hotnewsonsah5

Databáze Hot News - Rok - Úvod 2018 2017 2016 2015 2014 2013 - 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 List - 2018 2017 2016 2015 2014 2013
Poslední aktualizace v 08.10.2016 14:19:38

4.8.2017

Bugtraq

SEC Consult SA-20170804-1 :: Ubiquiti Networks UniFi Cloud Key authenticated command injection 2017-08-04
SEC Consult Vulnerability Lab (research sec-consult com)

SEC Consult SA-20170804-0 :: phpBB Server Side Request Forgery (SSRF) vulnerability 2017-08-04
SEC Consult Vulnerability Lab (research sec-consult com)

security bulletin] HPESB3P03767 rev.1 - HPE Proliant ML10 Gen9 servers using Intel Xeon E3-1200M v5 and 6th Generation Intel Core Processors, Unauthorized Write to Filesystem 2017-08-04
security-alert hpe com

SECURITY] DSA 3924-1] varnish security update 2017-08-02
Salvatore Bonaccorso (carnil debian org)

slackware-security] gnupg (SSA:2017-213-01) 2017-08-02
Slackware Security Team (security slackware com)

Malware

Phishing

Vulnerebility

SANS News

Threatpost

Cisco Fixes DoS, Authentication Bypass Vulnerabilities, OSPF Bug

Exploit

3.8.2017

Bugtraq

Malware

W32.Emotet.B

Phishing

Vulnerebility

SANS News

Using a Raspberry Pi honeypot to contribute data to DShield/ISC

Threatpost

IBM Patches Reflected XSS in Worklight, MobileFirst

Exploit

Solarwinds Kiwi Syslog 9.6.1.6 - Denial of Service

Premium Servers List Tracker 1.0 - SQL Injection

EDUMOD Pro 1.3 - SQL Injection

Muviko 1.0 - 'q' Parameter SQL Injection

VirtualBox 5.1.22 - Windows Process DLL Signature Bypass Privilege Escalation

VirtualBox 5.1.22 - Windows Process DLL UNC Path Signature Bypass Privilege...

2.8.2017

Bugtraq

slackware-security] gnupg (SSA:2017-213-01) 2017-08-02
Slackware Security Team (security slackware com)

CVE-2017-1500 - Relected XSS in IBM WorkLight OAuth Server Web Api 2017-08-02
gabriele gristina gmail com

security bulletin] HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS) 2017-08-01
security-alert hpe com

security bulletin] HPESBGN03766 rev.1 - HPE Project and Portfolio Management (PPM), Remote Cross-Site Scripting 2017-08-01
security-alert hpe com

CVE-2017-11494] SOL.Connect ISET-mpp meter 1.2.4.2 Authentication Bypass SQL Injection Vulnerability 2017-08-01
andys3c gmail com

SECURITY] DSA 3923-1] freerdp security update 2017-08-01
Sebastien Delafond (seb debian org)

FortiOS <= 5.6.0 Multiple XSS Vulnerabilities 2017-07-28
msg patrykbogdan com

Malware

Phishing

Apple Purchase	1st August 2017
If you did not make this purchase.
National	31st July 2017
Notification : Update your account to get back to watching.

Vulnerebility

SANS News

Attacking NoSQL applications (part 2)

Threatpost

Amazon Halts Sale of Android Blu Phone Amid Spyware Concerns

Legislation Proposed to Secure Connected IoT Devices

Exploit

iOS/macOS - xpc_data Objects Sandbox Escape Privelege Escalation

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection

Entrepreneur B2B Script - 'pid' Parameter SQL Injection

Joomla! Component SIMGenealogy 2.1.5 - SQL Injection

Joomla! Component PHP-Bridge 1.2.3 - SQL Injection

Joomla! Component LMS King Professional 3.2.4.0 - SQL Injection

Joomla! Component Event Registration Pro Calendar 4.1.3 - SQL Injection

Joomla! Component Ultimate Property Listing 1.0.2 - SQL Injection

Advantech SUSIAccess <= 3.0 - Directory Traversal / Information Disclosure...

1.8.2017

Bugtraq

CVE-2017-11494] SOL.Connect ISET-mpp meter 1.2.4.2 Authentication Bypass SQL Injection Vulnerability 2017-08-01
andys3c gmail com

SECURITY] DSA 3923-1] freerdp security update 2017-08-01
Sebastien Delafond (seb debian org)

FortiOS <= 5.6.0 Multiple XSS Vulnerabilities 2017-07-28
msg patrykbogdan com

security bulletin] HPESBHF03765 rev.1 - HPE ConvergedSystem 700 Solution with Comware v7 Switches using OpenSSL, Remote Denial of Service (DoS) and Disclosure of Sensitive Information 2017-07-26
HPE Product Security Response Team (security-alert hpe com)

SECURITY] DSA 3919-1] openjdk-8 security update 2017-07-25
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

National	31st July 2017
Notification : Update your account to get back to watching.

Vulnerebility

SANS News

Rooting Out Hosts that Support Older Samba Versions

Threatpost

Android Banking Trojan Svpeng Adds Keylogger

ShieldFS Can Detect Ransomware, Recover Files

Exploit

Advantech SUSIAccess <= 3.0 - Directory Traversal / Information Disclosure...

Advantech SUSIAccess <= 3.0 - 'RecoveryMgmt' File Upload

DivFix++ 0.34 - Denial of Service

Vorbis Tools oggenc 1.4.0 - '.wav' Denial of Service

Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities

libvorbis 1.3.5 - Multiple Vulnerabilities

libao 1.2.0 - Denial of Service

31.7.2017

Bugtraq

Malware

Trojan.Ismagent
Trojan.Karagany.B

Trojan.Heriplor

Phishing

Vulnerebility

SANS News

Text Banking Scams

Threatpost

Microsoft Releases Outlook and Office Click-to-Run Patches

Exploit

VehicleWorkshop - SQL Injection

Jenkins < 1.650 - Java Deserialization

DiskBoss Enterprise 8.2.14 - Buffer Overflow

VehicleWorkshop - SQL Injection

30.7.2017

Bugtraq

FortiOS <= 5.6.0 Multiple XSS Vulnerabilities 2017-07-28
msg patrykbogdan com

SECURITY] DSA 3919-1] openjdk-8 security update 2017-07-25
Moritz Muehlenhoff (jmm debian org)

SECURITY] DSA 3920-1] qemu security update 2017-07-25
Moritz Muehlenhoff (jmm debian org)

slackware-security] tcpdump (SSA:2017-205-01) 2017-07-24
Slackware Security Team (security slackware com)

SEC Consult SA-20170724-0 :: Cross-Site Scripting (XSS) issue in multiple Ubiquiti Networks products 2017-07-24
SEC Consult Vulnerability Lab (research sec-consult com)

Malware

Trojan.Ismagent

Phishing

RBS	28th July 2017
Friday Update
Tesco Bank	27th July 2017
:Tesco new security features
Email	27th July 2017
Email Terminates in 2days, Add Recovery Phone No To Avoid Account Loss!!

Vulnerebility

SANS News

Static Analysis of Emotet Maldoc

Threatpost

Shorting-For-Profit Viable Business Model For Security Community

Exploit

Joomla! Component CCNewsLetter 2.1.9 - 'sbid' Parameter SQL Injection

FortiOS < 5.6.0 - Cross-Site Scripting

SoundTouch 1.9.2 - Multiple Vulnerabilities

LAME 3.99.5 - Multiple Vulnerabilities

libjpeg-turbo 1.5.1 - Denial of Service

28.7.2017

Bugtraq

SECURITY] DSA 3919-1] openjdk-8 security update 2017-07-25
Moritz Muehlenhoff (jmm debian org)

SECURITY] DSA 3920-1] qemu security update 2017-07-25
Moritz Muehlenhoff (jmm debian org)

slackware-security] tcpdump (SSA:2017-205-01) 2017-07-24
Slackware Security Team (security slackware com)

Malware

Phishing

Tesco Bank	27th July 2017
:Tesco new security features
Email	27th July 2017
Email Terminates in 2days, Add Recovery Phone No To Avoid Account Loss!!

Vulnerebility

SANS News

TinyPot, My Small Honeypot

Threatpost

Android Spyware Still Collects PII Despite Outcry

Google Study Quantifies Ransomware Profits

Attack Uses Docker Containers To Hide, Persist, Plant Malware

Exploit

Friends in War Make or Break 1.7 - Cross-Site Request Forgery (Change Admin...

MediaCoder 0.8.48.5888 - Local Buffer Overflow (SEH)

AudioCoder 0.8.46 - Local Buffer Overflow (SEH)

27.7.2017

Bugtraq

SECURITY] DSA 3919-1] openjdk-8 security update 2017-07-25
Moritz Muehlenhoff (jmm debian org)

SECURITY] DSA 3920-1] qemu security update 2017-07-25
Moritz Muehlenhoff (jmm debian org)

slackware-security] tcpdump (SSA:2017-205-01) 2017-07-24
Slackware Security Team (security slackware com)

SEC Consult SA-20170724-0 :: Cross-Site Scripting (XSS) issue in multiple Ubiquiti Networks products 2017-07-24
SEC Consult Vulnerability Lab (research sec-consult com)

SEC Consult SA-20170724-1 :: Open Redirect issue in multiple Ubiquiti Networks products 2017-07-24
SEC Consult Vulnerability Lab (research sec-consult com)

RT-SA-2017-006] Arbitrary File Disclosure with root Privileges via RdxEngine-API in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-008] Unauthenticated Access to Diagnostic Functions in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-005] Unauthenticated Extraction of Session-IDs in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-009] Remote Command Execution as root in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-003] Cross-Site Scripting in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

Malware

Backdoor.Krad

Ransom.Reyptson

Phishing

EUROMILLION INTERNATIONAL	26th July 2017
Congratulations: you have won in Euromillions
National	26th July 2017
Notification : Update your account to get back to watching.

Vulnerebility

SANS News

TinyPot, My Small Honeypot

Threatpost

Academia’s Role in Security Skills Gap Examined

Vulnerable Radiation Monitoring Devices Won’t Be Patched

Android Sypware Still Collects PII Despite Outcry

Friends in War Make or Break 1.7 - Cross-Site Request Forgery (Change Admin...

