2015
Suspicious Account Activity Reference wvAt77y
Apple iTunes	11th February 2015
YOUR RECENT DOWNLOAD WITH YOUR APPLE ID
service@paypal.co.uk	11th February 2015
WE'VE IIMITED ACCESS TO YOUR PAYPAI ACCOUNT
Mr. Ban Ki-Moon	11th February 2015
ATM VISA CARD US 2000,000,00,
Whats AppNotifier	10th February 2015
INCOMING VOICEMAIL(S) AT FEB 10
NATWEST BANK	9th February 2015
New Message From Natwest Bank
PayPal	9th February 2015
[ Paypal ] Your account will be closed within 74 hours , please check your account information 09/02/2015
NatWest	9th February 2015
* * Your access to NatWest Services is locked fiona@19mills.fsnet.co.uk
PaypaI Service	9th February 2015
ACCOUNT NOTIFICATION
Wells Fargo Online	9th February 2015
WELLSFARGO ONLINE MAINTENANCE.
Support@PayPal.com	8th February 2015
WE'RE INVESTIGATING A PAYPAI PAYMENT REVERSAI (CASE ID #PP-003-498-237-832)

Vulnerebility

Exploit

Achat v0.150 beta7 Buffer Overflow

SoftSphere DefenseWall FW/IPS 3.24 - Privilege Escalation

MooPlayer 1.3.0 'm3u' SEH Buffer Overflow

Wordpress Survey and Poll Plugin 1.1 - Blind SQL Injection

Pandora FMS 5.1 SP1 - SQL Injection Vulnerability

IBM Endpoint Manager - Stored XSS Vulnerability

8.2.2015

Bugtraq

Malware

RDN/Generic.dx!djb!4518E4A0FE97
RDN/Generic PUP.z!746DA97260B3
RDN/Generic.dx!D4CED171418A
RDN/Generic.dx!djb!8A8ED5840724
RDN/Generic.dx!djb!B72308CF61EE
Downloader.gen.a!7E9603057D98
RDN/Generic PUP.z!eq!3CB91A6E8244
RDN/Generic Downloader.x!mq!BDCC39D12AA2
RDN/Spybot.bfr!87F633FF03D9
Generic.bfr!9344F2641EBF
RDN/Generic.dx!djb!690041FEA044
RDN/Generic.dx!djb!8225B128B6FD
RDN/Generic.dx!djb!1F7710BF171D
RDN/Generic PUP.z!5FB943DC5AFA
RDN/Generic Downloader.x!mq!B3E22E1E955E
RDN/Spybot.bfr!D81D07FA2A4A
Generic PUP.z!58CA4449D501
RDN/Spybot.bfr!7368ADAF3D37
Generic PUP.x!B239F7F3FF61
RDN/Generic.dx!djb!1423D8E907A4
Generic PUP.z!F3CEC9EB9347
RDN/Spybot.bfr!150A6E36C847
RDN/Spybot.bfr!2FECAE882516
RDN/Generic Dropper!wb!2A98F39BE57F
RDN/Generic.dx!djb!FDC72214D0A6
Generic PUP.z!FA7AEB638BF7
Generic PUP.x!7CA4E822A664
FakeAV-M.bfr!2BC04A24F6E5
RDN/Generic.dx!djb!8B0E3BAA84E8
RDN/Generic.dx!djb!98B15A2FDC66

Phishing

Barclays	7th February 2015
IMPORTANT - ONLINE BANKING UPDATE
Tesco Bank	7th February 2015
IMPORTANT: TESCO ALERTS SERVICE
PayPal	7th February 2015
Your account PayPal is limited you have to solve the problem in 24 hours
Paypal	6th February 2015
YOUR ACCOUNT WILL BE LIMITED PLEASE UPDATE YOUR INFO
PayPal	5th February 2015
* CACTUS * Notification - Account Review

Vulnerebility

Exploit

3.2.2015

Bugtraq

[SECURITY] [DSA 3149-1] condor security update 2015-02-02
Sebastien Delafond (seb debian org)

[security bulletin] HPSBMU03239 rev.1 - HP UCMDB, Remote Disclosure of Information 2015-02-02
security-alert hp com

[SECURITY] [DSA 3150-1] vlc security update 2015-02-02
Alessandro Ghedini (ghedo debian org)

[security bulletin] HPSBMU03236 rev.1 - HP Systems Insight Manager for Windows running Bash Shell, Remote Code Execution 2015-02-02
security-alert hp com

Fork CMS 3.8.3 - XSS Vulnerability 2015-02-02
ITAS Team (itas team itas vn)

Microweber 0.95 - SQL Injection Vulnerability 2015-02-02
ITAS Team (itas team itas vn)

Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities 2015-02-02
ITAS Team (itas team itas vn)

Malware

Generic PUP.x!1C0BA4B41113
Generic.tfr!7E76C547CD4A
RDN/Spybot.bfr!954805E2828D
Generic PWS.y!39AE3C8E0B56
Generic BackDoor!251FF52FFE6E
RDN/Generic PUP.x!ctt!F044AD38967D
RDN/Generic PUP.x!ctt!92C71A122A2C
Generic.bfr!5407B3BAD7B9
RDN/Generic PUP.x!ctt!6DA90FDAAA87
RDN/DNSChanger.bfr!456D5ECCDBE6
RDN/Generic BackDoor!bbp!0A170AF2BF6E
RDN/Generic PUP.x!ctt!C6DD7D3C8F72
Generic PUP.z!79F2F7B22891
RDN/Generic.dx!4AE872BD1A94
RDN/Generic.dx!CAFDFD1F4BE4
RDN/Generic PUP.x!ctt!C18B05CAB38E
Generic.bfr!172CCA6D3BC3
W32/Nabucur!A10662ADEDB5
Generic.bfr!1172FFFB05D2
RDN/Generic.tfr!eh!9712C542DFC4
RDN/Ransom!eo!D171E485B910
RDN/Spybot.bfr!10E7B369354B
RDN/Ransom!eo!6857F5D733EC
RDN/Generic PUP.x!71D89ABD35A5
RDN/Generic PUP.x!26129C6565C5
RDN/Generic PUP.x!F0709AD5CE99
Generic.bfr!0582B27C6A83
Generic.dx!FF9DBB405596
RDN/Spybot.bfr!9492C9DE56E8
RDN/Spybot.bfr!1A9E17DA061D

Phishing

PayPal	3rd February 2015
Please Login to Update Your Account informations. 02/02/2015 10:09:19
PayPal	3rd February 2015
Verify your account informations
Apple	2nd February 2015
Account Verificatio
Apple	2nd February 2015
[Dear customer] : Hi Your User ID will be frozen 01/02/2015 06:38:27
PayPal Security	1st February 2015
Your Account Will Be Limited !

Vulnerebility

Exploit

Sefrengo CMS 1.6.1 - Multiple SQL Injection Vulnerabilities

1.2.2015

Bugtraq

[security bulletin] HPSBOV03226 rev.2 - HP TCP/IP Services for OpenVMS, BIND 9 Server Resolver, Multiple Remote Vulnerabilities 2015-01-30
security-alert hp com

[SECURITY] [DSA 3147-1] openjdk-6 security update 2015-01-30
Moritz Muehlenhoff (jmm debian org)

[SECURITY] [DSA 3146-1] requests security update 2015-01-30
Sebastien Delafond (seb debian org)

ESA-2015-006: EMC Avamar Missing Certificate Validation Vulnerability 2015-01-30
Security Alert (Security_Alert emc com)

Malware

Generic PUP.x!4690C4BA0BCE
Downloader.gen.a!7962BD89847F
RDN/Generic.grp!hx!903E8FFC02FA
GenericR-CWH!A0066AACDC8A
RDN/Generic BackDoor!C05EE0DE170F
RDN/Generic Downloader.x!mo!71325CB8FAF9
RDN/Generic PUP.x!3C320BFC8C41
RDN/Generic PUP.x!9E16C931C361
RDN/Generic PUP.x!CB6AD763950D
RDN/Generic PUP.x!D6513432D2BB
RDN/Generic PUP.x!E6245D1E3C13
Generic PUP.x!7FD65C68778F
RDN/Generic PUP.x!F773ED26D511
RDN/Generic.bfr!7D9BD3FAA689
Generic PUP.z!A68D89D858ED
RDN/Generic.dx!4DC23D31E791
RDN/Spybot.bfr!2B391BD39763
RDN/Generic PUP.x!ED4071694E25
RDN/Generic PUP.x!B40F81B254EB
Generic PUP.x!D50E8FF2BBA8
RDN/Generic.dx!90969FB83654
Generic PUP.z!E5CF5A166B24
RDN/Generic PUP.x!FC4CA66E1FD7
RDN/Generic PUP.x!911E4A8D60F8
Generic PUP.z!B1BAB5997DDC
Generic PUP.x!34C58A112530
Generic.tfr!C32994F58A45
PWS-Mmorpg.gen!52D75DE5D64C
W32/PdfCrypt.b!3DFE7C6E24C2
RDN/Generic Downloader.x!CFE2715A431B