Friends in War Make or Break 1.7 - Authentication Bypass

Friends in War Make or Break 1.7 - SQL Injection

Exploit

Friends in War Make or Break 1.7 - Authentication Bypass

Friends in War Make or Break 1.7 - SQL Injection

Microsoft Windows - LNK Shortcut File Code Execution (Metasploit)

26.7.2017

Bugtraq

SECURITY] DSA 3919-1] openjdk-8 security update 2017-07-25
Moritz Muehlenhoff (jmm debian org)

SECURITY] DSA 3920-1] qemu security update 2017-07-25
Moritz Muehlenhoff (jmm debian org)

slackware-security] tcpdump (SSA:2017-205-01) 2017-07-24
Slackware Security Team (security slackware com)

SEC Consult SA-20170724-0 :: Cross-Site Scripting (XSS) issue in multiple Ubiquiti Networks products 2017-07-24
SEC Consult Vulnerability Lab (research sec-consult com)

SEC Consult SA-20170724-1 :: Open Redirect issue in multiple Ubiquiti Networks products 2017-07-24
SEC Consult Vulnerability Lab (research sec-consult com)

RT-SA-2017-006] Arbitrary File Disclosure with root Privileges via RdxEngine-API in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-008] Unauthenticated Access to Diagnostic Functions in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-005] Unauthenticated Extraction of Session-IDs in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-009] Remote Command Execution as root in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-003] Cross-Site Scripting in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

Malware

Phishing

service@paypal-support.co.uk	25th July 2017
New Message
Apple Store	24th July 2017
Apple Notification
Eve	24th July 2017
Action Required]Unrecognized Account Access Notification

Vulnerebility

SANS News

Malspam pushing Emotet malware

Threatpost

Hacker Admits to Mirai Attack Against Deutsche Telekom

Black Hat USA 2017 Preview

Novel Attack Tricks Servers to Cache, Expose Personal Data

Academia’s Role in Security Skills Gap Examined

Exploit

WebKit JSC - 'JSObject::putInlineSlow and JSValue::putToPrimitive' Universal...

WebKit JSC - 'DFG::ByteCodeParser::flush(InlineStackEntry* inlineStackEntry)'...

WebKit JSC - 'arrayProtoFuncSplice' Uninitialized Memory Reference

WebKit JSC - 'JSArray::appendMemcpy' Uninitialized Memory Copy

WebKit JSC - 'ArgumentsEliminationPhase::transform' Incorrect LoadVarargs Handling

WebKit JSC - 'ObjectPatternNode::appendEntry' Stack Use-After-Free

25.7.2017

Bugtraq

slackware-security] tcpdump (SSA:2017-205-01) 2017-07-24
Slackware Security Team (security slackware com)

SEC Consult SA-20170724-0 :: Cross-Site Scripting (XSS) issue in multiple Ubiquiti Networks products 2017-07-24
SEC Consult Vulnerability Lab (research sec-consult com)

SEC Consult SA-20170724-1 :: Open Redirect issue in multiple Ubiquiti Networks products 2017-07-24
SEC Consult Vulnerability Lab (research sec-consult com)

RT-SA-2017-006] Arbitrary File Disclosure with root Privileges via RdxEngine-API in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-008] Unauthenticated Access to Diagnostic Functions in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-005] Unauthenticated Extraction of Session-IDs in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-009] Remote Command Execution as root in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-003] Cross-Site Scripting in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-007] Undocumented Administrative Service Account in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

RT-SA-2017-004] Unauthenticated Arbitrary File Disclosure in REDDOXX Appliance 2017-07-24
RedTeam Pentesting GmbH (release redteam-pentesting de)

SECURITY] DSA 3917-1] catdoc security update 2017-07-23
Salvatore Bonaccorso (carnil debian org)

Malware

Trojan.Ismdoor.B

Phishing

Vulnerebility

SANS News

Uber drivers new threat: the "passenger"

Threatpost

Hacker Admits to Mirai Attack Against Deutsche Telekom

Exploit

Microsoft Internet Explorer - 'mshtml.dll' Remote Code Execution (MS17-007)

IPFire < 2.19 Update Core 110 - Remote Code Execution (Metasploit)

VICIdial 2.9 RC 1 to 2.13 RC1 - user_authorization Unauthenticated Command...

ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution (Metasploit)

PaulShop - SQL Injection / Cross-Site Scripting

REDDOXX Appliance Build 2032 / 2.0.625 - Remote Command Execution

REDDOXX Appliance Build 2032 / 2.0.625 - Arbitrary File Disclosure

MAWK 1.3.3-17 - Local Buffer Overflow

Razer Synapse 2.20.15.1104 - rzpnk.sys ZwOpenProcess (Metasploit)

WebKit - 'WebCore::AccessibilityNodeObject::textUnderElement' Use-After-Free

WebKit - 'WebCore::AccessibilityRenderObject::handleAriaExpandedChanged' Use-After-Free

WebKit - 'WebCore::Node::nextSibling' Use-After-Free

WebKit - 'WebCore::RenderSearchField::addSearchResult' Heap Buffer Overflow

WebKit - 'WebCore::InputType::element' Use-After-Free

WebKit - 'WebCore::RenderObject' with Accessibility Enabled Use-After-Free

WebKit - 'WebCore::Node::getFlag' Use-After-Free

WebKit - 'WebCore::getCachedWrapper' Use-After-Free

24.7.2017

Bugtraq

SECURITY] DSA 3917-1] catdoc security update 2017-07-23
Salvatore Bonaccorso (carnil debian org)

slackware-security] seamonkey (SSA:2017-202-01) 2017-07-21
Slackware Security Team (security slackware com)

security bulletin] HPESBHF03745 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution 2017-07-21
security-alert hpe com

security bulletin] HPESBHF03766 rev.1 - HPE ConvergedSystem 700 Solution with Comware v5 Switches using NTP, Remote Denial of Service (DoS), Unauthorized Modification and Local Denial of Service (DoS) 2017-07-20
security-alert hpe com

File Upload in Integration Gateway (PSIGW) 2017-07-20
ERPScan inc (erpscan online gmail com)

Malware

Phishing

Apple	24th July 2017
Apple just sent you $3,543.00 USD with Paypal. Paypal recommends to withdraw it now.

Vulnerebility

SANS News

Another .lnk File

Uber drivers new threat: the "passenger"

Threatpost

Exploit

Microsoft Internet Explorer - 'mshtml.dll' Remote Code Execution (MS17-007)

ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution (Metasploit)

PaulShop - Sql Injection / Cross-Site Scripting

MAWK 1.3.3-17 - Local Buffer Overflow

23.7.2017

Bugtraq

File Upload in Integration Gateway (PSIGW) 2017-07-20
ERPScan inc (erpscan online gmail com)

Multiple XSS (POST request) Vulnerabilities in TestServlet (PeopleSoft) 2017-07-20
ERPScan inc (erpscan online gmail com)

Directory Traversal vulnerability in Integration Gateway (PSIGW) 2017-07-20
ERPScan inc (erpscan online gmail com)

APPLE-SA-2017-07-19-7 iCloud for Windows 6.2.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-5 Safari 10.1.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

Malware

Phishing

Vulnerebility

SANS News

Black Hat is coming and with it a good reason to update your "Broadcom-based" devices

Malicious .iso Attachments

Threatpost

Trickbot Malware Now Targets US Banks

Motivation Mystery Behind WannaCry, ExPetr

Exploit

NEC UNIVERGE UM4730 < 11.8 - SQL Injection

21.7.2017

Bugtraq

File Upload in Integration Gateway (PSIGW) 2017-07-20
ERPScan inc (erpscan online gmail com)

Multiple XSS (POST request) Vulnerabilities in TestServlet (PeopleSoft) 2017-07-20
ERPScan inc (erpscan online gmail com)

Directory Traversal vulnerability in Integration Gateway (PSIGW) 2017-07-20
ERPScan inc (erpscan online gmail com)

APPLE-SA-2017-07-19-7 iCloud for Windows 6.2.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-5 Safari 10.1.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-2 macOS 10.12.6 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-3 watchOS 3.2.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-1 iOS 10.3.3 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-6 iTunes 12.6.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-4 tvOS 10.2.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

SECURITY] DSA 3914-1] imagemagick security update 2017-07-18
Moritz Muehlenhoff (jmm debian org)

Malware

Backdoor.Rurtar

Phishing

Vulnerebility

SANS News

Threatpost

Senator Calls For Use Of DMARC To Curb Phishing

US, European Law Enforcement Shutter Massive AlphaBay Market

Exploit

Joomla! Component JoomRecipe 1.0.4 - 'search_author' Parameter SQL Injection

WordPress Plugin IBPS Online Exam 1.0 - SQL Injection / Cross-Site Scripting

20.7.2017

Bugtraq

File Upload in Integration Gateway (PSIGW) 2017-07-20
ERPScan inc (erpscan online gmail com)

Multiple XSS (POST request) Vulnerabilities in TestServlet (PeopleSoft) 2017-07-20
ERPScan inc (erpscan online gmail com)

Directory Traversal vulnerability in Integration Gateway (PSIGW) 2017-07-20
ERPScan inc (erpscan online gmail com)

APPLE-SA-2017-07-19-7 iCloud for Windows 6.2.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-5 Safari 10.1.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-2 macOS 10.12.6 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-3 watchOS 3.2.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-1 iOS 10.3.3 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-6 iTunes 12.6.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-07-19-4 tvOS 10.2.2 2017-07-19
Apple Product Security (product-security-noreply lists apple com)

SECURITY] DSA 3914-1] imagemagick security update 2017-07-18
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

Natwest Bank	18th July 2017
LATE PAYMENT
CapitalOne	17th July 2017
Customer support

Vulnerebility

SANS News

Threatpost

Tor Project Opens Bounty Program To All Researchers

Modified Versions of Nukebot in Wild Since Source Code Leak

Senator Calls For Use Of DMARC To Curb Phishing

Exploit

Sonicwall Secure Remote Access 8.1.0.2-14sv - Command Injection

Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit)

Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit)

Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit)

Citrix CloudBridge - 'CAKEPHP' Cookie Command Injection

Linux/x86_64 - Reverse Shell (192.168.1.8:4444) Shellcode (104 bytes)

19.7.2017

Bugtraq

SECURITY] DSA 3914-1] imagemagick security update 2017-07-18
Moritz Muehlenhoff (jmm debian org)

CVE-2017-7728] - Authentication Bypass allows alarm's commands execution in iSmartAlarm 2017-07-13
ilia shnaidman bullguard com

CVE-2017-7684 - Apache OpenMeetings - Insecure File Upload 2017-07-13
Maxim Solodovnik (solomax apache org)

CVE-2017-7663 - Apache OpenMeetings - XSS in chat 2017-07-13
Maxim Solodovnik (solomax apache org)

Malware

SHELLBIND

Phishing

Natwest Bank	18th July 2017
LATE PAYMENT
CapitalOne	17th July 2017
Customer support
Bank of Scotland	16th July 2017
RBS Important Message

Vulnerebility

SANS News

Bots Searching for Keys & Config Files

Threatpost

Botnet Tweeting, Spamming Porn Shut Down

Privacy Activists Suffer Legal Setback In National Security Letter Case

CoinDash Hacked During its ICO

Oracle Releases Biggest Update Ever: 308 Vulnerabilities Patched

Exploit

Microsoft Internet Explorer 11.0.9600.18617 - 'CMarkup::DestroySplayTree' Memory...

Microsoft Internet Explorer 11.1066.14393.0 - VBScript Arithmetic Functions Type...

Microsoft Windows Kernel - 'IOCTL 0x120007 (NsiGetParameter)' nsiproxy/netio Pool...

Hashicorp vagrant-vmware-fusion <= 4.0.20 - Local root Privilege Esclation

PEGA Platform <= 7.2 ML0 - Missing Access Control / Cross-Site Scripting

18.7.2017

Bugtraq

Malware

Ransom.Shifr

Phishing

CapitalOne	17th July 2017
Customer support
Bank of Scotland	16th July 2017
RBS Important Message
MRS. CARMAN LAPOINTE	16th July 2017
UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES

Vulnerebility

SANS News

Investigation of BitTorrent Sync (v.2.0) as a P2P Cloud Service (Part 4 ? Windows Thumbnail Cache, Registry, Prefetch Files, and Link Files artefacts)

Threatpost

FreeRADIUS Update Patches Bugs Static Analysis Tools Missed

Cisco Patches Another Critical Ormandy Bug in WebEx Extension

Botnet Tweeting, Spamming Porn Shut Down

Exploit

Belkin NetCam F7D7601 - Multiple Vulnerabilities

Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit)

Barracuda Load Balancer Firmware <= 6.0.1.006 - Remote Command Injection...

17.7.2017

Bugtraq

Malware

Phishing

Bank of Scotland	16th July 2017
RBS Important Message
MRS. CARMAN LAPOINTE	16th July 2017
UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES
Chase	16th July 2017
Request to update your details with Chase Today!

Vulnerebility

SANS News

SMS Phishing induces victims to photograph its own token card

Threatpost

Exploit

FTPGetter 5.89.0.85 - Buffer Overflow (SEH)

Orangescrum 1.6.1 - Multiple Vulnerabilities

16.7.2017

Bugtraq

CVE-2017-7728] - Authentication Bypass allows alarm's commands execution in iSmartAlarm 2017-07-13
ilia shnaidman bullguard com

CVE-2017-7684 - Apache OpenMeetings - Insecure File Upload 2017-07-13
Maxim Solodovnik (solomax apache org)

CVE-2017-7663 - Apache OpenMeetings - XSS in chat 2017-07-13
Maxim Solodovnik (solomax apache org)

CVE-2017-7688 - Apache OpenMeetings - Insecure Password Update 2017-07-13
Maxim Solodovnik (solomax apache org)

CVE-2017-7664 - Apache OpenMeetings - Missing XML Validation 2017-07-13
Maxim Solodovnik (solomax666 gmail com)

CVE-2017-9788: Uninitialized memory reflection in mod_auth_digest 2017-07-13
William A Rowe Jr (wrowe apache org)

CVE-2017-9789: Apache httpd 2.4 Read after free in mod_http2 2017-07-13
William A Rowe Jr (wrowe apache org)

SECURITY] DSA 3908-1] nginx security update 2017-07-12
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

Bank of Scotland	16th July 2017
RBS Important Message
MRS. CARMAN LAPOINTE	16th July 2017
UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES
Chase	16th July 2017
Request to update your details with Chase Today!
Chase	14th July 2017
Help us protect your Chase Account
Microsoft	14th July 2017
Important Message From BB PADDING-TOP: 10px; PADDING-LEFT: 10px; PADDING-RIGHT: 10px">
MR. IBRAHIM CISSOKO	14th July 2017
Re: Partnership Request
eBay	14th July 2017
This eBay member has a question regarding your item for sale.

Vulnerebility

SANS News

Office maldoc + .lnk

Threatpost

Experts Warn Too Often AWS S3 Buckets Are Misconfigured, Leak Data

Cisco Patches Publicly Disclosed SNMP Vulnerabilities in IOS, IOS XE

Siemens Patches Authentication Bypass Flaw in SiPass Server

NemucodAES Ransomware, Kovter Click-Fraud Malware Spreading in Same Campaigns

Exploit

Firefox 50.0.1 - ASM.JS JIT-Spray Remote Code Execution

Apache Struts 2.3.x Showcase - Remote Code Execution (PoC)

WDTV Live SMP 2.03.20 - Remote Password Reset

Counter Strike: Condition Zero - '.BSP' Map File Code Execution

13.7.2017

Bugtraq

CVE-2017-7728] - Authentication Bypass allows alarm's commands execution in iSmartAlarm 2017-07-13
ilia shnaidman bullguard com

CVE-2017-7684 - Apache OpenMeetings - Insecure File Upload 2017-07-13
Maxim Solodovnik (solomax apache org)

CVE-2017-7663 - Apache OpenMeetings - XSS in chat 2017-07-13
Maxim Solodovnik (solomax apache org)

CVE-2017-7688 - Apache OpenMeetings - Insecure Password Update 2017-07-13
Maxim Solodovnik (solomax apache org)

CVE-2017-7664 - Apache OpenMeetings - Missing XML Validation 2017-07-13
Maxim Solodovnik (solomax666 gmail com)

CVE-2017-9788: Uninitialized memory reflection in mod_auth_digest 2017-07-13
William A Rowe Jr (wrowe apache org)

CVE-2017-9789: Apache httpd 2.4 Read after free in mod_http2 2017-07-13
William A Rowe Jr (wrowe apache org)

SECURITY] DSA 3908-1] nginx security update 2017-07-12
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

eBay	14th July 2017
This eBay member has a question regarding your item for sale.
U.S. Bank	13th July 2017
REQUEST TO UPDATE YOUR U.S. BANK ACCOUNT INFORMATION!
CapitalOne	13th July 2017
Customer support

Vulnerebility

SANS News

NemucodAES and the malspam that distributes it

Threatpost

Google Changes How it Analyzes Misbehaving Mobile Apps

Attackers Using Automated Scans to Takeover WordPress Installs

Scanner Shows EternalBlue Vulnerability Unpatched on Thousands of Machines

Exploit

Dasan Networks GPON ONT WiFi Router H64X Series - Authentication Bypass

Dasan Networks GPON ONT WiFi Router H64X Series - Cross-Site Request Forgery

Dasan Networks GPON ONT WiFi Router H64X Series - Privilege Escalation

Dasan Networks GPON ONT WiFi Router H64X Series - Configuration Download

13.7.2017

Bugtraq

CVE-2017-9788: Uninitialized memory reflection in mod_auth_digest 2017-07-13
William A Rowe Jr (wrowe apache org)

CVE-2017-9789: Apache httpd 2.4 Read after free in mod_http2 2017-07-13
William A Rowe Jr (wrowe apache org)

SECURITY] DSA 3908-1] nginx security update 2017-07-12
Moritz Muehlenhoff (jmm debian org)

SEC Consult SA-20170712-0 :: Multiple critical vulnerabilities in AGFEO smart home ES 5xx/6xx products 2017-07-12
SEC Consult Vulnerability Lab (research sec-consult com)

CVE request]linux kernel xfrm migrate out-of-bound access 2017-07-11
bo Zhang (zhangbo5891001 gmail com)

RT-SA-2017-011] Remote Command Execution in PDNS Manager 2017-07-11
RedTeam Pentesting GmbH (release redteam-pentesting de)

Malware

Phishing

CapitalOne	13th July 2017
Customer support
noreply	12th July 2017
UPDATE YOUR ACCOUNT.
Natwest	12th July 2017
IMPORTANT INFORMATION FROM NATWEST

Vulnerebility

SANS News

Investigation of BitTorrent Sync (v.2.0) as a P2P Cloud Service (Part 3 ? Physical Memory artefacts)

Threatpost

SAP Patches High-Risk Flaws in SAP POS, Host Agent

Uber Patches Authentication Bypass Vulnerability on Custom SSO Solution

New Point-of-Sale Malware LockPoS Hitches Ride with FlokiBot

Third Party Exposes 14 Million Verizon Customer Records

Exploit

Skype for Business 2016 - Cross-Site Scripting

Dasan Networks GPON ONT WiFi Router H64X Series - Authentication Bypass

Dasan Networks GPON ONT WiFi Router H64X Series - Cross-Site Request Forgery

Dasan Networks GPON ONT WiFi Router H64X Series - Privilege Escalation

Dasan Networks GPON ONT WiFi Router H64X Series - Configuration Download

12.7.2017

Bugtraq

SEC Consult SA-20170712-0 :: Multiple critical vulnerabilities in AGFEO smart home ES 5xx/6xx products 2017-07-12
SEC Consult Vulnerability Lab (research sec-consult com)

CVE request]linux kernel xfrm migrate out-of-bound access 2017-07-11
bo Zhang (zhangbo5891001 gmail com)

RT-SA-2017-011] Remote Command Execution in PDNS Manager 2017-07-11
RedTeam Pentesting GmbH (release redteam-pentesting de)

CVE-2017-4918: Code Injection in VMware Horizonâ??s macOS Client 2017-07-10
Florian Bogner (florian bogner sh)

security bulletin] HPESBGN03763 rev.1 - HPE SiteScope, Disclosure of Sensitive Information, Bypass Security Restriction, Remote Arbitrary Code Execution 2017-07-10
HPE Product Security Response Team (security-alert hpe com)

security bulletin] HPESBGN03762 rev.1 - HPE Network Node Manager i (NNMi) Software, Remote Bypass Security Restrictions, Cross-Site Scripting (XSS), URL Redirection 2017-07-10
HPE Product Security Response Team (security-alert hpe com)

Malware

Phishing

noreply	12th July 2017
UPDATE YOUR ACCOUNT.
Natwest	12th July 2017
IMPORTANT INFORMATION FROM NATWEST

Vulnerebility

SANS News

July's Microsoft Patch Tuesday

Backup Scripts, the FIM of the Poor

Threatpost

Adobe Fixes Six Vulnerabilities in Flash, Connect with July Update

Microsoft Addresses NTLM Bugs That Facilitate Credential Relay Attacks

Microsoft Patch Tuesday Update Fixes 19 Critical Vulnerabilities

Exploit

11.7.2017

Bugtraq

security bulletin] HPESBHF03745 rev.2 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution 2017-07-10
HPE Product Security Response Team (security-alert hpe com)

security bulletin] HPESBNS03755 rev.1 - HPE NonStop Server using Samba, Multiple Remote Vulnerabilities 2017-07-10
HPE Product Security Response Team (security-alert hpe com)

CVE-2017-5640 Apache Impala (incubating) Information Disclosure 2017-07-10
Sailesh Mukil (sailesh apache org)

SECURITY] CVE-2017-5652 Apache Impala (incubating) Information Disclosure 2017-07-10
Sailesh Mukil (sailesh apache org)

ToorCon 19 Call For Papers Closing This Week! 2017-07-10
h1kari toorcon org

Malware

Ransom:Win32/Enestaller
Ransom:Win32/Enestedel

Trojan.Listrix

SoftwareBundler:Win32/FileTour

Phishing

Vulnerebility

SANS News

Basic Office maldoc analysis

Threatpost

Google to Fully Distrust WoSign/StartCom SSL Certs in Chrome 61

Energy, Nuclear Targeted with Template Injection Attacks

Telcos Singled Out for Prioritizing Government Requests for Data Over Privacy

Micro Market Vendor Warns of Bankcard And Biometric Data Breach

Exploit

Microsoft Windows Windows 7/8.1/2008 R2/2012 R2/2016 R2 - 'EternalBlue' SMB Remote...