Phishing

PayPal Security	1st February 2015
Your Account Will Be Limited !
PayPal Services	31st January 2015
[PayPal Verification] Update Your Account Information
NatWest	31st January 2015
1 New Message
no_reply@bt.com	31st January 2015
Account Verification
Apple	31st January 2015
[Dear customer] : Hi Your User ID will be frozen
NatWest	30th January 2015
1 New Message
no_reply@bt.com	30th January 2015
Account Verification

Vulnerebility

Exploit

30.1.2015

Bugtraq

[SECURITY] [DSA 3144-1] openjdk-7 security update 2015-01-29
Moritz Muehlenhoff (jmm debian org)

NEW VMSA-2015-0002 VMware vSphere Data Protection product update addresses a certificate validation vulnerability 2015-01-29
VMware Security Response Center (security vmware com)

Symantec Encryption Management Server < 3.2.0MP6 - Remote Command Injection 2015-01-30
Paul Craig (lists vantagepoint sg)

Unauthenticated Reflected XSS vulnarbility in Asus RT-N10 Plus router 2015-01-29
kingkaustubh me com

Reflected XSS vulnarbility in Asus RT-N10 Plus Router 2015-01-29
kingkaustubh me com

Malware

Generic PUP.x!8374F57466E0
Generic-FAVX!A24B8AE45E91
Generic-FAVX!DE19A5500766
Generic PUP.x!A806BD18D12B
W32/Sality.gen!7FE793754AFE
RDN/Generic Dropper!35E117E1F43C
RDN/Generic.bfr!ic!81B42E6E7CB8
Generic.dx!A454231A1356
RDN/Generic.bfr!8E516E453FF2
Generic FakeAlert!278C1F35850E
Generic Downloader.x!81212EED0BCB
Generic Downloader.x!80BED2783AED
Generic.dx!FF8390A1355A
RDN/Spybot.bfr!4D639853D222
RDN/Generic PUP.x!ctk!7C6CCEF9BCB4
Generic.dx!CE6897C29CDB
Generic.dx!C23F1DCA3670
RDN/Generic PWS.y!bcp!81064F06FD54
Generic.dx!6AF956E1A8D5
Generic.dx!95FCED611F3F
RDN/Generic PWS.y!bcp!9FAD35347369
Generic.dx!044C180713DF
RDN/Spybot.bfr!6618EB719091
Generic.dx!74ED2809EC3E
Generic.dx!345504F7F52C
RDN/Generic PUP.x!ctk!43F36F5D5BEC
Generic.dx!613C0B8B2C5F
Generic.dx!B696CB117760
Generic.dx!5BB3A0AB2DA6
RDN/Generic BackDoor!bb3!7C2775BCD804

Phishing

no_reply@bt.com	30th January 2015
Account Verification
APPLE STORE	28th January 2015
Your Account Will Be Limited. Update Your Informations !
PayPal	28th January 2015
IMPORTANT: WE NOTICED UNUSUAL ACTIVITY IN YOUR PAYPAL ACCOUNT (REF #PP-004-621-793-329) !

Vulnerebility

Exploit

29.1.2015

Bugtraq

Unauthenticated Reflected XSS vulnarbility in Asus RT-N10 Plus router 2015-01-29
kingkaustubh me com

Reflected XSS vulnarbility in Asus RT-N10 Plus Router 2015-01-29
kingkaustubh me com

ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities 2015-01-29
Security Alert (Security_Alert emc com)

Blubrry PowerPress Security Advisory - XSS Vulnerability - CVE-2015-1385 2015-01-29
Onur Yilmaz (onur netsparker com)

CVE-2014-8779: SSH Host keys on Pexip Infinity 2015-01-29
giles pexip com

[The ManageOwnage Series, part XII]: Multiple vulnerabilities in FailOverServlet (OpManager, AppManager, IT360) 2015-01-28
Pedro Ribeiro (pedrib gmail com)

Cisco Security Advisory: GNU glibc gethostbyname Function Buffer Overflow Vulnerability 2015-01-28
Cisco Systems Product Security Incident Response Team (psirt cisco com)

AST-2015-001: File descriptor leak when incompatible codecs are offered 2015-01-28
Asterisk Security Team (security asterisk org)

[slackware-security] glibc (SSA:2015-028-01) 2015-01-28
Slackware Security Team (security slackware com)

Malware

RDN/Generic.bfr!ic!F48887E6C433
Generic PUP.x!4EC1E43160A6
FakeAV-M.bfr!19767E06F6C9
Downloader.gen.a!F77B3D00A546
Generic Downloader.x!A9E6A583A055
Generic Downloader.x!E025396F5795
Generic Downloader.x!367DDA250565
RDN/Generic PUP.x!ctj!192EB76B0840
Generic Downloader.x!F613968F5E58
PWS-Banker!80CEE13734FF
RDN/Generic PUP.x!788F0BF173A9
Generic Downloader.x!4473D15FE542
Generic PUP.x!784547B53E5A
Generic Downloader.x!DF4DFBE34FFA
Generic Downloader.x!932270DC4E9D
Generic Downloader.x!F6DD6BB55D57
Generic Downloader.x!0C7A65F4354A
Generic Downloader.x!303D7D73675E
RDN/Generic.bfr!ic!27370E90C927
Generic.bfr!5935C84A5C88
FakeAV-M.bfr!2DA6310D9018
RDN/Generic BackDoor!bb3!857078AFFA14
RDN/Generic PUP.x!ctj!5BA5242D08F2
RDN/Generic PUP.x!ctj!E3D0CFD4B5A3
RDN/Sdbot.worm!cd!6452AE91839F
Generic PUP.x!DBB594CF0EF8
Generic Downloader.x!51CBA585457C
Generic PUP.x!77243266C757
Generic Downloader.x!ADC4EE9812E0
RDN/Generic Downloader.x!lq!1CF3F0305C9A

Phishing

Vulnerebility

Exploit

VSAT Sailor 900 - Remote Exploit

ClearSCADA - Remote Authentication Bypass Exploit

OS X < 10.10.x - Gatekeeper bypass Vulnerability

UniPDF 1.1 - Crash PoC (SEH overwritten)

Microsoft Windows Server 2003 SP2 - Privilege Escalation

ManageEngine Firewall Analyzer 8.0 - Directory Traversal/XSS Vulnerabilities

FreeBSD Kernel Multiple Vulnerabilities

28.1.2015

Bugtraq

[CVE-2015-1393] Photo Gallery (Wordpress Plugin) - SQL Injection in Version 1.2.8 2015-01-28
sven bsddaemon org

[CVE-2015-1394] Photo Gallery (Wordpress Plugin) - Multiple XSS Vulnerabilities Version 1.2.8 2015-01-28
sven bsddaemon org

[AMPLIA-ARA100614] OS X Gatekeeper Bypass Vulnerability 2015-01-28
Amplia Security Advisories (advisories ampliasecurity com)

NEW VMSA-2015-0001 - VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address resolve security issues 2015-01-27
VMware Security Response Center (security vmware com)

Multiple vulnerabilities in MantisBT 2015-01-28
High-Tech Bridge Security Research (advisory htbridge com)

Two XSS Vulnerabilities in SupportCenter Plus 2015-01-28
High-Tech Bridge Security Research (advisory htbridge com)

Malware

RDN/Generic.dx!6BA8862C2D15
Generic.dx!C455CCA446ED
Gamarue-FAX!93AC2ACD8527
RDN/Generic Downloader.x!7AC2B592E5CE
RDN/Generic PUP.x!cth!8D61C7D1310B
RDN/Generic.grp!hx!8D50D499C4B2
RDN/Generic PUP.x!cth!D97EFBD3CD55
Downloader.gen.a!C97F400CDB3E
RDN/Generic Downloader.x!mn!A67404616BC3
Downloader.gen.a!3AF555C2ACD0
RDN/Generic PUP.z!eq!74078ABEE3A8
RDN/Generic.dx!d2q!DC1755A1C7C4
RDN/Generic PUP.z!eq!EECC50E8A5AC
RDN/Generic BackDoor!bb3!AF654CB7F6EB
Generic BackDoor!D03D53F57ACB
RDN/Generic.bfr!3B3F38A66B70
Generic PUP.x!C7D377F7DC50
RDN/Generic.dx!d2q!A936D918C874
RDN/Generic.bfr!D91D3C5B29DD
RDN/Generic PUP.x!cth!508B498E4FBB
RDN/Generic BackDoor!bbn!506DB3C64D05
Generic PUP.x!502E097B4D3E
RDN/Generic.dx!922FD31003E0
RDN/Generic.bfr!ED5058F4EF49
Generic PUP.x!5527337F26B3
RDN/Generic PUP.x!9B8B6656AE9F
Generic.dx!C3D2802ED4C8
RDN/Spybot.bfr!29B960685EF6
RDN/Generic.dx!d2p!C7E6A437F069
W32/Nabucur!EC14F8BE5B86