NfSen < 1.3.7 / AlienVault OSSIM < 5.3.6 - Privilege Escalation

NfSen <= 1.3.7 / AlienVault OSSIM 5.3.4 - Command Injection

Pelco Sarix/Spectra Cameras - Cross-Site Request Forgery / Cross-Site Scripting

Pelco Sarix/Spectra Cameras - Remote Code Execution

Pelco VideoXpert 1.12.105 - Information Disclosure

Pelco VideoXpert 1.12.105 - Directory Traversal

Pelco VideoXpert 1.12.105 - Privilege Escalation

Pelco Sarix/Spectra Cameras - Cross-Site Request Forgery (Enable SSH Root Access)

10.7.2017

Bugtraq

slackware-security] irssi (SSA:2017-190-01) 2017-07-09
Slackware Security Team (security slackware com)

SECURITY] DSA 3905-1] xorg-server security update 2017-07-09
Moritz Muehlenhoff (jmm debian org)

SECURITY] DSA 3904-1] bind9 security update 2017-07-08
Yves-Alexis Perez (corsac debian org)

slackware-security] php (SSA:2017-188-01) 2017-07-08
Slackware Security Team (security slackware com)

CVE-2017-10974 Yaws Web Server v1.91 Unauthenticated Remote File Disclosure 2017-07-08
apparitionsec gmail com (hyp3rlinx)

ANNOUNCE] SECURITY] CVE-2017-7660: Security Vulnerability in secure inter-node communication in Apache Solr 2017-07-07
Shalin Shekhar Mangar (shalin apache org)

SYSS-2017-011] Office 365: Insufficient Session Expiration (CWE-613) 2017-07-07
Micha Borrmann (micha borrmann syss de)

Firefox v54.0.1 Denial Of Service 2017-07-07
apparitionsec gmail com

KL-001-2017-015 : Solarwinds LEM Hardcoded Credentials 2017-07-06
KoreLogic Disclosures (disclosures korelogic com)

KL-001-2017-014 : Barracuda WAF Support Tunnel Hijack 2017-07-06
KoreLogic Disclosures (disclosures korelogic com)

Malware

Phishing

Vulnerebility

SANS News

Threatpost

Exploit

9.7.2017

Bugtraq

ANNOUNCE] SECURITY] CVE-2017-7660: Security Vulnerability in secure inter-node communication in Apache Solr 2017-07-07
Shalin Shekhar Mangar (shalin apache org)

SYSS-2017-011] Office 365: Insufficient Session Expiration (CWE-613) 2017-07-07
Micha Borrmann (micha borrmann syss de)

Malware

Phishing

Vulnerebility

Apache Solr CVE-2017-7660 Security Bypass Vulnerability
2017-07-07
http://www.securityfocus.com/bid/99485

Apache Struts CVE-2017-9791 Remote Code Execution Vulnerability
2017-07-07
http://www.securityfocus.com/bid/99484

QEMU CVE-2017-10806 Stack Buffer Overflow Vulnerability
2017-07-07
http://www.securityfocus.com/bid/99475

Qualcomm Closed-Source Components Multiple Unspecified Vulnerabilities
2017-07-07
http://www.securityfocus.com/bid/99467

WordPress Responsive Lightbox Plugin CVE-2017-2243 Cross Site Scripting Vulnerability
2017-07-07
http://www.securityfocus.com/bid/99463

NTP CVE-2017-6458 Buffer Overflow Vulnerability
2017-07-06
http://www.securityfocus.com/bid/97051

SANS News

A VBScript with Obfuscated Base64 Data

Adversary hunting with SOF-ELK

Threatpost

Hard Rock, Loews Hotels Among Sabre Corp Hospitality Breach Victims

Exploit

Easy File Sharing Web Server 7.2 - GET HTTP Request 'PassWD' Buffer Overflow (DEP...

7.7.2017

Bugtraq

ANNOUNCE] SECURITY] CVE-2017-7660: Security Vulnerability in secure inter-node communication in Apache Solr 2017-07-07
Shalin Shekhar Mangar (shalin apache org)

SYSS-2017-011] Office 365: Insufficient Session Expiration (CWE-613) 2017-07-07
Micha Borrmann (micha borrmann syss de)

Firefox v54.0.1 Denial Of Service 2017-07-07
apparitionsec gmail com

KL-001-2017-015 : Solarwinds LEM Hardcoded Credentials 2017-07-06
KoreLogic Disclosures (disclosures korelogic com)

KL-001-2017-014 : Barracuda WAF Support Tunnel Hijack 2017-07-06
KoreLogic Disclosures (disclosures korelogic com)

KL-001-2017-012 : Barracuda WAF Grub Password Complexity 2017-07-06
KoreLogic Disclosures (disclosures korelogic com)

KL-001-2017-011 : Barracuda WAF Internal Development Credential Disclosure 2017-07-06
KoreLogic Disclosures (disclosures korelogic com)

SECURITY] DSA 3903-1] tiff security update 2017-07-05
Moritz Muehlenhoff (jmm debian org)

SECURITY] DSA 3902-1] jabberd2 security update 2017-07-05
Salvatore Bonaccorso (carnil debian org)

security bulletin] HPSBMU02933 rev.3 - HPE SiteScope, issueSiebelCmd and loadFileContents SOAP Requests, Remote Code Execution, Arbitrary File download, Denial of Service (DoS) 2017-07-05
HPE Product Security Response Team (security-alert hpe com)

slackware-security] Slackware 14.0 kernel (SSA:2017-184-01) 2017-07-03
Slackware Security Team (security slackware com)

Malware

Phishing

Amazon	6th July 2017
Payment Refund Order #D01-9294635-404748
Amazon	6th July 2017
Revision to Your Amazon.co.uk Account
AppIe Support	5th July 2017
UPDATE YOUR ACCOUNT ID
Amazon-Store-Card	4th July 2017
Important-Information about your Amazon-Store-Card(5494753), Customer ID: lemcool2

Vulnerebility

SANS News

Threatpost

CopyCat Malware Infected 14M Android Devices, Rooted 8M, in 2016

Let’s Encrypt to Offer Wildcard Certificates in 2018

Decryption Key to Original Petya Ransomware Released

Leaky WWE Database Exposes Personal Data of 3M Wrestling Fans

Exploit

Firefox 54.0.1 - Denial of Service

LibTIFF - 'tif_dirwrite.c' Denial of Service

LibTIFF - 'tif_jbig.c' Denial of Service

LibTIFF - '_TIFFVGetField (tiffsplit)' Out-of-Bounds Read

6.7.2017

Bugtraq

Malware

SoftwareBundler:MSIL/Wizrem
Ransom.Fakecry

VBS.Vlerli

Phishing

Amazon	6th July 2017
Revision to Your Amazon.co.uk Account
AppIe Support	5th July 2017
UPDATE YOUR ACCOUNT ID
Amazon-Store-Card	4th July 2017
Important-Information about your Amazon-Store-Card(5494753), Customer ID: lemcool2

Vulnerebility

SANS News

Investigation of BitTorrent Sync (v.2.0) as a P2P Cloud Service (Part 2 ? Log Files artefacts)

Selecting domains with random names

Threatpost

Threat Actors Target Chinese Language News Sites

Exploit

GoAutoDial 3.3 - Authentication Bypass / Command Injection (Metasploit)

Lepide Auditor Suite - 'createdb()' Web Console Database Injection Remote Code...

5.7.2017

Bugtraq

Malware

Ransom.Haknata

Phishing

Vulnerebility

SANS News

Selecting domains with random names

Threatpost

Exploit

OpenDreamBox 2.0.0 Plugin WebAdmin - Remote Code Execution

Linux/x86 - Reverse TCP Shellcode (67 bytes)

4.7.2017

Bugtraq

slackware-security] Slackware 14.0 kernel (SSA:2017-184-01) 2017-07-03
Slackware Security Team (security slackware com)

SECURITY] DSA 3901-1] libgcrypt20 security update 2017-07-02
Salvatore Bonaccorso (carnil debian org)

CVE-2017-9313] Webmin 1.840 Multiple XSS Vulnerabilities 2017-07-02
andys3c gmail com

InsomniaX loader allows loading of arbitrary Kernel Extensions 2017-07-02
Securify B.V. (lists securify nl)

slackware-security] glibc (SSA:2017-181-01) 2017-06-30
Slackware Security Team (security slackware com)

Malware

Trojan:JS/Jesapi.A!cl

Phishing

Melissa	4th July 2017
Last Notice, Re: Your Payment Info
Amazon-Store-Card	4th July 2017
Important-Information about your Amazon-Store-Card(5544232), Customer ID: lemcool2
Amazon-Store-Card	4th July 2017
Important-Information about your Amazon-Store-Card(3802887), Customer ID: lemcool2
Amazon-Store-Card	4th July 2017
Important-Information about your Amazon-Store-Card(6679016), Customer ID: lemcool2
Amazon-Store-Card	3rd July 2017
Important-Information about your Amazon-Store-Card(4974043), Customer ID: lemcool2

Vulnerebility

SANS News

Threatpost

Classic Ether Wallet Compromised via Social Engineering

Exploit

OpenDreamBox 2.0.0 Plugin WebAdmin - Remote Code Execution

3.7.2017

Bugtraq

SECURITY] DSA 3901-1] libgcrypt20 security update 2017-07-02
Salvatore Bonaccorso (carnil debian org)

CVE-2017-9313] Webmin 1.840 Multiple XSS Vulnerabilities 2017-07-02
andys3c gmail com

InsomniaX loader allows loading of arbitrary Kernel Extensions 2017-07-02
Securify B.V. (lists securify nl)

slackware-security] glibc (SSA:2017-181-01) 2017-06-30
Slackware Security Team (security slackware com)

slackware-security] kernel (SSA:2017-181-02) 2017-06-30
Slackware Security Team (security slackware com)

Malware

Phishing

✅ Yahoo! Mail	3rd July 2017
✅De-activation of Your Yahoo! Email Address.
NatWest.	3rd July 2017
RESTRICTED ACCOUNT ACCESS - NATWEST PLC.
Amazon-Store-Card	3rd July 2017
Important-Information about your Amazon-Store-Card(3811493), Customer ID: lemcool2
Amazon-Store-Card	3rd July 2017
Important-Information about your Amazon-Store-Card(0018019), Customer ID: lemcool2
spoof	3rd July 2017
On what?