Phishing

NETELLER	28th January 2015
Your NETELLER Account Has Been Disabled - 10/01/2015 09:34:03
Service .inc	28th January 2015
UPDATE YOUR ACCOUNT INFORMATION
PayPal	28th January 2015
account has been frozen
BT	28th January 2015
Update Your Details
PayPal	28th January 2015
WHY MY ACCOUNT IS LIMITED ?
PayPal	28th January 2015
CHECK YOUR RECENT ACTIVITY BY LOGGING IN [PAYPAL] âœ”
PayPal	28th January 2015
[Paypal]: You Need To Confirm Your Information ! 02/01/2015 05:27:45
Skype	28th January 2015
New Payment To Skype !
Citibank	28th January 2015
Customer Service Reference: ASO0Q5SL
PayPal	28th January 2015
Service.security@Paypal.cu
Apple	28th January 2015
Your recent download
PayPal	28th January 2015
Your PayPal account is limited until we hear from you.
Your Barclays Account	28th January 2015
Your Barclays Bank Support
Paypal Support	28th January 2015
âœ‰ [PAYPAI]: UPDATE YOUR INFORMATION ACCOUNT NUMBER 1544
Apple	28th January 2015
Account Info Change
HSBC Bank	28th January 2015
TONY.THELMA@NTLWORLD.COM, YOUR ACCOUNT SERVICE INFORMATION
NatWest	28th January 2015
Security Update
Microsoft	28th January 2015
Dear Email Account Owner,
PayPal Reminder	28th January 2015
âœ” ALERT ! YOUR PAYPAL ACCOUNT WILL BE LIMITED PP1366
PayPal Services	28th January 2015
YOUR ACCOUNT PAYPAL IS LIMITED YOU HAVE TO SOLVE THE PROBLEM IN 24 HOURS.
PayPal	28th January 2015
YOUR PAYPAL ACCOUNT HAS BEEN LIMITED !
PayPal Update	28th January 2015
UPDATE YOUR ACCOUNT INFORMATION !
PayPal Inc	28th January 2015
VERIFY YOUR INFORMATION TO ACTIVATE YOUR ACCOUNT !
HSBC Bank	28th January 2015
DARREN.M.BROWN@NTLWORLD.COM, YOUR ACCOUNT SERVICE INFORMATION

Vulnerebility

Exploit

ClearSCADA - Remote Authentication Bypass Exploit

27.1.2015

Bugtraq

[SECURITY] [DSA 3140-1] xen security update 2015-01-27
Moritz Muehlenhoff (jmm debian org)

[SYSS-2014-013] FancyFon FAMOC - Use of a One-Way Hash without a Salt 2015-01-27
matthias deeg syss de

[SYSS-2014-011] FancyFon FAMOC - Cross-Site Scripting 2015-01-27
matthias deeg syss de

[SYSS-2014-012] FancyFon FAMOC - Session Fixation 2015-01-27
matthias deeg syss de

CVE-2015-0223: anonymous access to qpidd cannot be prevented 2015-01-26
Gordon Sim (gsim apache org)

CVE-2015-0224: qpidd can be crashed by unauthenticated user 2015-01-26
Gordon Sim (gsim apache org)

[CORE-2015-0002] - Android WiFi-Direct Denial of Service 2015-01-26
CORE Advisories Team (advisories coresecurity com)

WebKitGTK+ Security Advisory WSA-2015-0001 2015-01-26
Carlos Alberto Lopez Perez (clopez igalia com)

Malware

Generic Dropper!04F6E78DCFA7
RDN/T-UPA-AAQ!a!147A717AABD6
Generic.bfr!0EE37BAE7D60
GenericR-CUT!DE932FF7C7F4
RDN/Generic PUP.z!A81CBA4F3A6F
RDN/Downloader.gen.a!C58BAFAB8A83
RDN/Spybot.bfr!C5EBA520DD07
RDN/Spybot.bfr!A88216E1F80F
RDN/Generic PUP.x!F66759103E9D
Generic PUP.x!DC913B05B5D1
W32/Sdbot.worm!AF206A5A94B5
Ransom!DC407A859787
Generic.dx!CB74F89923D7
RDN/Generic.dx!CCD805F09122
W32/Expiro.gen.ra!0087645D3EEE
RDN/Generic BackDoor!bbn!D9FCD9AF9734
RDN/Generic PUP.x!ct3!0A4AAEB9CFB5
RDN/Generic.tfr!eh!D637D2F8F974
Generic PUP.x!D9B7B9A26F6D
RDN/Generic BackDoor!bbn!D8B272BF9464
RDN/Generic PWS.y!bc3!6DA0E3545ED2
Generic PUP.x!CB18F1FF6A54
RDN/Generic PUP.x!9DC23113DD3D
RDN/Generic PUP.x!ct3!9390F2C19DDB
Generic PUP.x!D5410A6DF20F
RDN/Generic Dropper!vz!D5526013BF00
Generic PUP.x!CE605667AB19
Generic PUP.x!C889E72BB100
RDN/Generic BackDoor!bbn!CAFA19ED9847
RDN/Generic PUP.x!ct3!C65ADBDCE885

Phishing

Paypal	27th January 2015
[IMPORTANT] : UPDATE YOUR ACCOUNT INFORMATION !
National	27th January 2015
She has no taboos and restrictions
Apple Inc.	27th January 2015
PLEASE UPDATE YOUR ACCOUNT
PayPal	27th January 2015
Your PayPal account is limited until we hear from you.
ebilling@bt.com	27th January 2015
Verify your account
Natwest	27th January 2015
\|Natwest Bank\| Case Reference #: 458839348482
onlinebankinservice@tescobank.	27th January 2015
TESCO BANK - NEW ESTATEMENT AND EADVICE
_-Vydox_-_Plus_-	27th January 2015
~NEW~YEAR,~NEW~YOU:~30~DAY~FRE E~TRIAL~FOR~A~BULL~PERFORMANCE ~IN~BED~
MS MARY ARINZE	27th January 2015
Re: Very Urgent Response!!!
JANET NAPOLITANO	27th January 2015
HOMELAND SECURITY ALERT!!!
PayPal Services	27th January 2015
YOUR ACCOUNT PAYPAL IS LIMITED YOU HAVE TO SOLVE THE PROBLEM IN 24 HOURS.
PayPal	27th January 2015
[PAYPAL] :UPDATE YOUR ACCOUNT INFORMATION
Apple Service	27th January 2015
YOUR APPLE ACCOUNT IS TEMPORARILY SUSPENDED !
Ysande	27th January 2015
WHEN WAS VIAGRA INVENTED
PayPal	27th January 2015
YOU'VE SENT A PAYMENT
PayPal	27th January 2015
PLEASE UPDATE YOUR PAYPAL ACCOUNT
Barclays	27th January 2015
IMPORTANT - ONLINE BANKING UPDATE
Bank of America Alert	27th January 2015
Bank Of America Alert: Online Access Suspension Message®
Apple	27th January 2015
Account Info Change
Apple	27th January 2015
Account Suspended
PayPal INC.	27th January 2015
YOUR ACCOUNT WILL BE LIMITED. PLEASE UPDATE YOUR ACCOUNT INFORMATION !
NatWest Online Banking	27th January 2015
IMPORTANT NOTICE REGARDING YOUR NATWEST ONLINE ACCOUNT.
head office	27th January 2015
FEDERAL BUREAU OF INVESTIGATION(WWW.FBI.GOV)
Navy Federal Online	27th January 2015
Important notice regarding your Navy Federal Online account.

Vulnerebility

Exploit

D-Link DSL-2740R - Unauthenticated Remote DNS Change Exploit

VLC Player 2.1.5 - DEP Access Violation Vulnerability

VLC Player 2.1.5 - Write Access Violation Vulnerability

Comodo Backup 4.4.0.0 - NULL Pointer Dereference EOP

Mangallam CMS - SQL Injection Web Vulnerability

Barracuda Networks Cloud Series - Filter Bypass Vulnerability

ManageEngine ServiceDesk Plus 9.0 (< Build 9031) - User Privileges Management Vulnerability

PHP Webquest 2.6 - SQL Injection

Android WiFi-Direct Denial of Service

26.1.2015

Bugtraq

Fwd: REWTERZ-20140103 - ManageEngine ServiceDesk Plus User Privileges Management Vulnerability 2015-01-22
Rewterz - Research Group (advisories rewterz com)

REWTERZ-20140102 - ManageEngine ServiceDesk Plus User Enumeration Vulnerability 2015-01-22
Rewterz - Research Group (advisories rewterz com)

REWTERZ-20140101 - ManageEngine ServiceDesk SQL Injection Vulnerability 2015-01-22
Rewterz - Research Group (advisories rewterz com)

[HITB-Announce] #HITB2015AMS Call for Papers 1st Round is Closing in 10 Days 2015-01-22
Hafez Kamal (aphesz hackinthebox org)

PhotoSync 1.1.3 Android - Command Inject Vulnerability 2015-01-22
Vulnerability Lab (research vulnerability-lab com)

Program-O v2.4.6 - Multiple Web Vulnerabilities 2015-01-22
Vulnerability Lab (research vulnerability-lab com)

CVE-2015-1180-xss-eventsentry 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

CVE-2015-1179-xss-mango-automation-scada 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

CVE-2015-1178-xss-x-cart-ecommerce 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

Malware

Generic.bfr!8A3B913C0CB2
FakeAV-M.bfr!ED4D5F7A7DE1
RDN/Generic.dx!77C0AF9BC1F5
RDN/Generic Dropper!vz!208DA38CD99C
Generic.bfr!A6BBE611A563
RDN/Spybot.bfr!1204314BD74C
Generic PUP.x!48BEA33D9F9B
Generic.bfr!6BF9CA39794A
Generic.bfr!D1B231D2719A
W32/Expiro!886E724B2CE6
RDN/Generic.bfr!ED1009DC35CE
Generic.bfr!5C0AF6FC056F
RDN/Generic PUP.x!cs3!AACE94796ECE
W32/PdfCrypt.b!BA14824E7F23
Generic.bfr!721DC78264EB
RDN/Generic PUP.x!cs3!201FDD65FB44
Generic BackDoor!1BC129D7FCF2
RDN/Generic PUP.x!cs3!B04724526543
Generic PUP.x!FAB21799D89E
RDN/Generic PUP.x!cs3!38D531E8176B
W32/PdfCrypt.b!92FAE8BA7B4F
Generic.dx!D389E6D2A064
RDN/Generic PUP.x!cs3!3548AD3FE731
Generic PUP.x!8EEDADE1FCF7
RDN/Generic PUP.x!cs3!4B96A469E3D5
RDN/Generic PUP.x!cs3!09E806628D0B
RDN/Generic PUP.x!cs3!6E0D30D8403A
Generic PUP.x!1489244252B6
GenericR-CVC!D987642100A9
RDN/Generic.bfr!ib!63F951F778E6

Phishing

Vulnerebility

Exploit

23.1.2015

Bugtraq

Fwd: REWTERZ-20140103 - ManageEngine ServiceDesk Plus User Privileges Management Vulnerability 2015-01-22
Rewterz - Research Group (advisories rewterz com)

REWTERZ-20140102 - ManageEngine ServiceDesk Plus User Enumeration Vulnerability 2015-01-22
Rewterz - Research Group (advisories rewterz com)

REWTERZ-20140101 - ManageEngine ServiceDesk SQL Injection Vulnerability 2015-01-22
Rewterz - Research Group (advisories rewterz com)

[HITB-Announce] #HITB2015AMS Call for Papers 1st Round is Closing in 10 Days 2015-01-22
Hafez Kamal (aphesz hackinthebox org)

PhotoSync 1.1.3 Android - Command Inject Vulnerability 2015-01-22
Vulnerability Lab (research vulnerability-lab com)

Program-O v2.4.6 - Multiple Web Vulnerabilities 2015-01-22
Vulnerability Lab (research vulnerability-lab com)

CVE-2015-1180-xss-eventsentry 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

CVE-2015-1179-xss-mango-automation-scada 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

CVE-2015-1178-xss-x-cart-ecommerce 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

Malware

Generic.dx!067B470A053D
Generic.bfr!D7FEB35BB2A1
RDN/Generic.bfr!B29C6360E83E
Generic.bfr!D888CB6FA6AF
RDN/Generic PUP.z!F4442F9F8418
RDN/Vundo!dw!ADD711C4860B
Generic PUP.x!9B80E9F86A26
RDN/Generic PUP.x!csw!BE2F5C90BC0B
W32/Expiro!D8AD51FA9426
RDN/Generic Dropper!vz!75AFBB90E21A
Generic.bfr!D7DB922CE718
Generic.bfr!D967F0170BBE
Generic.bfr!D913158B5084
Generic.bfr!D8F64F9DA566
RDN/Spybot.bfr!0E70274958CB
Generic PUP.x!7A1D7A67616C
Generic.bfr!D929D5267784
RDN/Generic.bfr!A0DD7B3DDFE9
RDN/Generic PUP.x!0395D14646D2
Generic.dx!D8EC94FCFD13
Generic.bfr!D8CE6E5DF2F6
Generic.bfr!D9A1D3ED9F4B
Generic.bfr!D95B486B6A10
Generic PUP.x!CA967E90D614
Generic.bfr!D9508A6F10BB
BackDoor-FCKD!37F36C0A897F
Generic PUP.x!7FB5F408BEC7
Generic PUP.x!6D5A0586C9B8
Generic PUP.x!937DEB1D76C3
RDN/Generic.bfr!ib!387FE14AE78F

Phishing

Vulnerebility

Exploit

22.1.2015

Bugtraq

PhotoSync 1.1.3 Android - Command Inject Vulnerability 2015-01-22
Vulnerability Lab (research vulnerability-lab com)

Program-O v2.4.6 - Multiple Web Vulnerabilities 2015-01-22
Vulnerability Lab (research vulnerability-lab com)

CVE-2015-1180-xss-eventsentry 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

CVE-2015-1179-xss-mango-automation-scada 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

CVE-2015-1178-xss-x-cart-ecommerce 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

CVE-2015-1177-xss-exponent 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

SEC Consult SA-20150122-0 :: Multiple critical vulnerabilities in Symantec Data Center Security: Server Advanced (SDCS:SA) & SCSP 2015-01-22
SEC Consult Vulnerability Lab (research sec-consult com)

CVE-2015-1176-xss-osticket 2015-01-22
Sudhanshu Chauhan (sudhanshu octogence com)

[slackware-security] samba (SSA:2015-020-01) 2015-01-21
Slackware Security Team (security slackware com)

Remote Desktop v0.9.4 Android - Multiple Vulnerabilities 2015-01-21
Vulnerability Lab (research vulnerability-lab com)

iExplorer 3.6.3 - DLL Hijacking Exploit itunesmobiledevice.dll 2015-01-21
Vulnerability Lab (research vulnerability-lab com)

[RT-SA-2014-010] AVM FRITZ!Box Firmware Signature Bypass 2015-01-21
RedTeam Pentesting GmbH (release redteam-pentesting de)

PhotoSync v1.1.3 Android - Command Inject Vulnerability 2015-01-21
Vulnerability Lab (research vulnerability-lab com)

[oCERT-2015-001] JasPer input sanitization errors 2015-01-21
Andrea Barisani (lcars ocert org)

[security bulletin] HPSBUX03235 SSRT101750 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) 2015-01-20
security-alert hp com

[SECURITY] [DSA 3134-1] sympa security update 2015-01-20
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3133-1] privoxy security update 2015-01-20
Moritz Muehlenhoff (jmm debian org)

Malware

Generic PUP.x!CE70394F8239
Generic Downloader.x!13FC6901B52B
RDN/Generic.bfr!hr!55CE2FF9438E
Generic PUP.x!C9CBBCCBC8E0
Generic Downloader.x!B4668C5C9C61
RDN/Generic PUP.x!A3ADCA0ADAE0
Downloader-FAMV!F1034F5D5113
RDN/Generic.bfr!D6F0A2E6278E
Generic Downloader.x!C30E01943939
RDN/Generic PWS.y!bcn!C94BDFAF3418
RDN/Generic PUP.z!9E66C1048F7A
RDN/Generic BackDoor!142A9CBD2619
Downloader-FAMV!43D08191F217
Downloader-FAMV!D15017BE80CE
Generic PUP.x!902C2764627C
Downloader-FAMV!C312342EC3BC
Downloader-FAMV!EE6EC0C1A19D
RDN/Generic PUP.x!cs3!0758D179BE2B
FakeAV-M.bfr!2F960BDC6C64
Downloader.gen.a!C08C55404726
RDN/Generic Downloader.x!lq!A728C66D4ED3
RDN/Generic PUP.x!F6B06C2C7184
RDN/Generic BackDoor!bbm!292F12911B1C
Generic Downloader.x!14A97544DD9B
Generic Downloader.x!338AFDEC37DC
RDN/Generic PWS.y!bcn!56D9162976F4
Generic Downloader.x!A4255BE12904
RDN/Generic PUP.x!FFF625D03DE7
RDN/Generic.bfr!ib!D583C3A8187D
FakeAV-M.bfr!327E59689596

Phishing

Vulnerebility

Exploit

Exif Pilot 4.7.2 - SEH Based Buffer Overflow

19.1.2015

Bugtraq

CVE-2015-1032 Kiwix Cross-Site Scripting Vulnerability 2015-01-18
Riley Baird (BM-2cVqnDuYbAU5do2DfJTrN7ZbAJ246S4Xix bitmessage ch)

[slackware-security] seamonkey (SSA:2015-016-04) 2015-01-17
Slackware Security Team (security slackware com)

[slackware-security] mozilla-firefox (SSA:2015-016-02) 2015-01-17
Slackware Security Team (security slackware com)

[slackware-security] freetype (SSA:2015-016-01) 2015-01-17
Slackware Security Team (security slackware com)

[slackware-security] mozilla-thunderbird (SSA:2015-016-03) 2015-01-17
Slackware Security Team (security slackware com)