Vulnerebility

SANS News

PE Section Name Descriptions

Threatpost

Majority of Sites Fail Mozilla’s Comprehensive Security Review

Exploit

eVestigator Forensic PenTester - MITM Remote Code Execution

BestSafe Browser - MITM Remote Code Execution

BOA Web Server 0.94.14rc21 - Arbitrary File Access

2.7.2017

Bugtraq

Microsoft Dynamic CRM 2016 - Cross-Site Scripting vulnerability 2017-06-30
gregory draperi (gregory draperi gmail com)

SEC Consult SA-20170630-0 :: Multiple critical vulnerabilities in OSCI-Transport library 1.2 for German e-Government 2017-06-30
SEC Consult Vulnerability Lab (research sec-consult com)

Malware

Phishing

Vulnerebility

Using nmap to scan for MS17-010 (CVE-2017-0143 EternalBlue)

Threatpost

ExPetr Called a Wiper Attack, Not Ransomware

Majority of Sites Fail Mozilla’s Comprehensive Security Review

Siemens Patches Critical Intel AMT Flaw in Industrial Products

Exploit

Google Chrome - Out-of-Bounds Access in RegExp Stubs

Humax HG100R 2.0.6 - Backup File Download

LG MRA58K - 'ASFParser::SetMetaData' Stack Overflow

30.6.2017

Bugtraq

Microsoft Dynamic CRM 2016 - Cross-Site Scripting vulnerability 2017-06-30
gregory draperi (gregory draperi gmail com)

SEC Consult SA-20170630-0 :: Multiple critical vulnerabilities in OSCI-Transport library 1.2 for German e-Government 2017-06-30
SEC Consult Vulnerability Lab (research sec-consult com)

ESA-2017-062: VASA Provider Virtual Appliance Remote Code Execution Vulnerability 2017-06-28
EMC Product Security Response Center (Security_Alert emc com)

SECURITY] DSA 3900-1] openvpn security update 2017-06-27
Sebastien Delafond (seb untangle com)

SECURITY] DSA 3886-2] linux regression update 2017-06-27
Salvatore Bonaccorso (carnil debian org)

Malware

Ransom.Beeteeceeware

W32.Futurax

Phishing

spoof	30th June 2017
That Estus Flask though
Chase.com	29th June 2017
Unusual activity detected In Your Chase Account

Vulnerebility

SANS News

Threatpost

Microsoft Issues ‘Important’ Security Fix for Azure AD Connect

‘Little Hope’ to Recover Data Lost to Petya Ransomware

Linux Systemd Bug Could Have Led to Crash, Code Execution

ExPetr Called a Wiper Attack, Not Ransomware

Exploit

Veritas/Symantec Backup Exec - SSL NDMP Connection Use-After-Free (Metasploit)

ActiveMQ < 5.14.0 - web shell upload (Metasploit)

29.6.2017

Bugtraq

ESA-2017-062: VASA Provider Virtual Appliance Remote Code Execution Vulnerability 2017-06-28
EMC Product Security Response Center (Security_Alert emc com)

SECURITY] DSA 3900-1] openvpn security update 2017-06-27
Sebastien Delafond (seb untangle com)

SECURITY] DSA 3886-2] linux regression update 2017-06-27
Salvatore Bonaccorso (carnil debian org)

SECURITY] DSA 3899-1] vlc security update 2017-06-27
Salvatore Bonaccorso (carnil debian org)

slackware-security] kernel (SSA:2017-177-01) 2017-06-26
Slackware Security Team (security slackware com)

Malware

Ransom:Win32/Petya

Phishing

Chase.com	29th June 2017
Unusual activity detected In Your Chase Account

Vulnerebility

SANS News

Catching up with Blank Slate: a malspam campaign still going strong

Threatpost

Google Hit With $2.7 Billion Antitrust Fine

Average Bug Bounty Payments Growing

Microsoft Issues ‘Important’ Security Fix for Azure AD Connect

‘Little Hope’ to Recover Data Lost to Petya Ransomware

Exploit

Linux - 'ldso_hwcap' Local Root Stack Clash Exploit

Oracle Solaris 11.1 / 11.3 RSH - Local Root Stack Clash Exploit

Linux - 'ldso_hwcap_64' Local Root Stack Clash Exploit

OpenBSD - 'at' Local Root Stack Clash Exploit

Flat Assembler 1.7.21 - Buffer Overflow

Linux - 'ldso_dynamic' Local Root Stack Clash Exploit

Linux - 'offset2lib' Stack Clash Exploit

NetBSD - Stack Clash Proof of Concept

FreeBSD - 'FGPU' Stack Clash Proof of Concept

FreeBSD - 'FGPE' Stack Clash Proof of Concept

FreeBSD - 'setrlimit' Stack Clash Proof of Concept

28.6.2017

Bugtraq

SECURITY] DSA 3900-1] openvpn security update 2017-06-27
Sebastien Delafond (seb untangle com)

SECURITY] DSA 3886-2] linux regression update 2017-06-27
Salvatore Bonaccorso (carnil debian org)

SECURITY] DSA 3899-1] vlc security update 2017-06-27
Salvatore Bonaccorso (carnil debian org)

slackware-security] kernel (SSA:2017-177-01) 2017-06-26
Slackware Security Team (security slackware com)

CVE-2017-8831] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c 2017-06-26
wpengfeinudt gmail com

DefenseCode Security Advisory: IBM DB2 Command Line Processor Buffer Overflow 2017-06-26
DefenseCode (defensecode defensecode com)

Microsoft Skype v7.2, v7.35 & v7.36 - Stack Buffer Overflow Vulnerability 2017-06-26
Vulnerability Lab (research vulnerability-lab com)

Malware

Ransom:Win32/Petya
Ransom:Win32/Petya.B

RANSOM_PETYA.SMA

Ransom:Win32/Petya.B
Ransom:Win32/Petya
Ransom:Win32/Petya.A
Win32/Petya
Trojan:Win32/Petya.G
Ransom:DOS/Petya.B
Ransom:DOS/Petya.A

Phishing

Amazon	27th June 2017
Customer Service: Important account information # 83369533
Bank of America	26th June 2017
Bank of America Alert: Unusual Account Activity

Vulnerebility

SANS News

Checking out the new Petya variant

Petya? I hardly know ya! - an ISC update on the 2017-06-27 ransomware outbreak

Threatpost

Major Hole Plugged in Secure File Transfer Tool

Second Global Ransomware Outbreak Under Way

Google Hit With $2.7 Billion Antitrust Fine

Exploit

Microsoft MsMpEng - mpengine x86 Emulator Heap Corruption in VFS API

Easy File Sharing Web Server 7.2 - GET HTTP Request (PassWD) Buffer Overflow (SEH)

GLPI 0.90.4 - SQL Injection

WordPress Plugin Ultimate Product Catalogue 4.2.2 - SQL Injection

27.6.2017

Bugtraq

SECURITY] DSA 3899-1] vlc security update 2017-06-27
Salvatore Bonaccorso (carnil debian org)

slackware-security] kernel (SSA:2017-177-01) 2017-06-26
Slackware Security Team (security slackware com)

CVE-2017-8831] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c 2017-06-26
wpengfeinudt gmail com

DefenseCode Security Advisory: IBM DB2 Command Line Processor Buffer Overflow 2017-06-26
DefenseCode (defensecode defensecode com)

Microsoft Skype v7.2, v7.35 & v7.36 - Stack Buffer Overflow Vulnerability 2017-06-26
Vulnerability Lab (research vulnerability-lab com)

Malware

Trojan.Gordry
Backdoor.Pled

OSX.Macspy

Backdoor.Croxbow

Win32/Diskcoder.Petya

Win32/Diskcoder.Petya.A

Win32/Diskcoder.Petya.B

Win32/Diskcoder.Petya.C

Win32/Diskcoder.Petya.D

Win32/Diskcoder.Petya.E

Win32/Diskcoder.Petya.F

Phishing

Bank of America	26th June 2017
Bank of America Alert: Unusual Account Activity

Vulnerebility

SANS News

A Tale of Two Phishies

Wide-scale Petya variant ransomware attack noted

Checking out the new Petya variant

Threatpost

Another RCE Vulnerability Patched in Microsoft Malware Protection Engine

Anthem Agrees to Settle 2015 Data Breach for $115 Million

Svpeng Behind a Spike in Mobile Ransomware

Exploit

Symantec Messaging Gateway 10.6.2-7 - Remote Code Execution (Metasploit)

Netgear DGN2200 - dnslookup.cgi Command Injection (Metasploit)

Easy File Sharing HTTP Server 7.2 - POST Buffer Overflow (Metasploit)

Eltek SmartPack - Backdoor Account

JAD Java Decompiler 1.5.8e - Buffer Overflow

NTFS 3.1 - Master File Table Denial of Service

LAME 3.99.5 - 'II_step_one' Buffer Overflow

LAME 3.99.5 - 'III_dequantize_sample' Stack-Based Buffer Overflow

IBM DB2 9.7 / 10.1 / 10.5 / 11.1 - Command Line Processor Buffer Overflow

Linux/x86 - Bind Shell Shellcode (75 bytes)

26.6.2017

Bugtraq

CVE-2017-8831] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c 2017-06-26
wpengfeinudt gmail com

DefenseCode Security Advisory: IBM DB2 Command Line Processor Buffer Overflow 2017-06-26
DefenseCode (defensecode defensecode com)

Microsoft Skype v7.2, v7.35 & v7.36 - Stack Buffer Overflow Vulnerability 2017-06-26
Vulnerability Lab (research vulnerability-lab com)

CVE-2017-8831] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c 2017-06-24
wpengfeinudt gmail com

CVE-2017-8813] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c 2017-06-22
wpengfeinudt gmail com

Malware

Ransom:Linux/Erebus.A

Phishing

Wells Fargo	24th June 2017
SECURITY UPDATE: You have unread secured message
UNITED BANK OF AFRICA UBA	24th June 2017
YOUR PAYMENT NOTIFICATION
PayPal	24th June 2017
NOTIFICATION ABOUT YOUR PAYPAL ACCOUNT (ROUTING CODE: C 826-L 003-Q190-T1830)

Vulnerebility

SANS News

Investigation of BitTorrent Sync (v.2.0) as a P2P Cloud (Part 1)

Threatpost

New EU Privacy Laws Will Complicate B2B Data Sharing

Exploit

25.6.2017

Bugtraq

CVE-2017-8813] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c 2017-06-22
wpengfeinudt gmail com

SECURITY] DSA 3893-1] jython security update 2017-06-22
Salvatore Bonaccorso (carnil debian org)

Malware

Phishing

PayPal	24th June 2017
NOTIFICATION ABOUT YOUR PAYPAL ACCOUNT (ROUTING CODE: C 826-L 003-Q190-T1830)
PayPal	23rd June 2017
Why is my account access limited?
Wells Fargo	23rd June 2017
SECURITY UPDATE: You have unread secured message
TalkTalk	23rd June 2017
Security upgrade

Vulnerebility

Threatpost

NSA Advocates Data Sharing Framework

Few Victims Reporting Ransomware Attacks to FBI

Siemens Patches Vulnerabilities in SIMATIC CP, XHQ

Exploit

Microsoft Windows - 'USP10!MergeLigRecords' Uniscribe Font Processing Heap-Based Memory...

Microsoft Windows - 'USP10!ttoGetTableData' Uniscribe Font Processing Out-of-Bounds...

Microsoft Windows - 'USP10!SubstituteNtoM' Uniscribe Font Processing Out-of-Bounds Memory...

Microsoft Windows - 'USP10!CreateIndexTable' Uniscribe Font Processing Out-of-Bounds...

Microsoft Windows - 'USP10!NextCharInLiga' Uniscribe Font Processing Out-of-Bounds Memory...

Microsoft Windows - 'USP10!otlSinglePosLookup::getCoverageTable' Uniscribe Font...

Microsoft Windows - 'USP10!otlValueRecord::adjustPos' Uniscribe Font Processing...