[ MDVSA-2015:027 ] kernel 2015-01-16
security mandriva com

Facebook Bug Bounty #19 - Filter Bypass Web Vulnerability 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

File Pro Mini v5.2 iOS - Multiple Web Vulnerabilities 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

Pandora FMS v5.1 SP1 - Persistent SNMP Editor Vulnerability 2015-01-16
admin@evolution-sec.com (admin evolution-sec com)

WiFi File Browser Pro v2.0.8 - Code Execution Vulnerability 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

VeryPhoto v3.0 iOS - Command Injection Vulnerability 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

CatBot v0.4.2 (PHP) - SQL Injection Vulnerability 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3129-1] rpm security update 2015-01-15
Moritz Muehlenhoff (jmm debian org)

Malware

Generic PUP.x!2784A9A43253
Generic PUP.x!5C147FA73DA8
RDN/Generic Downloader.x!01A1FC9794A9
RDN/Generic PUP.x!00628B0E0AEA
RDN/PWS-Banker!7DA2C4265BFA
RDN/Generic Downloader.x!00BF20E1D1F7
RDN/Generic Downloader.x!01AD5A920DD1
RDN/Generic.tfr!3417066DEE20
RDN/Generic PUP.x!csm!F8BD291AC448
Generic.dx!171101C2764C
RDN/Generic Downloader.x!006D0AC356F4
Generic Downloader.x!6E7914EED837
RDN/Generic PUP.x!511647C2A0EA
RDN/Generic Downloader.x!00B8BB0C619E
Generic PUP.x!01733A5D11A6
RDN/Generic.grp!E614E42DBD43
RDN/Generic Downloader.x!lq!510E0FF39E0E
Generic PUP.x!F67D77899793
Generic PUP.x!09567F67D2F8
RDN/Generic.bfr!hr!345918FCBE69
RDN/Generic BackDoor!83024D35B795
Generic PUP.x!294A682EC2DB
Generic PUP.x!7961FA202561
RDN/Downloader.gen.a!41E940093654
RDN/Generic Downloader.x!01AE9B1881BF
RDN/Generic PUP.x!csm!A6AB6EDB03D1
RDN/Generic PUP.x!csm!A203B1439669
RDN/Generic PUP.x!6E05CE615DC5
Generic.bfr!10C053F007C3
Generic PUP.x!A3CC151715CB

Phishing

Vulnerebility

Exploit

17.1.2015

Bugtraq

[ MDVSA-2015:027 ] kernel 2015-01-16
security mandriva com

Facebook Bug Bounty #19 - Filter Bypass Web Vulnerability 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

File Pro Mini v5.2 iOS - Multiple Web Vulnerabilities 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

Pandora FMS v5.1 SP1 - Persistent SNMP Editor Vulnerability 2015-01-16
admin@evolution-sec.com (admin evolution-sec com)

WiFi File Browser Pro v2.0.8 - Code Execution Vulnerability 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

VeryPhoto v3.0 iOS - Command Injection Vulnerability 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

CatBot v0.4.2 (PHP) - SQL Injection Vulnerability 2015-01-16
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3129-1] rpm security update 2015-01-15
Moritz Muehlenhoff (jmm debian org)

Malware

Generic PUP.x!F8210A91CE1F
Generic PUP.x!164541277E79
DNSChanger.bfr!97396B26AE8C
Generic PUP.x!969519608272
Generic PUP.x!B55BFEC042CB
Generic PUP.x!F2D6BE48D661
Generic PUP.x!A5D5EEE7E377
Generic PUP.x!E3863A98ED2A
Downloader.gen.a!AAA6668D140B
RDN/DNSChanger.bfr!f!97F27C51B64E
Generic PUP.x!28559171E86B
Generic PUP.x!3507C6BF9E81
RDN/Generic PUP.x!csh!EFEFF51032F2
Generic PUP.x!93689A4A5DA8
Generic PUP.x!1F8F5137BA31
Generic PUP.x!3658EFFAD7A4
RDN/Generic PWS.y!bcm!E898209E7127
Generic PWS.y!6431FA1BD1D1
RDN/Generic.bfr!ib!856FE2142B49
Generic PUP.x!AF0273D472F8
Generic PUP.x!0830EE8E6572
RDN/Generic PUP.x!csh!1482AF5D012D
RDN/YahLover.worm!6422F1BC75B0
RDN/YahLover.worm!6C8143A75964
RDN/BackDoor-FBSA!a!956F51A85607
Generic PWS.y!950DFA9A26E2
RDN/Generic.bfr!ib!AD64C0D9A0A2
Generic PWS.y!60F012781288
Generic PUP.x!20B8704BB552
Generic PUP.x!D127F03C61A7

Phishing

Vulnerebility

Exploit

16.1.2015

Bugtraq

Alienvault OSSIM/USM Command Execution Vulnerability 2015-01-15
Peter Lapp (lappsec gmail com)

[ MDVSA-2015:025 ] mpfr 2015-01-15
security mandriva com

[ MDVSA-2015:024 ] libsndfile 2015-01-15
security mandriva com

[ MDVSA-2015:026 ] untrf 2015-01-15
security mandriva com

[ MDVSA-2015:023 ] libvirt 2015-01-15
security mandriva com

[SECURITY] [DSA 3128-1] linux security update 2015-01-15
Salvatore Bonaccorso (carnil debian org)

FreeBSD Security Advisory FreeBSD-SA-15:01.openssl 2015-01-14
FreeBSD Security Advisories (security-advisories freebsd org)

[SECURITY] [DSA 3127-1] iceweasel security update 2015-01-14
Moritz Muehlenhoff (jmm debian org)

Two XSS vulnerabilities in Simple Security WordPress Plugin 2015-01-14
High-Tech Bridge Security Research (advisory htbridge com)

AusCERT2015 Call for Papers: closes 18th January 2015-01-14
AusCERT (auscert auscert org au)

Malware

RDN/Generic PUP.x!cnq!6872CDFCD62D
Generic BackDoor!AC12DACEE9B9
Generic PUP.x!D16A9892306B
RDN/Generic.grp!C5124A18052D
Generic PUP.x!CE2FB5664C1D
Generic.bfr!CC0D7E913192
Generic PUP.x!EDE24D0DC2A3
Generic PUP.x!98277CE56227
Generic PUP.x!1D45105CEE55
RDN/Generic.bfr!hr!3569E1EDD37F
RDN/Generic Downloader.x!lq!21AD6CE4B465
Generic.bfr!C57410C9D064
RDN/Downloader.a!uj!0A8FC56066EA
Generic PUP.x!2742F93BD348
Generic.bfr!C5EF09163249
RDN/Generic PUP.x!3A4D4E2FF8D0
RDN/Generic PUP.x!csf!283742066D48
Generic PUP.x!CDDD17698E0E
Generic PUP.x!43F4A79F9531
Generic PUP.x!F918B586CC51
RDN/Spybot.bfr!2AA32316D8AF
Generic PUP.x!280EC5F5D376
RDN/Generic PUP.x!698E6F967F17
RDN/Generic PUP.x!D6BFDEF7769D
RDN/Generic PUP.x!csf!669417C96549
RDN/Generic PUP.x!48C95F3C71FD
RDN/Downloader.a!uj!5AFB36330EF1
RDN/Generic PWS.y!bcl!CA55CD724B01
Generic PUP.x!5E5C440D9996
RDN/Generic Downloader.x!ml!D2D1FF7729AC

Phishing

Vulnerebility

Exploit

15.1.2015

Bugtraq

[SECURITY] [DSA 3127-1] iceweasel security update 2015-01-14
Moritz Muehlenhoff (jmm debian org)

Two XSS vulnerabilities in Simple Security WordPress Plugin 2015-01-14
High-Tech Bridge Security Research (advisory htbridge com)

AusCERT2015 Call for Papers: closes 18th January 2015-01-14
AusCERT (auscert auscert org au)

[security bulletin] HPSBGN03233 rev.1 - HP OneView running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access, and Disclosure of Information 2015-01-13
security-alert hp com

[SECURITY] [DSA 3123-2] binutils-mingw-w64 security update 2015-01-13
Thijs Kinkhorst (thijs debian org)

Sitefinity Enterprise v7.2.53 - Persistent Vulnerability 2015-01-13
Vulnerability Lab (research vulnerability-lab com)

Foxit MobilePDF v4.4.0 iOS - Multiple Web Vulnerabilities 2015-01-13
Vulnerability Lab (research vulnerability-lab com)

[security bulletin] HPSBMU03230 rev.1 - HP Insight Control server deployment Remote Disclosure of Information 2015-01-13
security-alert hp com

SEC Consult SA-20150113-2 :: Cross-Site Request Forgery in XBMC / Kodi 2015-01-13
SEC Consult Vulnerability Lab (research sec-consult com)

SEC Consult SA-20150113-1 :: Privilege Escalation & XSS & Missing Authentication in Ansible Tower 2015-01-13
SEC Consult Vulnerability Lab (research sec-consult com)

CVE-2015-0203: Apache Qpid's qpidd can be crashed by authenticated user 2015-01-13
Gordon Sim (gsim apache org)

Malware

RDN/Spybot.bfr!F08225F09441
RDN/Generic.bfr!ib!FA44DE457E08
RDN/Generic.grp!311DA383E661
RDN/Generic PWS.y!bcl!D64172F03935
GenericR-CTB!1AFA3748F402
RDN/Generic.tfr!eh!421C15032D2C
RDN/Generic PUP.x!cs3!837958BA9E1F
Generic.dx!FE30DF21A4EB
RDN/Generic PUP.x!cs3!AD08D95AF5C9
RDN/Spybot.bfr!o!C02E40ECCBB7
RDN/Generic.hra!AF18CD376414
Generic.bfr!0860D291AEE8
RDN/Downloader.gen.a!2FE9084EDDC6
RDN/Generic PWS.y!bck!331E5B7F9E84
RDN/Generic PUP.x!2814302C5BD0
RDN/Generic.bfr!C153E9B64B8B
Generic BackDoor!B891325D4943
RDN/Generic BackDoor!bbk!EA6193E3C38D
RDN/Generic Downloader.x!mk!CDD5682DD30F
W32/PdfCrypt.a!7434B09DB96D
RDN/Generic PWS.y!bcl!1F6F4C449485
RDN/Downloader.gen.a!79C8C2AAAD0C
RDN/Generic.bfr!A6F199B074B2
Generic PUP.x!5ADECE38D036
Generic PUP.x!0600BDE7888C
RDN/Generic PUP.x!1242212DF90F
RDN/Downloader.gen.a!2DCC925310BF
Generic PUP.x!5B695ED1096D
RDN/Generic.hra!732B1E836EF9
DNSChanger.bfr!5B1488BB70A2

Phishing

Vulnerebility

Exploit

13.1.2015

Bugtraq

[security bulletin] HPSBOV03228 rev.1 - HP OpenVMS running Bash Shell, Remote Code Execution 2015-01-12
security-alert hp com

[Corrected] Stored XSS Vulnerability in F5 BIG-IP Application Security Manager 2015-01-13
Peter Lapp (lappsec gmail com)

Stored XSS Vulnerability in F5 BIG-IP Application Security Manager 2015-01-12
Peter Lapp (lappsec gmail com)

[SECURITY] [DSA 3126-1] php5 security update 2015-01-12
Thijs Kinkhorst (thijs debian org)

Corel Software DLL Hijacking 2015-01-12
CORE Advisories Team (advisories coresecurity com)

CVE-2014-8870: Arbitrary Redirect in Tapatalk Plugin for WoltLab Burning Board 4.0 2015-01-12
RedTeam Pentesting GmbH (release redteam-pentesting de)

[RT-SA-2014-015] Cross-site Scripting in Tapatalk Plugin for WoltLab Burning Board 4.0 2015-01-12
RedTeam Pentesting GmbH (release redteam-pentesting de)

[ MDVSA-2015:022 ] wireshark 2015-01-12
security mandriva com

[ MDVSA-2015:021 ] curl 2015-01-12
security mandriva com

[ MDVSA-2015:020 ] libssh 2015-01-12
security mandriva com

ZTE Datacard PCW(Telecom MF180) - Multiple Software Vulnerabilities 2015-01-12
Vulnerability Lab (research vulnerability-lab com)

Heroku API Bug Bounty #1 - Persistent Invitation Vulnerability 2015-01-12
Vulnerability Lab (research vulnerability-lab com)

Heroku API Deep Dive Bug Bounty #3 - Persistent UI Vulnerability 2015-01-12
Vulnerability Lab (research vulnerability-lab com)

Blitz CMS Community - SQL Injection Web Vulnerability 2015-01-12
Vulnerability Lab (research vulnerability-lab com)

[SECURITY] [DSA 3125-1] openssl security update 2015-01-11
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3124-1] otrs2 security update 2015-01-10
Salvatore Bonaccorso (carnil debian org)

Wordpress plugin Pods <= 2.4.3 XSS and CSRF vulnerabilities 2015-01-10
Pietro Oliva (pietroliva gmail com)

[security bulletin] HPSBOV03227 rev.1 - HP SSL for OpenVMS, Remote Disclosure of Information, Denial of Service (DoS) and Other Vulnerabilities 2015-01-10
security-alert hp com

Malware

RDN/Generic PUP.x!crw!D1D32BA67B91
RDN/Generic.bfr!16EA0C625C7E
RDN/Generic PUP.x!D7CFB3230CC8
Generic PUP.x!0438CF026B14
RDN/Generic PUP.x!B47021383155
BrowseFox-FTQ!6F8BAEED194F
RDN/Generic PUP.x!crw!A0D2FBD32F9D
RDN/Generic PUP.x!2B12BBB098DF
RDN/Downloader.gen.a!7C31636FEA7D
RDN/Generic.bfr!2F4136418923
RDN/Generic.bfr!5A88407FBD2A
RDN/Generic.bfr!FEAC61A55E4D
RDN/Generic.bfr!E353F9A01588
Generic.bfr!3066D2040BEB
RDN/Generic.bfr!F2BF05E09080
RDN/Generic.bfr!532B0598C1B8
Generic PUP.x!C68F3453E9E8
RDN/Generic PUP.x!crw!2D7F7519B290
BrowseFox-FTQ!CA98CD3D9758
RDN/Generic PUP.x!crw!D3F00DE77667
RDN/Generic.bfr!ib!322C7F4465EA
RDN/Generic.bfr!11348799E37D
W32/Sdbot.worm!BF50C50AAA04
Generic PUP.x!A46C19BE4DF6
RDN/Downloader.gen.a!73B1D7C909F7
Generic PUP.x!F4E1E6685D86
Generic PUP.x!EAA85004BA5F
Generic.bfr!83B266E98CFA
Generic.bfr!4D5BE97E90A4
Generic.bfr!3135A5B0ED16

Phishing

Vulnerebility

Exploit

9.1.2015

Bugtraq

Recon 2015 Call For Papers - June 19 - 21, 2015 - Montreal, Canada 2015-01-08
root recon cx (root)

[ MDVSA-2015:018 ] asterisk 2015-01-08
security mandriva com

[ MDVSA-2015:017 ] libevent 2015-01-08
security mandriva com

[SECURITY] [DSA 3121-1] file security update 2015-01-08
Moritz Muehlenhoff (jmm debian org)

[ MDVSA-2015:016 ] unzip 2015-01-08
security mandriva com

[ MDVSA-2015:015 ] sox 2015-01-08
security mandriva com

[ MDVSA-2015:014 ] libjpeg 2015-01-08
security mandriva com

[ MDVSA-2015:013 ] znc 2015-01-08
security mandriva com

[ MDVSA-2015:012 ] jasper 2015-01-08
security mandriva com

[ MDVSA-2015:011 ] nail 2015-01-08
security mandriva com

[ MDVSA-2015:010 ] file 2015-01-08
security mandriva com

[ MDVSA-2015:009 ] krb5 2015-01-08
security mandriva com

[ MDVSA-2015:008 ] pwgen 2015-01-08
security mandriva com

[ MDVSA-2015:007 ] unrtf 2015-01-08
security mandriva com

[ MDVSA-2015:006 ] mediawiki 2015-01-08
security mandriva com

[security bulletin] HPSBMU03118 rev.3 - HP Systems Insight Manager (SIM) on Linux and Windows, Multiple Remote Vulnerabilities 2015-01-06
security-alert hp com

[SECURITY] [DSA 3120-1] mantis security update 2015-01-06
Moritz Muehlenhoff (jmm debian org)

Brother MFC Administration Reflected Cross-Site Scripting 2015-01-07
vulns dionach com

Self-XSS in Microsoft Dynamics CRM 2013 SP1 2015-01-07
High-Tech Bridge Security Research (advisory htbridge com)

Malware

RDN/Generic PUP.x!17D2625B5AC9
Generic PUP.x!5DC4C957B4F0
Generic Downloader.x!42568B493955
Generic PWS.y!687897E3628E
RDN/Generic PWS.y!bc3!13B9317EE3B1
RDN/Generic PUP.x!EA1BB16EA7DF
RDN/Generic.dx!AE90AFF297D3
RDN/Generic Dropper!0222A58692AC
RDN/Generic BackDoor!547C3BE22FF8
RDN/Generic BackDoor!9BDC6DB5FD3E
Generic PUP.x!77840BC0306D
RDN/Generic.bfr!BFC7A0ED9261
Generic.dx!0E7E442074D5
Generic Downloader.x!8AB7FF6A57F6
Generic PUP.x!FB1FD12B66BE
RDN/Generic.bfr!E0068AD24025
RDN/Generic.bfr!hr!3841BDE1178B
Generic Downloader.x!2E77F00244A5
Generic Downloader.x!BDFC9B684D13
RDN/Generic.dx!d2d!0C6194C031A7
RDN/Generic.hra!61CA40317EBF
RDN/Downloader.gen.a!4840140778F6
RDN/Spybot.bfr!0C118F5EDA3A
RDN/Generic BackDoor!bbh!EEA496B99D52
RDN/Generic PUP.x!9E23632CABA5
RDN/Spybot.bfr!382FCE40E0B1
BackDoor-ABF.gen!597EC24410C2
Generic.tfr!03CF3F19B465
RDN/Generic PUP.x!cr3!0C4D5F6A69B7
RDN/Generic PUP.x!62B033472136