Microsoft Windows - 'USP10!otlReverseChainingLookup::apply' Uniscribe Font Processing...

Microsoft Windows - 'nt!NtQueryInformationResourceManager (information class 0)' Kernel...

Microsoft Windows - Kernel ATMFD.DLL Out-of-Bounds Read due to Malformed Name INDEX in...

Microsoft Windows - 'nt!NtQueryInformationWorkerFactory (WorkerFactoryBasicInformation)'...

unrar 5.40 - VMSF_DELTA Filter Arbitrary Memory Write

Microsoft Edge - 'CssParser::RecordProperty' Type Confusion

Adobe Flash - AVC Edge Processing Out-of-Bounds Read

Adobe Flash - Image Decoding Out-of-Bounds Read

Adobe Flash - ATF Parser Heap Corruption

23.6.2017

Bugtraq

CVE-2017-8813] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c 2017-06-22
wpengfeinudt gmail com

SECURITY] DSA 3893-1] jython security update 2017-06-22
Salvatore Bonaccorso (carnil debian org)

Malware

Trojan:Win32/CrashOverride.A

OSX.Salgorea.B

Phishing

TalkTalk	23rd June 2017
Security upgrade

Vulnerebility

SANS News

Fake DDoS Extortions Continue. Please Forward Us Any Threats You Have Received.

Threatpost

Cisco Patches XXE, DOS, Code Execution Vulnerabilities

Average Cost of Breach Goes Down For the First Time Ever

Microsoft Says Fireball Threat ‘Overblown’

Drupal Patches Three Vulnerabilities in Core Engine

Exploit

Microsoft Windows - 'nt!NtQueryInformationResourceManager (information class 0)'...

Microsoft Windows - 'nt!NtQueryInformationWorkerFactory...

Microsoft Edge - 'CssParser::RecordProperty' Type Confusion

22.6.2017

Bugtraq

CVE-2017-8813] Double-Fetch Vulnerability in Linux-4.10.1/drivers/media/pci/saa7164/saa7164-bus.c 2017-06-22
wpengfeinudt gmail com

SECURITY] DSA 3893-1] jython security update 2017-06-22
Salvatore Bonaccorso (carnil debian org)

slackware-security] openvpn (SSA:2017-172-01) 2017-06-21
Slackware Security Team (security slackware com)

Sitecore 7.1-7.2 Cross Site Scripting Vulnerability 2017-06-21
hamedizadi gmail com

SECURITY] DSA 3890-1] spip security update 2017-06-21
Salvatore Bonaccorso (carnil debian org)

ESA-2017-053: EMC Isilon OneFS Privilege Escalation Vulnerability 2017-06-20
EMC Product Security Response Center (Security_Alert emc com)

Malware

Trojan.Bleagle

Phishing

CS Loxinfo	22nd June 2017
Loxinfo: You a Pending Notification.

Vulnerebility

SANS News

Obfuscating without XOR

Threatpost

Trump’s Cybersecurity Executive Order Under Fire

Microsoft Extends Edge Bug Bounty Program Indefinitely

OpenVPN Patches Critical Remote Code Execution Vulnerability

Honda Shut Down Plant Impacted by WannaCry

Exploit

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution

Linux/x86 - Reverse UDP Shellcode (668 bytes)

21.6.2017

Bugtraq

ESA-2017-053: EMC Isilon OneFS Privilege Escalation Vulnerability 2017-06-20
EMC Product Security Response Center (Security_Alert emc com)

ESA-2017-054: EMC Avamar Multiple Vulnerabilities 2017-06-20
EMC Product Security Response Center (Security_Alert emc com)

CVE-2017-3167: Apache httpd 2.x ap_get_basic_auth_pw authentication bypass 2017-06-19
Jacob Champion (jchampion apache org)

CVE-2017-7659: mod_http2 null pointer dereference 2017-06-19
Jim Jagielski (jim apache org)

SECURITY] DSA 3886-1] linux security update 2017-06-19
Salvatore Bonaccorso (carnil debian org)

SECURITY] DSA 3887-1] glibc security update 2017-06-19
Moritz Muehlenhoff (jmm debian org)

security bulletin] HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution 2017-06-19
HPE Product Security Response Team (security-alert hpe com)

Malware

Phishing

NatWest	21st June 2017
IMPORTANT SECURITY INFORMATION

Vulnerebility

SANS News

Windows Error Reporting: DFIR Benefits and Privacy Concerns

It has been a month and a bit how is your new patching program holding up?

Threatpost

Avaya Patches Remote Code Execution Flaw in Aura

ProtonMail Launches Free VPN Service

University College London Ransomware Linked to AdGholas Malvertising Group

Internet-Enabled Drill Demonstrates IoT Security Done Right

TP-Link Fixes Code Execution Vulnerability in End-of-Life Routers

Exploit

Microsoft Windows - 'win32k!NtGdiGetOutlineTextMetricsInternalW' Kernel Pool Memory...

Microsoft Windows - 'IOCTL 0x390400, operation code 0x00020000' Kernel KsecDD Pool...

Microsoft Windows - 'IOCTL_MOUNTMGR_QUERY_POINTS' Kernel Mountmgr Pool Memory...

Microsoft Windows - '0x224000 IOCTL (WmiQueryAllData)' Kernel WMIDataDevice Pool...

Microsoft Windows - 'win32k!NtGdiEnumFonts' Kernel Pool Memory Disclosure

Microsoft Windows - 'IOCTL_VOLUME_GET_VOLUME_DISK_EXTENTS' volmgr Pool Memory...

Microsoft Windows - 'IOCTL_DISK_GET_DRIVE_GEOMETRY_EX' Kernel partmgr Pool Memory...

WonderCMS 2.1.0 - Cross-Site Request Forgery

Freeware Advanced Audio Coder (FAAC) 1.28 - Denial of Service

20.6.2017

Bugtraq

CVE-2017-3167: Apache httpd 2.x ap_get_basic_auth_pw authentication bypass 2017-06-19
Jacob Champion (jchampion apache org)

CVE-2017-7659: mod_http2 null pointer dereference 2017-06-19
Jim Jagielski (jim apache org)

SECURITY] DSA 3886-1] linux security update 2017-06-19
Salvatore Bonaccorso (carnil debian org)

SECURITY] DSA 3887-1] glibc security update 2017-06-19
Moritz Muehlenhoff (jmm debian org)

security bulletin] HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution 2017-06-19
HPE Product Security Response Team (security-alert hpe com)

Ektron Version 9.10SP1(Build 9.1.0.184) Cross Site Scripting 2017-06-19
ghasseminia gmail com

Malware

Ransom.Sorebrect

Trojan.Bleagle

Phishing

Vulnerebility

SANS News

As Your Admin Walks Out the Door ..

Windows Error Reporting: DFIR Benefits and Privacy Concerns

Threatpost

Google Removes Two Ztorg Trojans from Play Marketplace

Republican Data Broker Exposes 198M Voter Records

Mexican Journalists, Lawyers Focus of Government Spyware

FIN10 Extorting Canadian Mining Companies, Casinos
Windows Error Reporting: DFIR Benefits and Privacy Concerns

Exploit

iBall Baton iB-WRA150N - Unauthenticated DNS Change

nuevoMailer 6.0 - SQL Injection

GNU binutils - 'rx_decode_opcode' Buffer Overflow

GNU binutils - 'disassemble_bytes' Heap Overflow

GNU binutils - 'bfd_get_string' Stack Buffer Overflow

GNU binutils - 'decode_pseudodbg_assert_0' Buffer Overflow

GNU binutils - 'ieee_object_p' Stack Buffer Overflow

GNU binutils - 'print_insn_score16' Buffer Overflow

GNU binutils - 'aarch64_ext_ldst_reglist' Buffer Overflow

19.6.2017

Bugtraq

SECURITY] DSA 3887-1] glibc security update 2017-06-19
Moritz Muehlenhoff (jmm debian org)

security bulletin] HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution 2017-06-19
HPE Product Security Response Team (security-alert hpe com)

Ektron Version 9.10SP1(Build 9.1.0.184) Cross Site Scripting 2017-06-19
ghasseminia gmail com

ESA-2017-041: EMC VNX1 and VNX2 Family Multiple Vulnerabilities in VNX Control Station 2017-06-16
EMC Product Security Response Center (Security_Alert emc com)

June 2017 - Bamboo - Critical Security Advisory 2017-06-16
Atlassian (security atlassian com)

security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege 2017-06-15
security-alert hpe com

Malware

Phishing

Vulnerebility

SANS News

Threatpost

IoT Malware Activity Already More Than Doubled 2016 Numbers

Exploit

iBall Baton iB-WRA150N - Unauthenticated DNS Change

nuevoMailer 6.0 - SQL Injection

UTstarcom WA3002G4 - Unauthenticated DNS Change

D-Link DSL-2640U - Unauthenticated DNS Change

Beetel BCM96338 Router - Unauthenticated DNS Change

D-Link DSL-2640B - Unauthenticated Remote DNS Change

18.6.2017

Bugtraq

ESA-2017-041: EMC VNX1 and VNX2 Family Multiple Vulnerabilities in VNX Control Station 2017-06-16
EMC Product Security Response Center (Security_Alert emc com)

June 2017 - Bamboo - Critical Security Advisory 2017-06-16
Atlassian (security atlassian com)

security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege 2017-06-15
security-alert hpe com

SECURITY] DSA 3882-1] request-tracker4 security update 2017-06-15
Salvatore Bonaccorso (carnil debian org)

Malware

Ransom:Win32/Sorikrypt.A

Phishing

Vulnerebility

SANS News

Mapping Use Cases to Logs. Which Logs are the Most Important to Collect?

Threatpost

Nigerian BEC Scams Hit 500 Companies in 50 Countries

Someone Failed to Contain WannaCry

Wikileaks Alleges Years of CIA D-Link and Linksys Router Hacking Via ‘Cherry Blossom’ Program

Exploit

WebKit JSC - JSGlobalObject::haveABadTime Causes Type Confusions

WebKit JSC - arrayProtoFuncSplice does not Initialize all Indices

WebKit JSC - JIT Optimization Check Failed in...

WebKit JSC - Heap Buffer Overflow in Intl.getCanonicalLocales

Easy File Sharing Web Server 7.2 - 'POST' Buffer Overflow (DEP Bypass)

KBVault MySQL 0.16a - Arbitrary File Upload

Joomla! Component JoomRecipe 1.0.3 - SQL Injection

16.6.2017

Bugtraq

ESA-2017-041: EMC VNX1 and VNX2 Family Multiple Vulnerabilities in VNX Control Station 2017-06-16
EMC Product Security Response Center (Security_Alert emc com)

June 2017 - Bamboo - Critical Security Advisory 2017-06-16
Atlassian (security atlassian com)

security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege 2017-06-15
security-alert hpe com

SECURITY] DSA 3882-1] request-tracker4 security update 2017-06-15
Salvatore Bonaccorso (carnil debian org)

CVE-2017-9613: Stored Cross-Site Scripting in SAP successfactors 2017-06-15
dunstan pinto gmail com

slackware-security] mozilla-firefox (SSA:2017-165-02) 2017-06-15
Slackware Security Team (security slackware com)

slackware-security] bind (SSA:2017-165-01) 2017-06-15
Slackware Security Team (security slackware com)

SECURITY] DSA 3881-1] firefox-esr security update 2017-06-14
Moritz Muehlenhoff (jmm debian org)

Malware

Ransom:Win32/Jaffrans

Phishing

Vulnerebility

SANS News

Uberscammers

What is going on with Port 83?