Phishing

Vulnerebility

Exploit

Pandora v3.1 Auth Bypass and Arbitrary File Upload Vulnerability

Ntpdc 4.2.6p3 - Local Buffer Overflow

WordPress Shopping Cart 3.0.4 - Unrestricted File Upload

8.1.2015

Bugtraq

[security bulletin] HPSBMU03118 rev.3 - HP Systems Insight Manager (SIM) on Linux and Windows, Multiple Remote Vulnerabilities 2015-01-06
security-alert hp com

[SECURITY] [DSA 3120-1] mantis security update 2015-01-06
Moritz Muehlenhoff (jmm debian org)

Brother MFC Administration Reflected Cross-Site Scripting 2015-01-07
vulns dionach com

Self-XSS in Microsoft Dynamics CRM 2013 SP1 2015-01-07
High-Tech Bridge Security Research (advisory htbridge com)

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities 2015-01-06
Vulnerability Lab (research vulnerability-lab com)

[ MDVSA-2015:005 ] subversion 2015-01-05
security mandriva com

ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities 2015-01-05
Security Alert (Security_Alert emc com)

[SECURITY] [DSA 3119-1] libevent security update 2015-01-06
Salvatore Bonaccorso (carnil debian org)

Malware

RDN/Generic BackDoor!bbg!D09BD1F3E83D
Generic PUP.x!1522E089F754
Generic PUP.x!DA05B6D461A9
RDN/Downloader.gen.a!64B8E39F167F
RDN/Generic Downloader.x!18D20A383307
Generic PUP.x!0A568899692E
RDN/Generic BackDoor!529268AB92F8
Generic PUP.x!B5326A7E51E1
RDN/Downloader.gen.a!6EC8558146C9
RDN/Generic.dx!E7D426DED48A
RDN/Keylog-Ardamax.dll!EF4A639EEC9F
Generic PUP.x!184DB2FFD21B
Generic PUP.x!58B98EA5B0B7
Generic PUP.x!5239F8B0E4B4
RDN/Generic PUP.x!12AA08B0CF68
RDN/Generic.tfr!DFAAFE04A9AC
RDN/Generic.bfr!44C21E68E1C8
RDN/Generic PUP.x!8FF0AF54F200
Generic PUP.x!76922D5DA973
RDN/Generic PUP.x!626D44FC35CF
RDN/Generic.bfr!ia!11B9380CC0D1
RDN/Generic.bfr!ia!190026AB351F
RDN/Generic PUP.x!crl!069A8AE9DF5F
RDN/Generic.bfr!ia!CD889C85D076
RDN/Generic PUP.x!crl!2776CD400351
Generic PUP.x!E2B8921A8D5F
Generic PUP.x!17FC4B83544C
Generic PUP.x!17C7DB055988
RDN/Generic PUP.x!crl!31A175C81E63
RDN/Generic.dx!B1F0BEB067C7

Phishing

Vulnerebility

Exploit

Microweber CMS 0.95 - SQL Injection

Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure

Sefrengo CMS 1.6.0 - SQL Injection

7.1.2015

Bugtraq

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities 2015-01-06
Vulnerability Lab (research vulnerability-lab com)

[ MDVSA-2015:005 ] subversion 2015-01-05
security mandriva com

ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities 2015-01-05
Security Alert (Security_Alert emc com)

[SECURITY] [DSA 3119-1] libevent security update 2015-01-06
Salvatore Bonaccorso (carnil debian org)

[ MDVSA-2015:001 ] c-icap 2015-01-05
security mandriva com

[ MDVSA-2015:002 ] pcre 2015-01-05
security mandriva com

Open-Xchange Security Advisory 2015-01-05 2015-01-05
Martin Heiland (martin heiland open-xchange com)

Malware

Generic.tfr!29B45B717F15
Generic PUP.x!E7EFC36A5ACA
RDN/Generic BackDoor!bbg!93379282503B
RDN/Generic.bfr!C43A6E2081AB
Trojan-FFMU!202AF72C5E12
Generic PUP.x!5B8C3E2B98B3
Downloader.gen.a!34D4B358FD45
PWS-Lineage!CB3B57D4E7EC
RDN/Generic.dx!D3918BC69E28
Generic PUP.x!2EBF4CE6C1F3
Generic Downloader.x!6A9803D84A70
Generic Downloader.x!22EE967D51DC
Generic Downloader.x!35FD70C36E7B
RDN/Generic BackDoor!bbg!CDDFD11504BF
Generic PUP.x!970D5BD4293E
RDN/Generic Downloader.x!mk!BFC6E4F3252A
Generic PUP.x!DF749FCED5BF
Downloader.gen.a!3EE749F9413A
Generic Downloader.x!5E9C0612C96B
Generic PUP.x!E3D7343EE85C
RDN/Generic Dropper!vw!03ACA684CCB7
RDN/Generic BackDoor!bbg!FE7E192BE55A
RDN/Generic PUP.x!crj!AEB9B09A4619
Generic Downloader.x!290670BB7D61
Generic PUP.x!7A1A1056D789
RDN/Generic PUP.x!C09FB752FDBA
Generic PUP.x!D5634BC0D629
Generic PUP.x!C4883784D04D
RDN/Generic.bfr!B8CC653FD572
Generic Downloader.x!7529A6376647

Phishing

Vulnerebility

Exploit

BulletProof FTP Client BPS Buffer Overflow

AdaptCMS 3.0.3 - Multiple Vulnerabilities

6.1.2015

Bugtraq

ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities 2015-01-05
Security Alert (Security_Alert emc com)

[SECURITY] [DSA 3119-1] libevent security update 2015-01-06
Salvatore Bonaccorso (carnil debian org)

[ MDVSA-2015:001 ] c-icap 2015-01-05
security mandriva com

[ MDVSA-2015:002 ] pcre 2015-01-05
security mandriva com

Open-Xchange Security Advisory 2015-01-05 2015-01-05
Martin Heiland (martin heiland open-xchange com)

[SECURITY] [DSA 3118-1] strongswan security update 2015-01-05
Yves-Alexis Perez (corsac debian org)

[ MDVSA-2015:003 ] ntp 2015-01-05
security mandriva com

[ MDVSA-2015:004 ] php 2015-01-05
security mandriva com

[The ManageOwnage Series, part XI]: Remote code execution in ServiceDesk, Asset Explorer, Support Center and IT360 2015-01-04
Pedro Ribeiro (pedrib gmail com)

Malware

Generic PUP.x!F73CB638C4D7
RDN/Generic PUP.x!341801A5C8CE
RDN/Generic.bfr!ia!1F531FD030B8
RDN/Generic PUP.x!cr3!FCCBBFAFC98A
RDN/Ransom!em!54B8C2A2D5D3
RDN/Generic.dx!D6435B228C10
RDN/Generic.dx!D9F905DB6998
Generic PUP.x!B9DC026F222A
RDN/Generic.dx!D784971DD5C1
Generic PUP.x!140EEC1C8D22
Generic PUP.x!8F81BBC0A115
RDN/Generic.dx!D80A7BB7E79F
RDN/Generic.dx!D68AA99BF804
RDN/Generic.dx!D6B7E184CC33
RDN/Generic.dx!D66746DAA259
RDN/Generic PUP.x!248A9E3FE16F
Generic PUP.x!4D82DA8C0EC5
RDN/Generic.bfr!09505DCB5D95
RDN/Generic PUP.x!BD7F2390C539
Generic PUP.x!744C50FC5BCA
Generic PUP.x!7ED93CB79E61
RDN/Ransom!EC09200FF69A
Generic PUP.x!CFE86D81D255
RDN/Generic.dx!D705D2DC049F
RDN/Generic.dx!d2b!DDD1661565DB
Generic PWS.y!8E3F5A209C29
Generic PUP.x!B22D9AB29222
RDN/Generic PUP.x!6AAC829DC6BE
RDN/Generic PUP.x!cr3!27B254B279FB
RDN/Generic.dx!D5FFE883A70F

Phishing

Vulnerebility

Exploit

5.1.2015

Bugtraq

[The ManageOwnage Series, part XI]: Remote code execution in ServiceDesk, Asset Explorer, Support Center and IT360 2015-01-04
Pedro Ribeiro (pedrib gmail com)

[KIS-2014-19] Symantec Web Gateway <= 5.2.1 (restore.php) OS Command Injection Vulnerability 2014-12-31
Egidio Romano (research karmainsecurity com)

[KIS-2014-18] Mantis Bug Tracker <= 1.2.17 (ImportXml.php) PHP Code Injection Vulnerability 2014-12-31
Egidio Romano (research karmainsecurity com)

[KIS-2014-16] Osclass <= 3.4.2 (contact.php) Unrestricted File Upload Vulnerability 2014-12-31
Egidio Romano (research karmainsecurity com)

[KIS-2014-15] Osclass <= 3.4.2 (ajax.php) Local File Inclusion Vulnerability 2014-12-31
Egidio Romano (research karmainsecurity com)

Malware

Generic Downloader.x!76806064621B
RDN/Generic PUP.x!cr3!05B92CEA4205
Downloader.gen.a!D723DD899F75
Generic PUP.x!944099CE2FEC
Generic PUP.x!5006BDA2B0BE
Generic Dropper!94FE4D1D206F
Generic PUP.x!ADB7AE3A2C57
Generic PUP.x!2DFF5A78BD88
Downloader.gen.a!53A3F1280877
Downloader.gen.a!5C45964EB7CD
Downloader.gen.a!71C8E867E4BC
Downloader.gen.a!EB99741C5542
Generic PUP.x!4DF2CE548554
Generic PUP.x!1CB8ABBB9754
Generic PUP.x!BB1AB2FC292C
Generic PUP.x!5B9519D6D561
Downloader.gen.a!77601E8EFFB9
RDN/Generic PUP.x!cr3!C0C5DF53C17C
RDN/Generic PUP.x!cr3!B983D74C660E
RDN/Generic.dx!E02D2763244E
RDN/Generic.dx!950DB26E5BE3
PWSZbot-FIA!09ACFA7175AC
Generic PUP.x!5B69539A1C14
RDN/Generic.dx!6EC5E3A9D546
Generic PUP.x!1B96E44DE802
RDN/Ransom!em!CB2058251928
RDN/Generic PUP.x!cr3!F622E82D5BA5
Generic PUP.x!C7EF0C4E032A
RDN/Generic PUP.x!3FCE706FC5BF
RDN/Generic PUP.x!cr3!7CE94C3A5457

Phishing

Vulnerebility

Exploit

ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution

Crea8Social 2.0 - XSS Change Interface

1.1.2015

Bugtraq

[KIS-2014-19] Symantec Web Gateway <= 5.2.1 (restore.php) OS Command Injection Vulnerability 2014-12-31
Egidio Romano (research karmainsecurity com)

[KIS-2014-18] Mantis Bug Tracker <= 1.2.17 (ImportXml.php) PHP Code Injection Vulnerability 2014-12-31
Egidio Romano (research karmainsecurity com)

[KIS-2014-16] Osclass <= 3.4.2 (contact.php) Unrestricted File Upload Vulnerability 2014-12-31
Egidio Romano (research karmainsecurity com)

[KIS-2014-15] Osclass <= 3.4.2 (ajax.php) Local File Inclusion Vulnerability 2014-12-31
Egidio Romano (research karmainsecurity com)

[KIS-2014-14] Osclass <= 3.4.2 (Search::setJsonAlert) SQL Injection Vulnerability 2014-12-31
Egidio Romano (research karmainsecurity com)

[SECURITY] [DSA 3117-1] php5 security update 2014-12-31
Salvatore Bonaccorso (carnil debian org)

[The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central 2014-12-31
Pedro Ribeiro (pedrib gmail com)

Defense in depth -- the Microsoft way (part 26): "Set Program Access and Computer Defaults" hides applications like Outlook 2014-12-30
Stefan Kanthak (stefan kanthak nexgo de)

ESA-2014-179: EMC Replication Manager and EMC AppSync Unquoted Service Path Enumeration Vulnerability 2014-12-30
Security Alert (Security_Alert emc com)

ESA-2014-158: RSA BSAFE® Micro Edition Suite and SSL-J Triple Handshake Vulnerability 2014-12-30
Security Alert (Security_Alert emc com)

[SECURITY] [DSA 3116-1] polarssl security update 2014-12-30
Moritz Muehlenhoff (jmm debian org)

Remote Code Execution via Unauthorised File upload in Cforms 14.7 2014-12-29
z fedotkin infosec ru

[SECURITY] [DSA 3115-1] pyyaml security update 2014-12-29
Moritz Muehlenhoff (jmm debian org)

Malware

W32/Spybot.bfr!B1E0B757538E
RDN/Generic.bfr!ia!C45120DA9266
Generic PUP.x!13EC92963563
Generic PUP.x!F5A6F138B821
RDN/Generic PUP.x!crd!3E49CC68D48B
RDN/Generic.tfr!35E33D0284D7
RDN/Generic PUP.x!crd!D90AC34126B0
RDN/Generic PUP.x!crd!3D9EF3B646E0
RDN/Generic PUP.x!5ED8AF97D018
Downloader.gen.a!CFEF6FC0D0BD
Generic PUP.x!09672B48778B
RDN/Generic.bfr!ia!DF91B75339B1
RDN/Generic PUP.x!crd!9AEF5D6D3DD5
RDN/Generic.bfr!ia!966D59C28531
Generic PUP.x!96A5F0D2D146
RDN/Generic PUP.x!B35F6240EA7C
RDN/Generic PUP.x!crd!6A79D8F9709B
RDN/Generic PUP.x!crd!BF5271733B9D
DNSChanger.bfr!0860CD8ED7DB
RDN/Generic PUP.x!crd!CB37D6BF141A
RDN/Generic PUP.x!crd!D8E1CB9C10CA
Generic PUP.x!973DCBA02BB2
Generic PUP.z!6230E73B081B
RDN/Generic PUP.x!crd!7FE47033E13A
RDN/Generic PUP.x!crd!66B5719587DD
RDN/Generic PUP.x!crd!08561B026E49
RDN/Generic Downloader.x!mg!1A84B52259DD
RDN/Generic.bfr!ia!21A783BB5E55
RDN/Generic.dx!dh3!69DD833D040B
RDN/Generic.bfr!ia!243FE2C3905A

Phishing

Vulnerebility

Exploit

Windows 8.1 (32/64 bit) - Privilege Escalation (ahcache.sys/NtApphelpCacheControl)

ProjectSend Arbitrary File Upload

Social Microblogging PRO 1.5 Stored XSS Vulnerability

NATWEST	26th November 2015
Restricted account access - NatWest plc.
Amazon	26th November 2015
Please confirm your account information .

Amazon	26th November 2015
Please confirm your account information .
Virgin Media	26th November 2015
YOUR LATEST VIRGIN MEDIA BILL CANNOT BE PROCESSED
Chase(SM)online.active.card@co	26th November 2015
NEW MESSAGE FROM CHASE(SM)
Chase Online	26th November 2015
SECURITY UPDATE
SUPPORT	26th November 2015
Were constantly working to make your account safer
Microsoft Team	26th November 2015
Account Re-Validate
email update	25th November 2015
SETUP
Sonya Owens	25th November 2015
WET PUSSY REQUEST

PayPal	6th November 2015
UPDATE YOUR ACCOUNT - PAYPAL
Dr. Watsons	5th November 2015
IVY-LEAGUE DOCTOR JAILED FOR REVEALING DIABETES CURING SECRET
PayPal Service	5th November 2015
YOUR PAYPAL ACCOUNT HAS BEEN SUSPENDED âœ”
PayPal	5th November 2015
UNUSUAL ACTIVITY IN YOUR ACCOUNT
PayPal !	5th November 2015
YOUR ACCOUNT HAS BEEN LIMITED âœ”
PayPal Team	5th November 2015
NOREPLY : YOUR ACCOUNT HAS BEEN LIMITED âœ”

PayPal	5th November 2015
UNUSUAL ACTIVITY IN YOUR ACCOUNT
PayPal !	5th November 2015
YOUR ACCOUNT HAS BEEN LIMITED âœ”
PayPal Team	5th November 2015
NOREPLY : YOUR ACCOUNT HAS BEEN LIMITED âœ”
Paul Hindle	5th November 2015
Fw: new message
PayPal	5th November 2015
Notification - Account Review
Halifax	5th November 2015
Alert - Banking access suspended
ROYAL BANK OF SCOTLANDÂ®	5th November 2015
*****Online Banking (Wire Transfer )***********************Paym ent Alert From Royal Bank Of
PayPal	5th November 2015
Your account status has changed

Holly Bass	25th October 2015
A REQUEST FROM A VIRGIN
Chase(SM)spalerts4secure3@comc	25th October 2015
URGENT: CONFIRMATION OF ONLINE BANKING INFORMATION
Apple	25th October 2015
Notification From Apple

AOL	10th November 2015
Essential Maintenance for sunmtnsft@aol.com
Microsoft	9th November 2015
Fw: new message Date: Fri, 6 Nov 2015 20:29:22 -0800 Message-ID: MIME-Version: 1.0 Content-Type:

PayPal	23rd October 2015
You submitted an order amounting of 59.99 GBP to Asda Stores Limited
WEB	22nd October 2015
MAINTENANCE MAIL-BOX YOUR ACCOUNT DETECTED ACTIVITIES AND WILL BE BLOCKED
PayPal_ID 42310	22nd October 2015
Your account is limited now must be updated now \| Case (PP-35-TB-23-90-SN)
Chase	21st October 2015
An Important Notice From Chase(SM)
APPLE INC.	21st October 2015
Thank You for Your Order [Order iTunes Verification required]