Threatpost

Metadata Analysis Draws its Own Conclusions on WannaCry Authors

Ransomware Attack Hobbles Prestigious University College London

Nigerian BEC Scams Hit 500 Companies in 50 Countries

Exploit

Avast aswSnx.sys Kernel Driver 11.1.2253 - Memory Corruption Privilege Escalation

Easy File Sharing Web Server 7.2 - 'POST' Buffer Overflow (DEP Bypass)

KBVault MySQL 0.16a - Arbitrary File Upload

Joomla! Component JoomRecipe 1.0.3 - SQL Injection

Sudo - 'get_process_ttyname()' Privilege Escalation

VX Search Enterprise 9.7.18 - Local Buffer Overflow

15.6.2017

Bugtraq

CVE-2017-9613: Stored Cross-Site Scripting in SAP successfactors 2017-06-15
dunstan pinto gmail com

slackware-security] mozilla-firefox (SSA:2017-165-02) 2017-06-15
Slackware Security Team (security slackware com)

slackware-security] bind (SSA:2017-165-01) 2017-06-15
Slackware Security Team (security slackware com)

SECURITY] DSA 3881-1] firefox-esr security update 2017-06-14
Moritz Muehlenhoff (jmm debian org)

ESA-2017-043: EMC ESRS Virtual Edition Authentication Bypass Vulnerability 2017-06-14
EMC Product Security Response Center (Security_Alert emc com)

ESA-2017-031: RSA BSAFE® Cert-C Improper Certificate Processing Vulnerability 2017-06-14
EMC Product Security Response Center (Security_Alert emc com)

Malware

Ransom:Linux/Erebus.A

Phishing

Vulnerebility

SANS News

Threatpost

Abuse of Apple Search Ads Feature Leading to Fraud

DHS, FBI Warn of North Korea ‘Hidden Cobra’ Strikes Against US Assets

Decryption Utility Unlocks Files Encrypted by Jaff Ransomware

Mozilla Fixes 32 Vulnerabilities in Firefox 54

Exploit

Linux/x86 - XOR encoded execve(/bin/sh) setuid(0) setgid(0) Shellcode (66 bytes)

Linux/x86 - execve("/bin/sh") Shellcode (24 bytes)

Google Chrome - V8 Private Property Arbitrary Code Execution

HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary...

Easy MOV Converter 1.4.24 - 'Enter User Name' Buffer Overflow (SEH)

14.6.2017

Bugtraq

ESA-2017-043: EMC ESRS Virtual Edition Authentication Bypass Vulnerability 2017-06-14
EMC Product Security Response Center (Security_Alert emc com)

ESA-2017-031: RSA BSAFE® Cert-C Improper Certificate Processing Vulnerability 2017-06-14
EMC Product Security Response Center (Security_Alert emc com)

SECURITY] DSA 3880-1] libgcrypt20 security update 2017-06-14
Salvatore Bonaccorso (carnil debian org)

Secunia Research: libsndfile "aiff_read_chanmap()" Information Disclosure Vulnerability 2017-06-13
Secunia Research (remove-vuln secunia com)

SEC Consult SA-20170613-0 :: Access Restriction Bypass in Atlassian Confluence 2017-06-13
SEC Consult Vulnerability Lab (research sec-consult com)

Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities 2017-06-12
Vulnerability Lab (research vulnerability-lab com)

Evolution Script CMS v5.3 - Cross Site Scripting Vulnerability 2017-06-12
Vulnerability Lab (research vulnerability-lab com)

Malware

BrowserModifier:Win32/Xiazai

Phishing

Vulnerebility

Systemd Could Fallback to Google DNS?

Threatpost

Post-WannaCry, 5.5 Million Devices Still Expose SMB Port

Patrick Wardle on MacRansom Ransomware-as-a-Service

Adobe Fixes 21 Critical Vulnerabilities with June Patch Tuesday Update

Microsoft Patches Two Critical Vulnerabilities Under Attack

Exploit

WordPress Plugin WP Jobs < 1.5 - SQL Injection

WordPress Plugin Event List <= 0.7.8 - SQL Injection

WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection

Easy MOV Converter 1.4.24 - 'Enter User Name' Buffer Overflow (SEH)

LG MRA58K - Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid...

LG MRA58K - Missing Bounds-Checking in AVI Stream Parsing

LG MRA58K - 'ASFParser::ParseHeaderExtensionObjects' Missing Bounds-Checking

13.6.2017

Bugtraq

Secunia Research: libsndfile "aiff_read_chanmap()" Information Disclosure Vulnerability 2017-06-13
Secunia Research (remove-vuln secunia com)

SEC Consult SA-20170613-0 :: Access Restriction Bypass in Atlassian Confluence 2017-06-13
SEC Consult Vulnerability Lab (research sec-consult com)

Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities 2017-06-12
Vulnerability Lab (research vulnerability-lab com)

Evolution Script CMS v5.3 - Cross Site Scripting Vulnerability 2017-06-12
Vulnerability Lab (research vulnerability-lab com)

SECURITY] DSA 3877-1] tor security update 2017-06-10
Salvatore Bonaccorso (carnil debian org)

security bulletin] HPESBHF03730 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities 2017-06-09
security-alert hpe com

SECURITY] DSA 3876-1] otrs2 security update 2017-06-09
Moritz Muehlenhoff (jmm debian org)

Malware

Ransom.Erebus

Backdoor.Industroyer

Android.WannaLocker

Phishing

Tesco Bank	12th June 2017
Your Online Account Activity Alert
spoof	12th June 2017
Tristam hates trap?

Vulnerebility

SANS News

An Introduction to VolUtility

Threatpost

Blinking Router LEDs Leak Data From Air-Gapped Networks

FIN7 Hitting Restaurants with Fileless Malware

Exploit

Easy File Sharing Web Server 7.2 - 'POST' Buffer Overflow

Logpoint < 5.6.4 - Unauthenticated Root Remote Code Execution

WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection

Real Estate Classifieds Script - SQL Injection

Disk Pulse 9.7.26 - 'Add Directory' Local Buffer Overflow

12.6.2017

Bugtraq

Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities 2017-06-12
Vulnerability Lab (research vulnerability-lab com)

Evolution Script CMS v5.3 - Cross Site Scripting Vulnerability 2017-06-12
Vulnerability Lab (research vulnerability-lab com)

SECURITY] DSA 3877-1] tor security update 2017-06-10
Salvatore Bonaccorso (carnil debian org)

security bulletin] HPESBHF03730 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities 2017-06-09
security-alert hpe com

SECURITY] DSA 3876-1] otrs2 security update 2017-06-09
Moritz Muehlenhoff (jmm debian org)

SECURITY] DSA 3875-1] libmwaw security update 2017-06-09
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

spoof	12th June 2017
Tristam hates trap?
Service PayPaI	10th June 2017
STATEMENT SERVICE] WE HAVE UPDATES ON OUR POLICY UPDATE PAGE.

Vulnerebility

VMware Horizon View Client CVE-2017-4918 Command Injection Vulnerability
2017-06-12
http://www.securityfocus.com/bid/98984

Cisco Elastic Services Controller CVE-2017-6688 Default Credentials Security Bypass Vulnerability
2017-06-09
http://www.securityfocus.com/bid/98973

Google Chrome Prior to 59.0.3071.86 Multiple Security Vulnerabilities
2017-06-09
http://www.securityfocus.com/bid/98861

Resteasy CVE-2016-9606 Remote Code Execution Vulnerability
2017-06-09
http://www.securityfocus.com/bid/94940

Red Hat Undertow CVE-2017-2670 Remote Denial of Service Vulnerability
2017-06-09
http://www.securityfocus.com/bid/98965

OpenSSL CVE-2016-7056 Local Information Disclosure Vulnerability
2017-06-09
http://www.securityfocus.com/bid/95375

SANS News

Threatpost

Attackers Mining Cryptocurrency Using Exploits for Samba Vulnerability

Exploit

Logpoint < 5.6.4 - Unauthenticated Root Remote Code Execution

Easy File Sharing Web Server 7.2 - Authentication Bypass

DiskBoss 8.0.16 - 'Input Directory' Local Buffer Overflow

VMware vSphere Data Protection 5.x/6.x - Java Deserialization

EFS Easy Chat Server 3.1 - Buffer Overflow (SEH)

IPFire 2.19 - Remote Code Execution

eCom Cart 1.3 - SQL Injection

EFS Easy Chat Server 3.1 - Password Disclosure

EFS Easy Chat Server 3.1 - Password Reset

PaulShop - SQL Injection

Disk Sorter 9.7.14 - 'Input Directory' Local Buffer Overflow

11.6.2017

Bugtraq

security bulletin] HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service 2017-06-08
security-alert hpe com

ESA-2017-064: RSA Identity Governance and Lifecycle Multiple Vulnerabilities 2017-06-08
EMC Product Security Response Center (Security_Alert emc com)

SYSS-2017-018] OTRS - Access to Installation Dialog 2017-06-08
sebastian auwaerter syss de

security bulletin] HPESBGN03758 rev.1 - HPE UCMDB, Remote Code Execution 2017-06-07
security-alert hpe com

CVE update - fixed in Apache Ranger 0.7.1 2017-06-07
Velmurugan Periasamy (vel apache org)

security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) 2017-06-07
security-alert hpe com

Malware

Phishing

Vulnerebility

SANS News

An Occasional Look in the Rear View Mirror

Threatpost

Platinum APT First to Abuse Intel Chip Management Feature

Google Releases reCAPTCHA API for Android

GameStop Online Shoppers Officially Warned of Breach

Exploit

Mapscrn 2.03 - Local Buffer Overflow

libcroco 0.6.12 - Denial of Service

libquicktime 1.2.4 - Denial of Service

9.6.2017

Bugtraq

security bulletin] HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service 2017-06-08
security-alert hpe com

ESA-2017-064: RSA Identity Governance and Lifecycle Multiple Vulnerabilities 2017-06-08
EMC Product Security Response Center (Security_Alert emc com)

SYSS-2017-018] OTRS - Access to Installation Dialog 2017-06-08
sebastian auwaerter syss de

security bulletin] HPESBGN03758 rev.1 - HPE UCMDB, Remote Code Execution 2017-06-07
security-alert hpe com

CVE update - fixed in Apache Ranger 0.7.1 2017-06-07
Velmurugan Periasamy (vel apache org)

security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) 2017-06-07
security-alert hpe com

Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities 2017-06-07
Vulnerability Lab (research vulnerability-lab com)

Sophos Cyberoam Cross-site scripting (XSS) vulnerability 2017-06-06
bhdresh gmail com

Malware

Ransom:Win32/HydraCrypt.A
Ransom:Win32/Spora.A
Ransom:Win32/Wagcrypt.A

Android.Dvmap

JS.Heur.SNIC

VBS.Heur.SNIC

Phishing

SERVICE	9th June 2017
Notification
Tesco Bank	9th June 2017
Alert From Customer Service

Vulnerebility

SANS News

Threatpost

VMware Patches Critical Vulnerabilities in vSphere Data Protection

Motorola Moto G4, G5 Vulnerable to Local Root Shell Attacks

Exploit

Apple macOS 10.12.3 / iOS < 10.3.2 - Userspace Entitlement Checking Race Condition

Apple macOS - Disk Arbitration Daemon Race Condition

Mapscrn 2.03 - Local Buffer Overflow

Craft CMS 2.6 - Cross-Site Scripting

8.6.2017

Bugtraq

SYSS-2017-018] OTRS - Access to Installation Dialog 2017-06-08
sebastian auwaerter syss de

security bulletin] HPESBGN03758 rev.1 - HPE UCMDB, Remote Code Execution 2017-06-07
security-alert hpe com

CVE update - fixed in Apache Ranger 0.7.1 2017-06-07
Velmurugan Periasamy (vel apache org)

security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) 2017-06-07
security-alert hpe com

Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities 2017-06-07
Vulnerability Lab (research vulnerability-lab com)

Sophos Cyberoam Cross-site scripting (XSS) vulnerability 2017-06-06
bhdresh gmail com

Malware

Phishing

Vulnerebility

SANS News

Summer STEM for Kids

Threatpost

Cisco Patches Critical Flaws in Prime Data Center Network Manager

Authentication Bypass, Potential Backdoors Plague Old WiMAX Routers

Google Removes Rooting Trojan Dvmap From Play Store

Zusy Malware Installs Via Mouseover – No Clicking Required

Windows 10 Mitigations Make Future EternalBlue Attacks Difficult

EFF Sues DOJ Over National Security Letter Disclosure Rules

Exploit

VMware Workstation 12 Pro - Denial of Service

Windows - UAC Protection Bypass via FodHelper Registry Key (Metasploit)

DC/OS Marathon UI - Docker Exploit (Metasploit)

Grav CMS 1.4.2 Admin Plugin - Cross-Site Scripting

Xavier 2.4 - SQL Injection

Artifex MuPDF mujstest 1.10a - Null Pointer Dereference

Artifex MuPDF - Null Pointer Dereference

PuTTY < 0.68 - 'ssh_agent_channel_data' Integer Overflow Heap Corruption

Linux Kernel < 4.10.13 - 'keyctl_set_reqkey_keyring' Local Denial of Service

Linux Kernel - 'ping' Local Denial of Service

7.6.2017

Bugtraq

Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities 2017-06-07
Vulnerability Lab (research vulnerability-lab com)

Sophos Cyberoam Cross-site scripting (XSS) vulnerability 2017-06-06
bhdresh gmail com

security bulletin] HPESBGN03752 rev.1 - HPE IceWall using OpenSSL, remote Denial of Service (DoS) 2017-06-05
security-alert hpe com

security bulletin] HPESBHF03756 rev.1 - HPE Network Products including Comware 7, iMC, and VCX running OpenSSL, Remote Denial of Service (DoS), Disclosure of Sensitive Information 2017-06-05
security-alert hpe com

X41-2017-005 - Multiple Vulnerabilities in peplink balance routers 2017-06-05
X41 D-Sec GmbH Advisories (advisories x41-dsec de)

SECURITY] DSA 3873-1] perl security update 2017-06-05
Salvatore Bonaccorso (carnil debian org)

Malware

Phishing

***THANK YOU***	6th June 2017
TUESDAY: Your $50 Amazon gift card
TalkTalk	5th June 2017
Account authentication

Vulnerebility

SANS News

Malware and XOR - Part 2

Threatpost

Google Fixes 30 Vulnerabilities, Five High Severity, in Chrome 59

IBM Backup Bug Gets Workaround Fix After Nine Months of Exposure

Curiosity Kills Security When it Comes to Phishing

Exploit

Apple Safari 10.1 - Spread Operator Integer Overflow Remote Code Execution

6.6.2017

Bugtraq

security bulletin] HPESBGN03752 rev.1 - HPE IceWall using OpenSSL, remote Denial of Service (DoS) 2017-06-05
security-alert hpe com

X41-2017-005 - Multiple Vulnerabilities in peplink balance routers 2017-06-05
X41 D-Sec GmbH Advisories (advisories x41-dsec de)

SECURITY] DSA 3873-1] perl security update 2017-06-05
Salvatore Bonaccorso (carnil debian org)

SECURITY] DSA 3870-1] wordpress security update 2017-06-01
Sebastien Delafond (seb debian org)

SECURITY] DSA 3869-1] tnef security update 2017-06-01
Sebastien Delafond (seb debian org)

Malware

Phishing

Vulnerebility

SANS News

Malware and XOR - Part 1

Threatpost

53 Percent of Enterprise Flash Installs are Outdated

40,000 Subdomains Tied to RIG Exploit Kit Shut Down

QakBot Returns, Locking Out Active Directory Accounts

Exploit

Apple Safari 10.1 - Spread Operator Integer Overflow Remote Code Execution

Home Web Server 1.9.1 build 164 - Remote Code Execution

Kronos Telestaff < 2.92EU29 - SQL Injection

WordPress Plugin Tribulant Newsletters 4.6.4.2 - File Disclosure / Cross-Site...

Cisco Catalyst 2960 IOS 12.2(55)SE1 - 'ROCEM' Remote Code Execution

Linux/x86-64 - /bin/sh Shellcode (31 bytes)

Home Web Server 1.9.1 build 164 - Remote Code Execution

Kronos Telestaff < 2.92EU29 - SQL Injection

5.6.2017

Bugtraq

X41-2017-005 - Multiple Vulnerabilities in peplink balance routers 2017-06-05
X41 D-Sec GmbH Advisories (advisories x41-dsec de)

SECURITY] DSA 3873-1] perl security update 2017-06-05
Salvatore Bonaccorso (carnil debian org)

SECURITY] DSA 3870-1] wordpress security update 2017-06-01
Sebastien Delafond (seb debian org)

SECURITY] DSA 3869-1] tnef security update 2017-06-01
Sebastien Delafond (seb debian org)

Malware

Phishing

Bank of America	4th June 2017
Bank of America Alert: Your Online Access is Temporarily Locked

Vulnerebility

SANS News

Threatpost

Exploit

Joomla Component Payage 2.05 - 'aid' Parameter SQL Injection

Disk Sorter 9.7.14 - 'Input Directory' Local Buffer Overflow

EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution

Subsonic 6.1.1 - Cross-Site Request Forgery

Subsonic 6.1.1 - Server-Side Request Forgery

Subsonic 6.1.1 - Cross-Site Request Forgery / Cross-Site Scripting

Parallels Desktop - Virtual Machine Escape

Subsonic 6.1.1 - XML External Entity Injection

BIND 9.10.5 - Unquoted Service Path Privilege Escalation

Disk Sorter 9.7.14 - 'Input Directory' Local Buffer Overflow

DNSTracer 1.8.1 - Buffer Overflow

4.6.2017

Bugtraq

SECURITY] DSA 3870-1] wordpress security update 2017-06-01
Sebastien Delafond (seb debian org)

SECURITY] DSA 3869-1] tnef security update 2017-06-01
Sebastien Delafond (seb debian org)

CVE-2017-5688] Executable installers are vulnerable^WEVIL (case 52): Intel installation framework allows arbitrary code execution with escalation of privilege 2017-05-31
Stefan Kanthak (stefan kanthak nexgo de)

Malware

Phishing

User Support	3rd June 2017
New message for you
Netflix Inc	3rd June 2017
UPDATE YOUR NETFLIX INFORMATION !

Vulnerebility

SANS News

Threatpost

Jaff Malware Probe Uncovers Link to Cybercrime Marketplace

SSH Configuration on Nexpose Servers Allowed Weak Encryption Algorithms

EternalBlue Exploit Spreading Gh0st RAT, Nitol

Exploit

2.6.2017

Bugtraq

SECURITY] DSA 3870-1] wordpress security update 2017-06-01
Sebastien Delafond (seb debian org)

SECURITY] DSA 3869-1] tnef security update 2017-06-01
Sebastien Delafond (seb debian org)

DefenseCode ThunderScan SAST Advisory: WordPress Simple Slideshow Manager Plugin Multiple Security Vulnerabilities 2017-05-30
DefenseCode (defensecode defensecode com)

SECURITY] DSA 3867-1] sudo security update 2017-05-30
Salvatore Bonaccorso (carnil debian org)

Malware

Phishing

***THANK YOU***	1st June 2017
TUESDAY: Your $50 Amazon gift card
***THANK YOU***	1st June 2017
THURSDAY: Your $50 Amazon gift card

Vulnerebility

Phishing Campaigns Follow Trends

Threatpost

Fireball Malware Infects 250 Million Computers Worldwide

WikiLeaks Dumps CIA Patient Zero Windows Implant

WannaCry Development Errors Enable File Recovery

OneLogin Breach Compromised Customer Data, Ability to Decrypt Encrypted Data

Insecure Backend Databases Blamed for Leaking 43TB of App Data

Exploit

1.6.2017

Bugtraq

SECURITY] DSA 3870-1] wordpress security update 2017-06-01
Sebastien Delafond (seb debian org)

SECURITY] DSA 3869-1] tnef security update 2017-06-01
Sebastien Delafond (seb debian org)

DefenseCode ThunderScan SAST Advisory: WordPress Simple Slideshow Manager Plugin Multiple Security Vulnerabilities 2017-05-30
DefenseCode (defensecode defensecode com)

SECURITY] DSA 3867-1] sudo security update 2017-05-30
Salvatore Bonaccorso (carnil debian org)

SECURITY] DSA 3866-1] strongswan security update 2017-05-30
Yves-Alexis Perez (corsac debian org)

SECURITY] DSA 3865-1] mosquitto security update 2017-05-29
Moritz Muehlenhoff (jmm debian org)

Malware

Phishing

Vulnerebility

SANS News

Sharing Private Data with Webcast Invitations

Threatpost

Privacy Issue Fixed in Yopify Ecommerce Notification Plugin

New Machine Learning Behind Early Phishing Detection in Gmail

Patches Available for Linux Sudo Vulnerability

Hack Department of Homeland Security Act Would Bring Bug Bounty Program to DHS

Exploit

WebKit JSC - 'JSObject::ensureLength' ensureLengthSlow Check Failure

WebKit JSC - Incorrect Check in emitPutDerivedConstructorToArrowFunctionContextScope

WebKit - 'Element::setAttributeNodeNS' Use-After-Free

Piwigo Plugin Facetag 0.0.3 - SQL Injection

OV3 Online Administration 3.0 - Directory Traversal

OV3 Online Administration 3.0 - Remote Code Execution

OV3 Online Administration 3.0 - SQL Injection

Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting