hotnewsobsah 7

Databáze Hot News - Rok - Úvod 2018 2017 2016 2015 2014 2013 - 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 List - 2018 2017 2016 2015 2014 2013
Poslední aktualizace v 08.10.2016 14:19:38

8.2.2017

Bugtraq

ESA-2017-001: EMC Isilon InsightIQ Authentication Bypass Vulnerability 2017-02-07
EMC Product Security Response Center (Security_Alert emc com)

SEC Consult SA-20170207 :: Path Traversal, Backdoor accounts & KNX group address password bypass in JUNG Smart Visu server 2017-02-07
SEC Consult Vulnerability Lab (research sec-consult com)

[security bulletin] HPESBUX03699 SSRT110304 rev.1 - HP-UX BIND, Multiple Remote Denial of Service (DoS) 2017-02-06
HPE Product Security Response Team (security-alert hpe com)

Teleopti WFM <= 7.1.0 Multiple Vulnerabilities 2017-02-06
Graph-X (graphx sigaint org)

[SECURITY] [DSA 3781-1] svgsalamander security update 2017-02-05
Moritz Muehlenhoff (jmm debian org)

ZoneMinder - multiple vulnerabilities 2017-02-05
john terabyteit com au

Malware

Trojan.Vimnaspu

Phishing

Apple	7th February 2017
YOUR APPIE LD IS AUTOMATICALLY LOCKED.
AOL	7th February 2017
you have got a new message
AOL	7th February 2017
you have got an incoming message
Chase	7th February 2017
CHASE BANK - NOTIFICATION!
Chase	7th February 2017
CHASE BANK - NOTICE!

Vulnerebility

SANS News

My Password is [taco] Using Emojis for Stronger Passwords

Threatpost

Attackers Capitalizing on Unpatched WordPress Sites

Consortium Publishes Manifesto on Autonomous Vehicle Security

Uber Debuts SSH Key Authentication Module

Valve Patches Trivial XSS Bug in Steam

Exploit

Muviko Video CMS - SQL Injection

Multi Outlets POS 3.1 - 'id' Parameter SQL Injection

Fully Featured News CMS 1.0 - 'id' Parameter SQL Injection

OpenBSD HTTPd < 6.0 - Memory Exhaustion Denial of Service

Easy Support Tools 1.0 - 'stt' Parameter SQL Injection

7.2.2017

Bugtraq

SEC Consult SA-20170207 :: Path Traversal, Backdoor accounts & KNX group address password bypass in JUNG Smart Visu server 2017-02-07
SEC Consult Vulnerability Lab (research sec-consult com)

[security bulletin] HPESBUX03699 SSRT110304 rev.1 - HP-UX BIND, Multiple Remote Denial of Service (DoS) 2017-02-06
HPE Product Security Response Team (security-alert hpe com)

Teleopti WFM <= 7.1.0 Multiple Vulnerabilities 2017-02-06
Graph-X (graphx sigaint org)

[SECURITY] [DSA 3781-1] svgsalamander security update 2017-02-05
Moritz Muehlenhoff (jmm debian org)

ZoneMinder - multiple vulnerabilities 2017-02-05
john terabyteit com au

[FOXMOLE SA 2016-07-05] ZoneMinder - Multiple Issues 2017-02-02
FOXMOLE Advisories (advisories foxmole com)

Ghostscript 9.20 Filename Command Execution 2017-02-02
apparitionsec gmail com (hyp3rlinx)

[security bulletin] HPSBST03588 rev 1. - HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS, Remote Arbitrary Command Execution 2017-02-01
security-alert hpe com

Malware

OSX.Addkeysteal

TrojanDownloader:Win32/Mato
PWS:Win32/Passew
PWS:MSIL/Tosnir.A

Phishing

Chase	7th February 2017
CHASE BANK - NOTICE!
BB&T Alerts	6th February 2017
Request to Update Your BB&T Online Information!
Apple Online - Store	6th February 2017
APPLE ONLINE - WE'VE RECEIVED YOUR ORDER: [MMMH36GLV6]

Vulnerebility

SANS News

Malicious Or Not? You decide...

My Password is [taco] Using Emojis for Stronger Passwords

Threatpost

ICS, SCADA Security Woes Linger On

InterContinental Hotels Confirms Credit Card Breach

St. Jude Patches Additional Cardiac Device

Smart TV Manufacturer Vizio Fined $2.2M for Tracking Customers

Exploit

IVPN Client 2.6.1 - Privilege Escalation

6.2.2017

Bugtraq

Teleopti WFM <= 7.1.0 Multiple Vulnerabilities 2017-02-06
Graph-X (graphx sigaint org)

[SECURITY] [DSA 3781-1] svgsalamander security update 2017-02-05
Moritz Muehlenhoff (jmm debian org)

ZoneMinder - multiple vulnerabilities 2017-02-05
john terabyteit com au

Malware

Phishing

Vulnerebility

SANS News

What Are These Odd POP3 (Port 110/tcp) Scans About?

Threatpost

Exploit

ThisIsWhyImBroke Clone Script 4.0 - 'id' Parameter SQL Injection

Upworthy Clone Script 1.1.0 - 'id' Parameter SQL Injection

Ultimate Viral Media Script 1.0 - 'id' Parameter SQL Injection

Visual Link Sharing Websites Builder Script 2.1.0 - SQL Injection

ThisIsWhyImBroke Clone Script 4.0.0 - 'id' Parameter SQL Injection

Funny Image and Video Script 2.0.0 - 'id' Parameter SQL Injection

Clone Script Directory Script 1.1.0 - 'cid' Parameter SQL Injection

Viral Pictures and Video Script 2.0.0 - 'id' Parameter SQL Injection

NewsBee CMS - SQL Injection

Web Inspiration Gallery Script 1.0.0 - 'id' Parameter SQL Injection

Viral Fun Facts Sharing Script 1.1.0 - 'id' Parameter SQL Injection

5.2.2017

Bugtraq

Malware

Trojan.Zherotee

Phishing

Information	4th February 2017
Account Information
PayPal	3rd February 2017
Tracking Number For sunmtnsft@aol.com

Vulnerebility

SANS News

Detecting Undisclosed Vulnerabilities with Security Tools & Features

Many Malware Samples Found on Pastebin

Threatpost

Exploit

Alstrasoft EPay Enterprise 5.17 - SQL Injection

Alstrasoft ProTaxi Enterprise 3.5 - Arbitrary File Upload

Alstrasoft e-Friends 5.12 - SQL Injection

Alstrasoft Video Share Enterprise 4.72 - SQL Injection

Alstrasoft Flippa Clone MarketPlace Script 4.10 - Cross-Site Request Forgery (Add Admin)

Alstrasoft FMyLife Pro 1.02 - Cross-Site Request Forgery (Add Admin)

Alstrasoft Forum Pay Per Post Exchange Script 2.01 - SQL Injection

SlimarUSER Management 1.0 - 'id' Parameter SQL Injection

Debian 9 ntfs-3g - Privilege Escalation

ntfs-3g (Debian 9) - Privilege Escalation

3.2.2017

Bugtraq

[FOXMOLE SA 2016-07-05] ZoneMinder - Multiple Issues 2017-02-02
FOXMOLE Advisories (advisories foxmole com)

Ghostscript 9.20 Filename Command Execution 2017-02-02
apparitionsec gmail com (hyp3rlinx)

Malware

JS.Kopiwak

Ransom.Spora!gm

Trojan.Zherotee

Phishing

PayPal	3rd February 2017
Tracking Number For sunmtnsft@aol.com

Vulnerebility

SANS News

Cisco - Issue with Clock Signal Component

Threatpost

Printing and Marketing Firm Leaks High-Profile Customers’ Data

Microsoft Waits for Patch Tuesday to Fix SMB Zero Day

Cisco Patches Authentication Bypass in Cisco Prime Home

Locky Ransomware, Kovter Click-Fraud Malware Spreading in Same Campaigns

Honeywell SCADA Controllers Exposed Passwords in Clear Text

Exploit

CUPS < 2.0.3 - Remote Command Execution

Netwave IP Camera - Password Disclosure

SlimarUSER Management 1.0 - 'id' Parameter SQL Injection

Itech Multi Vendor Script 6.49 - SQL Injection

2.2.2017

Bugtraq

[FOXMOLE SA 2016-07-05] ZoneMinder - Multiple Issues 2017-02-02
FOXMOLE Advisories (advisories foxmole com)

Ghostscript 9.20 Filename Command Execution 2017-02-02
apparitionsec gmail com (hyp3rlinx)

[security bulletin] HPSBST03588 rev 1. - HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS, Remote Arbitrary Command Execution 2017-02-01
security-alert hpe com

Cisco Security Advisory: Cisco Prime Home Authentication Bypass Vulnerability 2017-02-01
Cisco Systems Product Security Incident Response Team (psirt cisco com)

ESA-2017-003: EMC Network Configuration Manager (NCM) Multiple Vulnerabilities 2017-02-01
EMC Product Security Response Center (Security_Alert emc com)

[SECURITY] [DSA 3779-1] wordpress security update 2017-02-01
Sebastien Delafond (seb debian org)

[security bulletin] HPESBHF03700 rev.1 - HPE iMC PLAT, Remote Disclosure of Information, Denial of Service (DoS) 2017-01-31
security-alert hpe com

[SECURITY] [DSA 3778-1] ruby-archive-tar-minitar security update 2017-01-31
Salvatore Bonaccorso (carnil debian org)

[security bulletin] HPESBGN03696 rev.1 - HPE Helion Eucalyptus, Remote Escalation of Privilege 2017-01-31
security-alert hpe com

[security bulletin] HPSBHF03693 rev.1 - HPE iMC PLAT Network Products running Microsoft SQL Server, Remote Elevation of Privilege 2017-01-31
security-alert hpe com

Malware

Phishing

Vulnerebility

SANS News

Multiple vulnerabilities discovered in popular printer models

Threatpost

Latest Ubuntu Update Includes OpenSSL Fixes

HTTPS Hits 50 Percent Traffic Milestone

Google Adds Security Key Enforcement to G Suite Apps, Hosted S/MIME to Gmail

Exploit

WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection (PoC)

WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection Arbitrary Code Execution

Microsoft Windows 10 - SMBv3 Tree Connect (PoC)

Ghostscript 9.20 - 'Filename' Command Execution

WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection Arbitrary Code Execution

WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection (PoC)

WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection Arbitrary Code Execution

Ghostscript 9.20 - 'Filename' Command Execution

QNAP NVR/NAS - Buffer Overflow

1.2.2017

Bugtraq

[security bulletin] HPESBHF03700 rev.1 - HPE iMC PLAT, Remote Disclosure of Information, Denial of Service (DoS) 2017-01-31
security-alert hpe com

[SECURITY] [DSA 3778-1] ruby-archive-tar-minitar security update 2017-01-31
Salvatore Bonaccorso (carnil debian org)

[security bulletin] HPESBGN03696 rev.1 - HPE Helion Eucalyptus, Remote Escalation of Privilege 2017-01-31
security-alert hpe com

[security bulletin] HPSBHF03693 rev.1 - HPE iMC PLAT Network Products running Microsoft SQL Server, Remote Elevation of Privilege 2017-01-31
security-alert hpe com

ESA-2017-007: EMC Documentum eRoom Unverified Password Change Vulnerability 2017-01-31
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-094: RSA BSAFE Micro Edition Suite Multiple Vulnerabilities 2017-01-31
EMC Product Security Response Center (Security_Alert emc com)

[REVIVE-SA-2017-001] Revive Adserver - Multiple vulnerabilities 2017-01-31
Matteo Beccati (matteo beccati com)

[security bulletin] HPESBMU03701 rev.1 - HPE Smart Storage Administrator, Remote Arbitrary Code Execution 2017-01-30
security-alert hpe com

Secunia Research: libarchive "lha_read_file_header_1()" Out-Of-Bounds Memory Access Denial of Service Vulnerability 2017-01-30
Secunia Research (remove-vuln secunia com)

Malware

Backdoor.Mapkill

Trojan.Quasar

Backdoor.Chches

Phishing

MBNA credit card	1st February 2017
YOUR MBNA CREDIT CARD

Vulnerebility

SANS News

Quick Analysis of Data Left Available by Attackers

Threatpost

Nicolas Brulez on Malware Reverse Engineering Tips and Tricks

Ugly Password Gaffe Plagues Cryptkeeper Encryption App

Flaws Found in Popular Printer Models

Trump Cyber Executive Order Calls for 60-Day Review

Zimperium Program Buys Exploits for Patched Mobile Vulnerabilities

Exploit

Google Android - 'cfp_ropp_new_key_reenc' and 'cfp_ropp_new_key' RKP Memory Corruption

Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation

Apple WebKit - 'HTMLFormElement::reset()' Use-After Free

Google Chrome - 'HTMLKeygenElement::shadowSelect()' Type Confusion

Apple WebKit - 'HTMLKeygenElement' Type Confusion

Apple WebKit - Type Confusion in RenderBox with Accessibility Enabled

Google Android - RKP Information Disclosure via s2-remapping Physical Ranges

Netman 204 - Backdoor Account / Password Reset

Multiple Netgear Routers - Password Disclosure

Viscosity 1.6.7 - Privilege Escalation

LogoStore - SQL Injection

Joomla! Component JTAG Calendar 6.2.4 - SQL Injection

Viscosity 1.6.7 - Privilege Escalation

31.1.2017

Bugtraq

[security bulletin] HPSBHF03693 rev.1 - HPE iMC PLAT Network Products running Microsoft SQL Server, Remote Elevation of Privilege 2017-01-31
security-alert hpe com

ESA-2017-007: EMC Documentum eRoom Unverified Password Change Vulnerability 2017-01-31
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-094: RSA BSAFE Micro Edition Suite Multiple Vulnerabilities 2017-01-31
EMC Product Security Response Center (Security_Alert emc com)

[REVIVE-SA-2017-001] Revive Adserver - Multiple vulnerabilities 2017-01-31
Matteo Beccati (matteo beccati com)

[security bulletin] HPESBMU03701 rev.1 - HPE Smart Storage Administrator, Remote Arbitrary Code Execution 2017-01-30
security-alert hpe com

Secunia Research: libarchive "lha_read_file_header_1()" Out-Of-Bounds Memory Access Denial of Service Vulnerability 2017-01-30
Secunia Research (remove-vuln secunia com)

secuvera-SA-2017-01: Privilege escalation in an OPSI Managed Client environment ("rise of the machines") 2017-01-30
sbieber secuvera de

Persistent Cross-Site Scripting vulnerability in User Access Manager WordPress Plugin 2017-01-28
Summer of Pwnage (lists securify nl)

Multiple blind SQL injection vulnerabilities in FormBuilder WordPress Plugin 2017-01-28
Summer of Pwnage (lists securify nl)

Malware

Ransom:Win32/Wagcrypt.A

Phishing

Information	30th January 2017
Account Information
AOL	30th January 2017
incoming message
AOL	30th January 2017
youve got a new request

Vulnerebility

SANS News

Malicious Office files using fileless UAC bypass to drop KEYBASE malware

Threatpost

Telemarketing Firm Leaks 400,000 Recorded Calls

Facebook Tackles Account Recovery with Delegated Recovery Protocol

Nested, Targeted Attacks Built for Reconnaissance

Nicolas Brulez on Malware Reverse Engineering Tips and Tricks

Exploit

Multiple Netgear Routers - Password Disclosure

Viscosity 1.6.7 - Privilege Escalation

30.1.2017

Bugtraq

[security bulletin] HPESBMU03701 rev.1 - HPE Smart Storage Administrator, Remote Arbitrary Code Execution 2017-01-30
security-alert hpe com

Secunia Research: libarchive "lha_read_file_header_1()" Out-Of-Bounds Memory Access Denial of Service Vulnerability 2017-01-30
Secunia Research (remove-vuln secunia com)

secuvera-SA-2017-01: Privilege escalation in an OPSI Managed Client environment ("rise of the machines") 2017-01-30
sbieber secuvera de

Persistent Cross-Site Scripting vulnerability in User Access Manager WordPress Plugin 2017-01-28
Summer of Pwnage (lists securify nl)

Multiple blind SQL injection vulnerabilities in FormBuilder WordPress Plugin 2017-01-28
Summer of Pwnage (lists securify nl)

CVE-2017-3160: Gradle Distribution URL used by Cordova-Android does not use https by default 2017-01-27
bowserj gmail com

[SECURITY] [DSA 3773-1] openssl security update 2017-01-27
Moritz Muehlenhoff (jmm debian org)

ESA-2016-133: EMC Data Protection Advisor Path Traversal Vulnerability 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-154: RSA BSAFE® Crypto-J Multiple Security Vulnerabilities 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-037: EMC PowerPath Management Appliance Information Disclosure Vulnerability 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

Secunia Research: Oracle Outside In VSDX Use-After-Free Vulnerability 2017-01-27
Secunia Research (remove-vuln secunia com)

[slackware-security] mozilla-thunderbird (SSA:2017-026-01) 2017-01-27
Slackware Security Team (security slackware com)

Malware

Trojan:Win32/Mupad.A
Ransom:Win32/Cerber.HVT
Ransom:Win32/Cerber.A
Trojan:Win32/Pdfphish
PWS:HTML/Misfhing.B
Trojan:Win32/Pdfphish.BU
TrojanSpy:MSIL/Lachemp.A
Ransom:Win32/Wagcrypt.A

Phishing

Paypal	29th January 2017
Important update required.
Chase	29th January 2017
CHASE BANK - SECURITY NOTICE!
Credit Union	29th January 2017
Navy Federal Credit Union : Account Security Verification Alert

Vulnerebility

SANS News

py2exe Decompiling - Part 2

Threatpost

Many Android VPN Apps Breaking Privacy Promises

Exploit

VirtualBox < 5.0.32 / < 5.1.14 - Privilege Escalation

OpenSSL 1.1.0 - Remote Client Denial of Service

Itech Freelancer Script 5.13 - SQL Injection

Itech Dating Script 3.26 - SQL Injection

Itech Classifieds Script 7.27 - SQL Injection

Itech B2B Script 4.28 - SQL Injection

Auction Script 6.49 - SQL Injection

Caregiver Script 2.57 - SQL Injection

PEAR Base System 1.10.1 - Arbitrary File Download

TrueConf Server 4.3.7 - Multiple Vulnerabilities

Linux - Multi/Dual mode execve("/bin/sh", NULL, 0) Shellcode (37 bytes)

29.1.2017

Bugtraq

Malware

TrojanSpy:MSIL/Lachemp.A

Phishing

Bank of America Online.	28th January 2017
You Have 1 New Message..
AOL	26th January 2017
A woman has tagged your account
AOL	26th January 2017
youve got an incoming request
AOL	26th January 2017
A woman appears to have tagged your very own profile page

Vulnerebility

SANS News

What Keeps My Honeypot Busy These Days

Packet Analysis - Where do you start?

Request for Packets and Logs - TCP 5358

Threatpost

Google to Operate its Own Root CA

Dridex Returns With Windows UAC Bypass Method

WordPress 4.7.2 Update Fixes XSS, SQL Injection Bugs

Cisco Warns of Critical Flaw in Teleconferencing Gear

Exploit

WordPress Plugin Online Hotel Booking System Pro 1.0 - SQL Injection

Online Hotel Booking System Pro 1.2 - SQL Injection

WordPress Plugin WP Private Messages 1.0.1 - SQL Injection

Maian Weblog 4.0 - SQL Injection

My Photo Gallery 1.0 - SQL Injection

Palo Alto Networks Terminal Services Agent 7.0.3-13 - Integer Overflow

27.1.2017

Bugtraq

ESA-2016-133: EMC Data Protection Advisor Path Traversal Vulnerability 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-154: RSA BSAFE® Crypto-J Multiple Security Vulnerabilities 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-037: EMC PowerPath Management Appliance Information Disclosure Vulnerability 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

Secunia Research: Oracle Outside In VSDX Use-After-Free Vulnerability 2017-01-27
Secunia Research (remove-vuln secunia com)

[slackware-security] mozilla-thunderbird (SSA:2017-026-01) 2017-01-27
Slackware Security Team (security slackware com)

CA20170126-01: Security Notice for CA Common Services casrvc 2017-01-26
Kotas, Kevin J (Kevin Kotas ca com)

[SECURITY] [DSA 3772-1] libxpm security update 2017-01-26
Salvatore Bonaccorso (carnil debian org)

ESA-2016-167: EMC Documentum D2 Multiple Vulnerabilities 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-160: EMC Data Domain DD OS Command Injection Vulnerability 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-132: EMC RecoverPoint Multiple Vulnerabilities 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-092: RSA® Web Threat Detection Cross Site Scripting Vulnerability 2017-01-26
EMC Product Security Response Center (Security_Alert emc com)

PEAR HTTP_Upload v1.0.0b3 Arbitrary File Upload 2017-01-26
apparitionsec gmail com (hyp3rlinx)

Malware

Trojan:Win32/Pdfphish
PWS:HTML/Misfhing.B
Trojan:Win32/Pdfphish.BU

Phishing

AOL	26th January 2017
A woman has tagged your account
AOL	26th January 2017
youve got an incoming request
AOL	26th January 2017
A woman appears to have tagged your very own profile page
auto-confirrm Amazon.co.uk	26th January 2017
Order ID : ID : 83771 "Your Amazon.co.uk order "Apple Leather..."

Vulnerebility

SANS News

IOC's: Risks of False Positive Alerts Flood Ahead

Threatpost

Google to Block .js Attachments in Gmail

Bill Calls for Study of Cybersecurity Standards for Cars

Facebook Touts ‘Safer’ Security Key Login

Exploit

macOS 10.12.1 / iOS Kernel - 'host_self_trap' Use-After-Free

macOS 10.12.1 / iOS Kernel - 'IOService::matchPassive' Use-After-Free

macOS 10.12.1 / iOS 10.2 - Kernel Userspace Pointer Memory Corruption

Google Android - 'pm_qos' KASLR Bypass

Linux/x86_64 - execve /bin/sh Shellcode (22 bytes)

Haraka < 2.8.9 - Remote Command Execution

Autodesk Backburner Manager 3 < 2016.0.0.2150 - Null Dereference Denial of Service

Polycom VVX Web Interface - Change Admin Password

PHPBack < 1.3.1 - SQL Injection / Cross-Site Scripting

TM RG4332 Wireless Router - Arbitrary File Disclosure

Web Based TimeSheet Script - Authentication Bypass

KB Messages PHP Script 1.0 - Authentication Bypass

KB Login Authentication Script 1.1 - Authentication Bypass

KB Affiliate Referral Script 1.0 - Authentication Bypass

OpenSSH 6.8 < 6.9 - 'PTY' Privilege Escalation

Systemd 228 - Privilege Escalation (PoC)

26.1.2017

Bugtraq

PEAR HTTP_Upload v1.0.0b3 Arbitrary File Upload 2017-01-26
apparitionsec gmail com (hyp3rlinx)

[SECURITY] [DSA 3771-1] firefox-esr security update 2017-01-25
Moritz Muehlenhoff (jmm debian org)

Google Forms WordPress Plugin unauthenticated PHP Object injection vulnerability 2017-01-25
Summer of Pwnage (lists securify nl)

Cisco Security Advisory: Cisco TelePresence Multipoint Control Unit Remote Code Execution Vulnerability 2017-01-25
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Expressway Series and TelePresence VCS Denial of Service Vulnerability 2017-01-25
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Adaptive Security Appliance CX Context-Aware Security Denial of Service Vulnerability 2017-01-25
Cisco Systems Product Security Incident Response Team (psirt cisco com)

ESA-2016-166: EMC Isilon OneFS Privilege Escalation Vulnerability 2017-01-25
EMC Product Security Response Center (Security_Alert emc com)

OpenCart 2.3.0.2 CSRF - User Account Takeover 2017-01-25
Open Security (open opensecurity ca)

Malware

Trojan:Win32/Derbit.B

Phishing

AOL	26th January 2017
A woman has tagged your account
AOL	26th January 2017
youve got an incoming request
AOL	26th January 2017
A woman appears to have tagged your very own profile page

Vulnerebility

SANS News

IOC's: Risks of False Positive Alerts Flood Ahead

Threatpost

Default Credentials Found in Schneider Electric Wonderware Historian

Half of Ransomware Victims Pay Criminals’ Demands to Recover Data

High-Severity Chrome Vulnerabilities Earn Researcher $32K in Rewards

Google to Block .js Attachments in Gmail

Exploit

Haraka <= 2.8.9 - Remote Command Execution

Autodesk Backburner Manager 3 < 2016.0.0.2150 - Null Dereference Denial of Service

Geutebrueck GCore 1.3.8.42/1.4.2.37 - Remote Code Execution (Metasploit)

Pear HTTP_Upload 1.0.0b3 - Arbitrary File Upload

Joomla! < 3.6.4 - Admin TakeOver

Joomla! < 2.5.2 - Admin Creation

Movie Portal Script 7.36 - Multiple Vulnerabilities

Man-db 2.6.7.1 - Privilege Escalation (PoC)

GNU Screen 4.5.0 - Privilege Escalation

GNU Screen 4.5.0 - Privilege Escalation (PoC)

25.1.2017

Bugtraq

OpenCart 2.3.0.2 CSRF - User Account Takeover 2017-01-25
Open Security (open opensecurity ca)

[security bulletin] HPSBST03642 rev.3 - HPE StoreVirtual Products running LeftHand OS using OpenSSL and OpenSSH, Remote Arbitrary Code Execution, Denial of Service (DoS), Disclosure of Sensitive Information, Unauthorized Access 2017-01-24
security-alert hpe com

[security bulletin] HPSBHF03695 rev.1 - HPE Ethernet Adaptors, Remote Denial of Service (DoS) 2017-01-24
security-alert hpe com

[security bulletin] HPSBHF03441 rev.2 - HPE iLO 3, iLO 4 and iLO 4 mRCA, Remote Multiple Vulnerabilities 2017-01-24
security-alert hpe com

Cisco Security Advisory: Cisco WebEx Browser Extension Remote Code Execution Vulnerability 2017-01-24
Cisco Systems Product Security Incident Response Team (psirt cisco com)

[security bulletin] HPSBGN03690 rev.1 - HPE Real User Monitor (RUM), Remote Disclosure of Information 2017-01-24
security-alert hpe com

CVE-2017-3241 - [ERPSCAN-17-006] Oracle OpenJDK - Java Serialization DoS 2017-01-24
ERPScan inc (erpscan online gmail com)

[ERPSCAN-17-005] Oracle PeopleSoft - XSS vulnerability CVE-2017-3300 2017-01-24
ERPScan inc (erpscan online gmail com)

[slackware-security] mozilla-firefox (SSA:2017-023-01) 2017-01-24
Slackware Security Team (security slackware com)

Malware

Trojan:MSIL/Upadter.A

Phishing

AOL	25th January 2017
A person has now tagged your current user profile
Amazon UK	25th January 2017
Your Amazon.co.uk order "Apple Leather..."
USAA	24th January 2017
You Have An Incoming Payment Transfer
NatWest.	24th January 2017
NatWest - Account Review Notification

Vulnerebility

SANS News

Malicious SVG Files in the Wild

Threatpost

AG Nominee Backs Law Enforcement’s Ability to ‘Overcome’ Encryption

SpyNote RAT Now Disguised As Netflix App
Charger Mobile Ransomware Removed from Google Play

Exploit

Mozilla Firefox < 50.0.2 - 'nsSMILTimeContainer::NotifyTimeChange()' Remote Code...

MyBB < 1.8.3 (with PHP 5.6 < 5.6.11) - Remote Code Execution

24.1.2017

Bugtraq

CVE-2017-3241 - [ERPSCAN-17-006] Oracle OpenJDK - Java Serialization DoS 2017-01-24
ERPScan inc (erpscan online gmail com)

[ERPSCAN-17-005] Oracle PeopleSoft - XSS vulnerability CVE-2017-3300 2017-01-24
ERPScan inc (erpscan online gmail com)

[slackware-security] mozilla-firefox (SSA:2017-023-01) 2017-01-24
Slackware Security Team (security slackware com)

APPLE-SA-2017-01-23-7 iTunes for Windows 12.5.5 2017-01-23
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-01-23-6 iCloud for Windows 6.1.1 2017-01-23
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-01-23-2 macOS 10.12.3 2017-01-23
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-01-23-5 Safari 10.0.3 2017-01-23
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-01-23-4 tvOS 10.1.1 2017-01-23
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-01-23-3 watchOS 3.1.3 2017-01-23
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2017-01-23-1 iOS 10.2.1 2017-01-23
Apple Product Security (product-security-noreply lists apple com)

ESA-2016-150: RSA® Security Analytics Reflected Cross-Site Scripting Vulnerability 2017-01-23
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-146: EMC Avamar Data Store and Avamar Virtual Edition Privilege Escalation Vulnerability 2017-01-23
EMC Product Security Response Center (Security_Alert emc com)

Malware

Trojan.Klonzyrat

Phishing

USAA	24th January 2017
You Have An Incoming Payment Transfer
NatWest.	24th January 2017
NatWest - Account Review Notification

Vulnerebility

SANS News

Critical Vulnerability in Cisco WebEx Chrome Plugin

Threatpostpost

Heartbleed Persists on 200,000 Servers, Devices

Secure Email Service Lavabit Relaunches

Apple Patches Critical Kernel Vulnerabilities

Apps Carrying HummingBad Variant Booted From Google Play

Cisco Patches Critical Flaw in WebEx Chrome Plugin

Exploit

MyBB < 1.8.3 (with PHP 5.6 < 5.6.11) - Remote Code Execution

Cisco WebEx - 'nativeMessaging' Arbitrary Remote Command Execution

WD My Cloud Mirror 2.11.153 - Authentication Bypass / Remote Code Execution

Microsoft Remote Desktop Client for Mac 8.0.36 - Remote Code Execution

DiskSavvy Enterprise - GET Buffer Overflow (Metasploit)

Oracle OpenJDK Runtime Environment 1.8.0_112-b15 - Java Serialization Denial Of...

23.1.2017

Bugtraq

ESA-2016-150: RSA® Security Analytics Reflected Cross-Site Scripting Vulnerability 2017-01-23
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-146: EMC Avamar Data Store and Avamar Virtual Edition Privilege Escalation Vulnerability 2017-01-23
EMC Product Security Response Center (Security_Alert emc com)

Microsoft Remote Desktop Client for Mac Remote Code Execution - Update 2017-01-23
Filippo Cavallarin (filippo cavallarin wearesegment com)

[SECURITY] [DSA 3770-1] mariadb-10.0 security update 2017-01-22
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3769-1] libphp-swiftmailer security update 2017-01-22
Sebastien Delafond (seb debian org)

Executable installers are vulnerable^WEVIL (case 46): Pelles C allows arbitrary code execution 2017-01-21
Stefan Kanthak (stefan kanthak nexgo de)

Malware

Ransom:Win32/Spora.A

Phishing

EASY SETTLEMENT	23rd January 2017
Online Banking (Wire Transfer )***********************Paym ent Alert From Royal Bank Of Scotland(R)**
service@intl.paypal.com	22nd January 2017
Reminder: We have updates on our Policy Update page.

Vulnerebility

SANS News

Threatpost

Massive Twitter Botnet Dormant Since 2013

Sage and Satan Ransomware, Double Trouble

Exploit

Microsoft Power Point 2016 - Java Code Execution

PageKit 1.0.10 - Password Reset

NTOPNG 2.4 Web Interface - Cross-Site Request Forgery

SunOS 5.11 ICMP - Denial of Service

22.1.2017

Bugtraq

[SECURITY] [DSA 3767-1] mysql-5.5 security update 2017-01-19
Salvatore Bonaccorso (carnil debian org)

Novel Contributions to the field - How I broke MySQL's code-base (Part 2) [CVE-2016-5541] MySQL cluster remote 0day 2017-01-19
Nicholas Lemonias. (lem nikolas googlemail com)

Novel Contributions to the Field - How I broke MySQL's codebase (Part 2) [CVE-2016-5541] MySQL Cluster 0day 2017-01-18
lem nikolas gmail com

[RCESEC-2016-012] Mattermost <= 3.5.1 "/error" Unauthenticated Reflected Cross-Site Scripting / Content Injection 2017-01-18
Julien Ahrens (info rcesecurity com)

Malware

Phishing

Bank of America Alerts	21st January 2017
Bank of America Alert: Irregular Activity On Your Account
USAA	20th January 2017
Your Incoming Payment Transfer On Hold
AOL	20th January 2017
you were matched up with Savannah
AOL	20th January 2017
youre matched with India
Ritchie, Jennifer	20th January 2017
cwwfamily

Vulnerebility

SANS News

Sage 2.0 Ransomware

Threatpost

Hadoop, CouchDB Next Targets in Wave of Database Attacks

Coalition of Cryptographers, Researchers Urge Guardian to Retract WhatsApp Story

Mozilla’s First Internet Health Report Tackles Security, Privacy

Exploit

20.1.2017

Bugtraq

[SECURITY] [DSA 3767-1] mysql-5.5 security update 2017-01-19
Salvatore Bonaccorso (carnil debian org)

Novel Contributions to the field - How I broke MySQL's code-base (Part 2) [CVE-2016-5541] MySQL cluster remote 0day 2017-01-19
Nicholas Lemonias. (lem nikolas googlemail com)

Novel Contributions to the Field - How I broke MySQL's codebase (Part 2) [CVE-2016-5541] MySQL Cluster 0day 2017-01-18
lem nikolas gmail com

[RCESEC-2016-012] Mattermost <= 3.5.1 "/error" Unauthenticated Reflected Cross-Site Scripting / Content Injection 2017-01-18
Julien Ahrens (info rcesecurity com)

[security bulletin] HPSBMU03685 rev.1 - HPE Insight Control server provisioning (ICsp), Multiple Remote Vulnerabilities 2017-01-18
security-alert hpe com

ESA-2016-161: EMC Isilon OneFS LDAP Injection Vulnerability 2017-01-18
EMC Product Security Response Center (Security_Alert emc com)

Malware

TrojanDownloader:Win32/Gendwndrop!rfn

Phishing

AOL	19th January 2017
A person has tagged your current profile page
Capitalone360	19th January 2017
IMPORTANT MESSAGE FROM CAPITALONE360 BANK.
BT Mail	19th January 2017
Important informations about your BT email account
iCloud Support	19th January 2017
[ICLOUD] : YOUR SUBSCRIPTION WITH ITUNIS HAS BEEN EXPIRED

Vulnerebility

SANS News

PowerShell 5.1 for Windows 7 and later

Threatpost

Hack the Army Bounty Pays Out $100,000; 118 Flaws Fixed

Facebook, Researcher at Odds Over Messenger Issue

Locky Limps Back into Action After Lull

ProtonMail Gets Own Tor-Accessible .Onion Hidden Service

The Changing Face of Carbanak

Exploit

Google Android TSP sysfs - 'cmd_store' Multiple Overflows

Classifieds Script - SQL Injection

Video Site Creator Script - SQL Injection

Home of Viral Images, Videos and Articles Script - SQL Injection

Job Vacancy Script - SQL Injection

Vine VideoSite Creator Script - SQL Injection

Viral Image Sharing Script - SQL Injection

Social News and Bookmarking Script - SQL Injection

Viral Image Sharing Script - SQL Injection

Vine VideoSite Creator Script - SQL Injection

Job Vacancy Script - SQL Injection

Home of Viral Images, Videos and Articles Script - SQL Injection

Video Site Creator Script - SQL Injection

Classifieds Script - SQL Injection

19.1.2017

Bugtraq

Novel Contributions to the field - How I broke MySQL's code-base (Part 2) [CVE-2016-5541] MySQL cluster remote 0day 2017-01-19
Nicholas Lemonias. (lem nikolas googlemail com)

Novel Contributions to the Field - How I broke MySQL's codebase (Part 2) [CVE-2016-5541] MySQL Cluster 0day 2017-01-18
lem nikolas gmail com

[RCESEC-2016-012] Mattermost <= 3.5.1 "/error" Unauthenticated Reflected Cross-Site Scripting / Content Injection 2017-01-18
Julien Ahrens (info rcesecurity com)

[security bulletin] HPSBMU03685 rev.1 - HPE Insight Control server provisioning (ICsp), Multiple Remote Vulnerabilities 2017-01-18
security-alert hpe com

ESA-2016-161: EMC Isilon OneFS LDAP Injection Vulnerability 2017-01-18
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-143: EMC Documentum Webtop and Clients Stored Cross-Site Scripting Vulnerability 2017-01-18
EMC Product Security Response Center (Security_Alert emc com)

[SECURITY] CVE-2016-8748: Apache NiFi XSS vulnerability in connection details dialogue 2017-01-16
Joe Witt (joewitt apache org)

Malware

W97M.Downloader.K

Trojan.Carberp.E

OSX.Quimitchin

Phishing

Amazon.co.uk	18th January 2017
Your Amazon.co.uk Account
NatWest	18th January 2017
1 New Message
AOL	18th January 2017
An individual has recently tagged your current personal profile
AOL	18th January 2017
youve been matched with Lena
AOL	18th January 2017
A person has already tagged your current personal profile
AOL	18th January 2017
Someone seems to have tagged your very own account
PayPal Support	18th January 2017
We recently contacted you after noticing an issue on your account
reminder	18th January 2017
We�re writing to confirm your PayPal account has been closed

Vulnerebility

SANS News

Making Windows 10 a bit less "Creepy" - Common Privacy Settings

Threatpost

Oracle Patches 270 Vulnerabilities in Year’s First Critical Patch Update

Docker Patches Container Escape Vulnerability

Carbanak Using Google Services for Command and Control

Exploit

B2B Script 4.27 - SQL Injection

Flippa Website Script - SQL Injection

Courier Management System - SQL Injection

18.1.2017

Bugtraq

ESA-2016-161: EMC Isilon OneFS LDAP Injection Vulnerability 2017-01-18
EMC Product Security Response Center (Security_Alert emc com)

ESA-2016-143: EMC Documentum Webtop and Clients Stored Cross-Site Scripting Vulnerability 2017-01-18
EMC Product Security Response Center (Security_Alert emc com)

[SECURITY] CVE-2016-8748: Apache NiFi XSS vulnerability in connection details dialogue 2017-01-16
Joe Witt (joewitt apache org)

[SECURITY] [DSA 3765-1] icoutils security update 2017-01-14
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3743-2] python-bottle regression update 2017-01-15
Sebastien Delafond (seb debian org)

[security bulletin] HPSBGN03689 rev.1 - HPE Diagnostics, Remote Cross-Site Scripting and Click Jacking 2017-01-13
security-alert hpe com

[security bulletin] HPSBST03671 rev.2 - HPE StoreEver MSL6480 Tape Library Management Interface, Multiple Remote Vulnerabilities 2017-01-13
security-alert hpe com

Malware

Phishing

NatWest	17th January 2017
Important New Message
iCloud Support	17th January 2017
[ICLOUD] : YOUR SUBSCRIPTION WITH ITUNIS HAS BEEN EXPIRED
Apple	17th January 2017
YOUR APPLE ID WAS USED TO SIGN IN TO IMESSAGE ON AN IPHONE 6.

Vulnerebility

SANS News

Making Windows 10 a bit less "Creepy" - Common Privacy Settings

Threatpost

Router Vulnerabilities Disclosed in July Remain Unpatched

Vulnerabilities Leave iTunes, App Store Open to Script Injection

New RCE Flaws Found in Samsung Smartcam

Spora Ransomware Offers Victims Unique Payment Options

Exploit

Linux/x86-64 - mkdir Shellcode (25 bytes)

Openexpert 0.5.17 - SQL Injection

Check Box 2016 Q2 Survey - Multiple Vulnerabilities

BoZoN 2.4 - Remote Code Execution

dirLIST 0.3.0 - Arbitrary File Upload

17.1.2017

Bugtraq

[SECURITY] CVE-2016-8748: Apache NiFi XSS vulnerability in connection details dialogue 2017-01-16
Joe Witt (joewitt apache org)

[SECURITY] [DSA 3765-1] icoutils security update 2017-01-14
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3743-2] python-bottle regression update 2017-01-15
Sebastien Delafond (seb debian org)

Malware

TrojanDownloader:Win32/Gendwndrop.C!bit
TrojanDownloader:Win32/Gendwnurl.J!bit
TrojanDownloader:Win32/Gendwndrop!rfn
TrojanDownloader:Win32/Banload.BGW
TrojanDownloader:Win32/Wopfig.A
TrojanDownloader:Win32/Smordess.A

Exp.CVE-2016-7256

Phishing

USAA.Web.Services	16th January 2017
You Have A New Payment Transfer
NatWest	16th January 2017
Important New Message
Halifax Uk	16th January 2017
Your account needs 2-step security verification

Vulnerebility

SANS News

domain_stats.py a web api for SEIM phishing hunts

Threatpost

White House Approves New Rules for Sharing of Raw Intelligence Data

Andrew Macpherson on Intelligence Gathering with Maltego

Exploit

DiskBoss Enterprise - GET Buffer Overflow (Metasploit)

WinaXe Plus 8.7 - Buffer Overflow

BoZoN 2.4 - Remote Code Execution

dirLIST 0.3.0 - Arbitrary File Upload

ManagEnegine ADManager Plus 6.5.40 - Multiple Vulnerabilities

Million Pixels 3 - Authentication Bypass

Image Sharing Script 4.13 - Multiple Vulnerabilities

Tenda ADSL2/2+ Modem D840R - Unauthenticated DNS Change

Pirelli DRG A115 ADSL Router - Unauthenticated DNS Change

Million Pixels 3 - Authentication Bypass

iSelect v1.4 - Local Buffer Overflow

16.1.2017

Bugtraq

[SECURITY] [DSA 3765-1] icoutils security update 2017-01-14
Salvatore Bonaccorso (carnil debian org)

[SECURITY] [DSA 3743-2] python-bottle regression update 2017-01-15
Sebastien Delafond (seb debian org)

[security bulletin] HPSBGN03689 rev.1 - HPE Diagnostics, Remote Cross-Site Scripting and Click Jacking 2017-01-13
security-alert hpe com

[security bulletin] HPSBST03671 rev.2 - HPE StoreEver MSL6480 Tape Library Management Interface, Multiple Remote Vulnerabilities 2017-01-13
security-alert hpe com

[SECURITY] [DSA 3764-1] pdns security update 2017-01-13
Salvatore Bonaccorso (carnil debian org)

[security bulletin] HPSBGN03694 rev.1 - HPE SiteScope, Remote Disclosure of Information 2017-01-12
security-alert hpe com

Malware

Hacktool:Win32/Mimikatz
HackTool:Win32/Mikatz
TrojanDownloader:JS/Nemucod.RH

Trojan.Mestep

Phishing

AOL	16th January 2017
A woman has already marked your current profile
USAA	15th January 2017
USAA Payment Received
Microsoft	15th January 2017
Confirm your account

Vulnerebility

SANS News

Whitelisting File Extensions in Apache

Threatpost

Exploit

Windows x64 - CreateRemoteThread() DLL Injection Shellcode (584 bytes)

WinaXe Plus 8.7 - Buffer Overflow

Business Networking Script 8.11 - SQL Injection / Cross-Site Scripting

Huawei Flybox B660 - Cross-Site Request Forgery

15.1.2017

Bugtraq

Malware

Backdoor.Akdoor

Phishing

Vulnerebility

SANS News

Backup Files Are Good but Can Be Evil

Threatpost

Google’s Key Transparency Simplifies Public Key Lookups

WhatsApp Says ‘Backdoor’ Claim Bogus

Exploit

Zeroshell 3.6.0/3.7.0 Net Services - Remote Code Execution

Mozilla Firefox < 50.1.0 - Use After Free

Courier Business Website Script - Authentication Bypass

Professional Service Booking Script - SQL Injection

Education Website Script - Authentication Bypass

Inout Celebrities 1.0 Script - Improper Access Restrictions

Inout SocialTiles 2.0 Script - Improper Access Restrictions

Inout CareerLamp 1.0 Script - Improper Access Restrictions

Inout QuerySpace 1.0 Script - Improper Access Restrictions

14.1.2017

Bugtraq

[security bulletin] HPSBGN03694 rev.1 - HPE SiteScope, Remote Disclosure of Information 2017-01-12
security-alert hpe com

ICMPv6 PTBs and IPv6 frag filtering (particularly at BGP peers) 2017-01-12
Fernando Gont (fgont si6networks com)

Malware

Phishing

service@intl.paypal.com	13th January 2017
your account need update immediatly
PayPaI Support	12th January 2017
[ALERT] CONFIRM YOUR PAYPAI ACCOUNT (CASE ID #AP 26G 082 391)

Vulnerebility

SANS News

Who's Attacking Me?

Threatpost

WordPress 4.7.1 Fixes CSRF, XSS, PHPMailer Vulnerabilities

ShadowBrokers Bid Farewell, Close Door

Marie Moe on Medical Device Security

Exploit

ECommerce-Multi-Vendor Software - Arbitrary File Upload

ECommerce-TIBSECART - Arbitrary File Upload

Cisco Firepower Management Console 6.0 - Post Authentication UserAdd

13.1.2017

Bugtraq

ICMPv6 PTBs and IPv6 frag filtering (particularly at BGP peers) 2017-01-12
Fernando Gont (fgont si6networks com)

[SECURITY] [DSA 3760-1] ikiwiki security update 2017-01-12
Moritz Muehlenhoff (jmm debian org)

CVE-2017-5350: Unexpected SystemUI FC driven by arbitrary application 2017-01-12
unlimitsec gmail com

[slackware-security] bind (SSA:2017-011-01) 2017-01-12
Slackware Security Team (security slackware com)

[slackware-security] gnutls (SSA:2017-011-02) 2017-01-12
Slackware Security Team (security slackware com)

CA20170109-01: Security Notice for CA Service Desk Manager 2017-01-12
Kotas, Kevin J (Kevin Kotas ca com)

[SECURITY] [DSA 3758-1] bind9 security update 2017-01-11
Florian Weimer (fw deneb enyo de)

Multiple Vulnerabilities in cPanel 2017-01-11
Open Security (open opensecurity ca)

IKEv1 cipher suite configuration mismatch in Siemens SIMATIC CP 343-1 Advanced 2017-01-11
Andrea Barisani (andrea inversepath com)

[SECURITY] [DSA 3757-1] icedove security update 2017-01-11
Moritz Muehlenhoff (jmm debian org)

Malware

W32.Kribz

Phishing

YAHOO !!!	12th January 2017
Unexpected security alert!
AOL	11th January 2017
Someone has already tagged your account
AOL	11th January 2017
An individual has marked your very own account

Vulnerebility

SANS News

System Resource Utilization Monitor

Some tools updates

Threatpost

Spammers Revive Hancitor Downloader Campaigns

Second Try at Windows LSASS Patch Addresses Vulnerability

ShadowBrokers Selling Windows Exploits, Attack Tools

Cloudflare Shares National Security Letter It Received in 2013

Exploit

Ansible 2.1.4 / 2.2.1 - Command Execution

Online Food Delivery 2.04 - Authentication Bypass

Job Portal Script 9.11 - Authentication Bypass

Movie Portal Script 7.35 - SQL Injection

Travel Portal Script 9.33 - SQL Injection

Huawei Flybox B660 - Cross-Site Request Forgery

Blackboard LMS 9.1 SP14 - Cross-Site Scripting

My Link Trader 1.1 - 'id' Parameter SQL Injection

Firejail - Privilege Escalation

Cemu 1.6.4b - Information Leak + Buffer Overflow (Emulator Breakout)

Microsoft Windows 8.1 (x64) - RGNOBJ Integer Overflow (MS16-098)

Microsoft Windows Kernel - 'win32k.sys' 'NtSetWindowLongPtr' Privilege Escalation...

SapLPD 7.40 - Denial of Service

VideoLAN VLC Media Player 2.2.1 - 'DecodeAdpcmImaQT' Buffer Overflow

Boxoft Wav 1.0 - Buffer Overflow

12.1.2017

Bugtraq

[SECURITY] [DSA 3757-1] icedove security update 2017-01-11
Moritz Muehlenhoff (jmm debian org)

Re: [oss-security] Docker 1.12.6 - Security Advisory 2017-01-11
Andreas Stieger (astieger suse com)

Cobi Tools v1.0.8 iOS - Persistent Web Vulnerability 2017-01-11
Vulnerability Lab (research vulnerability-lab com)

Bit Defender #39 - Auth Token Bypass Vulnerability 2017-01-11
Vulnerability Lab (research vulnerability-lab com)

BlackBoard LMS 9.1 SP14 - (Title) Persistent Vulnerability 2017-01-11
Vulnerability Lab (research vulnerability-lab com)

Blackboard LMS 9.1 SP14 - (Profile) Persistent Vulnerability 2017-01-11
Vulnerability Lab (research vulnerability-lab com)

FreeBSD Security Advisory FreeBSD-SA-17:01.openssh 2017-01-11
FreeBSD Security Advisories (security-advisories freebsd org)

ESA-2016-096: EMC Celerra, VNX1, VNX2 and VNXe SMB NTLM Authentication Weak Nonce Vulnerability 2017-01-10
EMC Product Security Response Center (Security_Alert emc com)

Directadmin ControlPanel 1.50.1 denial of service Vulnerability 2017-01-10
iedb team gmail com

Malware

Ransom.Spora

Phishing

Amazon.co.uk	11th January 2017
Your Amazon security is still not active.
Support	10th January 2017
[PAYPAL]: YOU'VE GOT NEW (1) LETTER !

Vulnerebility

SANS News

Hancitor/Pony/Vawtrak malspam

Threatpost

Lawmakers Reintroduce Popular Email Privacy Act

Adobe Patches Code Execution Flaws in Flash, Reader, Acrobat

Netflix Phishing Campaign Targeted User Information, Credit Card Data

Microsoft Issues Record Low Number of Patch Tuesday Bulletins

Exploit

Microsoft Windows Kernel - 'win32k.sys' 'NtSetWindowLongPtr' Privilege Escalation...

Boxoft Wav 1.0 - Buffer Overflow

Huawei Flybox B660 - Cross-Site Request Forgery

Blackboard LMS 9.1 SP14 - Cross-Site Scripting

Adobe Flash Player 24.0.0.186 - 'ActionGetURL2' Out-of-Bounds Memory Corruption

11.1.2017

Bugtraq

Directadmin ControlPanel 1.50.1 Cross-Site-Scripting Vulnerability 2017-01-10
iedb team gmail com

QuickBooks 2017 Admin Credentials Disclosure 2017-01-06
info thegrideon com

Malware

TrojanDownloader:Win32/Trulop.A
TrojanSpy:Win32/Bancos.AMZ
Ransom:Win32/Firecrypt.A

Ransom.Evil

JS.Downloader.E

Phishing

AOL	9th January 2017
Somebody has already tagged your current profile
AOL	9th January 2017
A girl has marked your current profile page
AOL	9th January 2017
A woman has recently tagged your current profile
PayPal	9th January 2017
YOUR PAYPAL ACCOUNT IS TEMPORARILY LIMITED
Capital One capitalone@notific	9th January 2017
Action Required: Your online access has been locked

Vulnerebility

SANS News

January 2017 Microsoft Patch Tuesday

Adobe January 2017 Patches

Port 37777 "MapTable" Requests

Realtors Be Aware: You Are a Target

Threatpost

Following Extortion Attempt, Gaming Network ESEA Breached, 1.5M Profiles Leaked

Hello Kitty Database of 3.3 Million Breached Credentials Surfaces

St. Jude Medical Patches Vulnerable Cardiac Devices

MongoDB Attacks Jump From Hundreds to 28,000 In Just Days

Exploit

FMyLife Clone Script (Pro Edition) 1.1 - Cross-Site Request Forgery (Add Admin)

WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 - Privilege...

Freepbx < 2.11.1.5 - Remote Code Execution

My Php Dating 2.0 - 'id' Parameter SQL Injection

My Php Dating 2.0 - 'path' Parameter SQL Injection

My Link Trader 1.1 - Authentication Bypass

DiskBoss Enterprise 7.5.12 - 'POST' Buffer Overflow (SEH)

Friends in War Make or Break 1.7 - 'imgid' Parameter SQL Injection

10.1.2017

Bugtraq

QuickBooks 2017 Admin Credentials Disclosure 2017-01-06
info thegrideon com

Malware

Ransom.FireCrypt

Phishing

service@intl.paypal.com	8th January 2017
your account has been limited until we hear from you
NatWest	8th January 2017
Your account has been suspended
Notice	8th January 2017
Important !
Bank of America Alert	8th January 2017
Security Alert: Suspicious Activity

Vulnerebility

SANS News

Merry X-Mas ransomware from Sunday 2017-01-08

Threatpost

Exploit

DirectAdmin 1.50.1 - Denial of Service

Advanced Desktop Locker 6.0.0 - Lock Screen Bypass

Brave Browser 1.2.16/1.9.56 - Address Bar URL Spoofing

My Link Trader 1.1 - Authentication Bypass

Splunk 6.1.1 - 'Referer' Header Cross-Site Scripting

9.1.2017

Bugtraq

QuickBooks 2017 Admin Credentials Disclosure 2017-01-06
info thegrideon com

[SECURITY] [DSA 3753-1] libvncserver security update 2017-01-05
Sebastien Delafond (seb debian org)

Malware

Phishing

Vulnerebility

SANS News

Threatpost

Exploit

8.1.2017

Bugtraq

QuickBooks 2017 Admin Credentials Disclosure 2017-01-06
info thegrideon com

[SECURITY] [DSA 3753-1] libvncserver security update 2017-01-05
Sebastien Delafond (seb debian org)

Malware

Phishing

Amazon	7th January 2017
Amazon.com Account Notice!!!
iCloud Support	7th January 2017
[ICLOUD] : YOUR ACCOUNT WILL BE CLOSED AFTER 48 HOURS ✔
service@paypal.com	7th January 2017
your account has been limited until we hear from you

Vulnerebility

SANS News

Using Security Tools to Compromize a Network

Threatpost

Google Patches Android Custom Boot Mode Vulnerability

Exploit

Google Android max86902 Driver - 'sysfs' Interfaces Race Condition

7.1.2017

Bugtraq

[SECURITY] [DSA 3753-1] libvncserver security update 2017-01-05
Sebastien Delafond (seb debian org)

[SECURITY][UPDATE] CVE-2016-8745 Apache Tomcat Information Disclosure 2017-01-05
Mark Thomas (markt apache org)

Malware

Phishing

AOL	5th January 2017
An individual has already tagged your current profile page
AOL	5th January 2017
A girl has now tagged your own account
AOL	5th January 2017
Someone has marked your own account
AOL	5th January 2017
Somebody has recently marked your account
PayPal	5th January 2017
OFFICIAL NOTICE FROM PAYPAL
service@paypal.com	5th January 2017
your account has been limited until we hear from you

Vulnerebility

SANS News

Ransomware Operators Cold Calling UK Schools to Get Malware Through

Was the Brazilian version of Google hijacked two days ago?

New Year's Resolution: Build Your Own Malware Lab?

Threatpost

U.S. Intelligence Report Due Next Week on Election Hack

Attacks On MongoDB Rise As Hijackings Continue

FTC: D-Link Failed to Secure Routers, IP Cameras

Experts Warn of Novel PDF-Based Phishing Scam

Exploit

Microsoft Windows 10 Edge - 'chakra.dll' Info Leak / Type Confusion Remote Code...

6.1.2017

Bugtraq

[SECURITY][UPDATE] CVE-2016-8745 Apache Tomcat Information Disclosure 2017-01-05
Mark Thomas (markt apache org)

ESA-2016-157: EMC ScaleIO Multiple Vulnerabilities 2017-01-05
EMC Product Security Response Center (Security_Alert emc com)

[security bulletin] HPSBGN03688 rev.1 - HPE Operations Orchestration, Remote Code Execution 2017-01-03
security-alert hpe com

[SECURITY] [DSA 3750-2] libphp-phpmailer regression update 2017-01-03
Thijs Kinkhorst (thijs debian org)

Malware

Ransom:Win32/Dereilock.A
Ransom:Win32/Cerber.D
Ransom:Win32/Cerber.B
Ransom:Win32/Cerber.HVT
Ransom:Win32/Cerber
Ransom:Win32/Cerber.A
TrojanSpy:MSIL/Siplog.B
TrojanSpy:Win32/Banker.APN
TrojanSpy:Win32/Banker.APL
Win32/Clodaconas

Phishing

AOL	5th January 2017
An individual has already tagged your current profile page
AOL	5th January 2017
A girl has now tagged your own account
AOL	5th January 2017
Someone has marked your own account
AOL	5th January 2017
Somebody has recently marked your account
PayPal	5th January 2017
OFFICIAL NOTICE FROM PAYPAL
service@paypal.com	5th January 2017
your account has been limited until we hear from you

Vulnerebility

SANS News

Mixed Messages : Novel Phishing Attempts Trying to Steal Your E-mail Password Goes Wrong

Threatpost

Google Patches 29 Critical Android Vulnerabilities Including Holes in Mediaserver, Qualcomm

FTC Issues Public Challenge to Improve IoT Patching

Claudio Guarnieri on Security Without Borders

Exploit

Kaspersky 17.0.0 - Local CA root Incorrectly Protected

Atlassian Confluence 5.9.12 - Persistent Cross-Site Scripting

5.1.2017

Bugtraq

[security bulletin] HPSBGN03688 rev.1 - HPE Operations Orchestration, Remote Code Execution 2017-01-03
security-alert hpe com

[SECURITY] [DSA 3750-2] libphp-phpmailer regression update 2017-01-03
Thijs Kinkhorst (thijs debian org)

0-day: QNAP NAS Devices suffer of heap overflow 2016-12-31
bashis (mcw noemail eu)

Malware

Phishing

Google	4th January 2017
Google Drive Unread Messages From????
AOL	4th January 2017
An individual has already tagged your current profile
AOL	3rd January 2017
A woman seems to have marked your current profile
AOL	3rd January 2017
An individual seems to have tagged your profile page
AOL	3rd January 2017
An individual has now tagged your current account
AOL	3rd January 2017
A person has already marked your own personal profile
AOL	3rd January 2017
Someone appears to have tagged your current user profile
AOL	3rd January 2017
Someone has tagged your very own personal profile
AOL	3rd January 2017
An individual has now marked your current profile
service@paypal.com	3rd January 2017
your account has been limited until we hear from you

Vulnerebility

SANS News

Threatpost

Pentagon Subcontractor Inadvertently Leaks 11 Gigs of Sensitive Data

Vermont Grid ‘Hack’ Latest Tumble Down Attribution Rabbit Hole

Costin Raiu on the Importance of Using YARA

Exploit

My Click Counter 1.0 - Authentication Bypass

4.1.2017

Bugtraq

Malware

Backdoor:Win32/Sacto.B!dha
TrojanSpy:Win32/Siblope.A
Backdoor:Win32/Grabsir.A
Backdoor:MSIL/Aataki.AC!bit
TrojanDownloader:Win32/Ulicky.B!bit
TrojanDownloader:Win32/Ulicky.A!bit
TrojanDownloader:Win32/Macdowpay.A
TrojanDownloader:Win32/Apcrewnod
TrojanDownloader:PowerShell/Ploprolo!rfn
TrojanDownloader:PowerShell/Hipoele.B!bit

Phishing

Vulnerebility

SANS News

Threatpost

Exploit

Internet Download Accelerator 6.10.1.1527 - FTP Buffer Overflow (SEH)

PHPMailer < 5.2.20 / SwiftMailer < 5.4.5-DEV / Zend Framework / zend-mail < 2.4.11...

3.1.2017

Bugtraq

0-day: QNAP NAS Devices suffer of heap overflow 2016-12-31
bashis (mcw noemail eu)

[SECURITY] [DSA 3750-1] libphp-phpmailer security update 2016-12-31
Thijs Kinkhorst (thijs debian org)

[slackware-security] seamonkey (SSA:2016-365-03) 2016-12-30
Slackware Security Team (security slackware com)

Fwd: [ANNOUNCE] CVE-2016-6793 Apache Wicket deserialization vulnerability 2016-12-31
Pedro Santos (pedrosans gmail com)

[slackware-security] mozilla-thunderbird (SSA:2016-365-02) 2016-12-30
Slackware Security Team (security slackware com)

[slackware-security] libpng (SSA:2016-365-01) 2016-12-30
Slackware Security Team (security slackware com)

Malware

Phishing

Vulnerebility

py2exe Decompiling - Part 1

Threatpost

Exploit

Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery

Internet Download Accelerator 6.10.1.1527 - FTP Buffer Overflow (SEH)

QNAP NAS Devices - Heap Overflow

2.1.2017

Bugtraq

Malware

Phishing

service@intl.paypal.com	1st January 2017
Login Security Question and Answer Change
Google	31st December 2016
Google Drive Unread Messages From????
USAA	31st December 2016
USAA PAYMENT PENDING APPROVAL
contato	31st December 2016
hi

Vulnerebility

SANS News

Threatpost

Exploit

Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery

Windows x64 - Password Protected Bind Shellcode (825 bytes)

1.1.2017

Bugtraq

Malware

Phishing

contato	31st December 2016
hi
PayPaI inc	30th December 2016
[Norton Anti]update your account
Icloud.-Itunes-US.	30th December 2016
THE FOLLOWING CHANGES TO YOUR ACCOUNT-APPLE, WERE MADE ON DEC 28, 2016 AT 9:52:10 AM (GMT):

Vulnerebility

SANS News

Ongoing Scans Below the Radar

Threatpost

FBI-DHS Report Links Fancy Bear Gang to Election Hacks

Exploit

Zend Framework / zend-mail < 2.4.11 - Remote Code Execution

2016

31.12.2016

Bugtraq

Malware

Phishing

no-reply@amazon.com	30th December 2016
Important message please read
Yahoo	29th December 2016
Un-avoidable Update
PayPall	29th December 2016
Your Account Has Ben Limited until we hear from You

Vulnerebility

SANS News

Increase in Protocol 47 denys

More on Protocol 47 denys

Threatpost

PHPMailer, SwiftMailer Updates Resolve Critical Remote Code Execution Vulnerabilities

Exploit

Dell SonicWALL Secure Mobile Access SMA 8.1 - Cross-Site Scripting / Cross-Site...

Dell SonicWALL Global Management System GMS 8.1 - Blind SQL Injection

WordPress Plugin Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload

PHPMailer < 5.2.18 - Remote Code Execution (Python)

Android - get_user/put_user Exploit (Metasploit)

30.12.2016

Bugtraq

[CVE-2016-8741] Apache Qpid Broker for Java - Information Leakage 2016-12-28
Oleksandr Rudyy (orudyy gmail com)

PHPMailer < 5.2.20 Remote Code Execution PoC 0day Exploit (CVE-2016-10045) (Bypass of the CVE-2016-1033 patch) 2016-12-28
Dawid Golunski (dawid legalhackers com)

PHPMailer < 5.2.18 Remote Code Execution [updated advisory] [CVE-2016-10033] 2016-12-27
Dawid Golunski (dawid legalhackers com)

[SECURITY] [DSA 3746-1] graphicsmagick security update 2016-12-24
Luciano Bello (luciano debian org)

Malware

TrojanDropper:Win32/Rubat!rfn
TrojanDropper:Win32/Rubat.A!bit
TrojanSpy:MSIL/Kostioul.A
TrojanDropper:VBS/Dropula.A
TrojanDropper:MSIL/Suloc.A!bit
TrojanDownloader:Win32/Broskod.A!bit
TrojanDownloader:MSIL/Excrevie!rfn
TrojanDownloader:MSIL/Excrevie.A
PWS:Win32/Mofksys!rfn
Backdoor:Win32/Kanav!rfn

Phishing

PayPall	29th December 2016
Your Account Has Ben Limited until we hear from You
NORTON AUTHORIZED PARTNER	28th December 2016
Get the new Norton Security to protect your computer! Now only $34.99!

Vulnerebility

SANS News

Using daemonlogger as a Software Tap

Threatpost

Exploit

SwiftMailer < 5.4.5-DEV - Remote Code Execution

WordPress Plugin Simply Poll 1.4.1 - SQL Injection

PHPMailer < 5.2.20 - Remote Code Execution

PHPMailer < 5.2.18 - Remote Code Execution (PHP)

29.12.2016

Bugtraq

[CVE-2016-8741] Apache Qpid Broker for Java - Information Leakage 2016-12-28
Oleksandr Rudyy (orudyy gmail com)

PHPMailer < 5.2.20 Remote Code Execution PoC 0day Exploit (CVE-2016-10045) (Bypass of the CVE-2016-1033 patch) 2016-12-28
Dawid Golunski (dawid legalhackers com)

PHPMailer < 5.2.18 Remote Code Execution [updated advisory] [CVE-2016-10033] 2016-12-27
Dawid Golunski (dawid legalhackers com)

Malware

Phishing

service@paypaI.com	28th December 2016
WE NOTICED UNUSUAL ACTIVITY ON YOUR ACCOUNT

Vulnerebility

SANS News

Using daemonlogger as a Software Tap

Threatpost

Android Trojan Switcher Infects Routers via DNS Hijacking

Exploit

PHPMailer < 5.2.20 - Remote Code Execution

PHPMailer < 5.2.18 - Remote Code Execution (PHP)

28.12.2016

Bugtraq

PHPMailer < 5.2.18 Remote Code Execution [updated advisory] [CVE-2016-10033] 2016-12-27
Dawid Golunski (dawid legalhackers com)

[SECURITY] [DSA 3746-1] graphicsmagick security update 2016-12-24
Luciano Bello (luciano debian org)

Malware

Phishing

paypal	26th December 2016
Your account has been Iimited !
PayPaI	26th December 2016
[TEMPORARY LOCKED] UNEXPECTED ACTIVITY ON YOUR ACCOUNT
Amazon	25th December 2016
Your order of Amazon "Gift Card - Email ..."

Vulnerebility

SANS News

Threatpost

Exploit

26.12.2016

Bugtraq

[SECURITY] [DSA 3746-1] graphicsmagick security update 2016-12-24
Luciano Bello (luciano debian org)

[slackware-security] expat (SSA:2016-359-01) 2016-12-24
Slackware Security Team (security slackware com)

[slackware-security] openssh (SSA:2016-358-02) 2016-12-24
Slackware Security Team (security slackware com)

[slackware-security] httpd (SSA:2016-358-01) 2016-12-24
Slackware Security Team (security slackware com)

XAMPP Control Panel Memory Corruption Denial Of Service 2016-12-24
apparitionsec gmail com (HYP3RLINX)

Malware

Phishing

Amazon	25th December 2016
Your order of Amazon "Gift Card - Email ..."
Amazon	24th December 2016
YOUR ORDER OF AMAZON "GIFT CARD - EMAIL ..."
AOL	24th December 2016
Somebody has tagged your very own account

Vulnerebility

SANS News

Critical security update: PHPMailer 5.2.18 (CVE-2016-10033)

Time for some predictions

Looking for some emails

Threatpostpost

Exploit

Joomla! Component Blog Calendar - SQL Injection

FTPShell Server 6.36 - '.csv' Local Denial of Service

PHPMailer 5.2.17 - Remote Code Execution

25.12.2016

Bugtraq

[SECURITY] [DSA 3744-1] libxml2 security update 2016-12-23
Salvatore Bonaccorso (carnil debian org)

Malware

Phishing

Amazon	24th December 2016
YOUR ORDER OF AMAZON "GIFT CARD - EMAIL ..."
AOL	24th December 2016
Somebody has tagged your very own account
AOL	24th December 2016
Somebody has already tagged your current user profile

Vulnerebility

SANS News

Threatpostpost

Exploit

XAMPP Control Panel - Denial Of Service

24.12.2016

Bugtraq

[SECURITY] [DSA 3744-1] libxml2 security update 2016-12-23
Salvatore Bonaccorso (carnil debian org)

FreeBSD Security Advisory FreeBSD-SA-16:39.ntp 2016-12-22
FreeBSD Security Advisories (security-advisories freebsd org)

Malware

Phishing

Amazon	24th December 2016
YOUR ORDER OF AMAZON "GIFT CARD - EMAIL ..."
AOL	24th December 2016
Somebody has tagged your very own account
AOL	24th December 2016
Somebody has already tagged your current user profile

Vulnerebility

SANS News

Pinging All The Way

Threatpostpost

Apple Delays App Transport Security Deadline

Cisco Warns of Critical Flaw in CloudCenter Orchestrator Systems

Clever Facebook Hack Reveals Private Email Address of Any User

Exploit

OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading

Apache mod_session_crypto - Padding Oracle

OpenSSH < 7.4 - 'UsePrivilegeSeparation Disabled' Forwarded Unix Domain Sockets...

23.12.2016

Bugtraq

FreeBSD Security Advisory FreeBSD-SA-16:39.ntp 2016-12-22
FreeBSD Security Advisories (security-advisories freebsd org)

CVE-2014-4138: MSIE 11 MSHTML CPasteÂCommand::ConvertÂBitmaptoÂPng heap-based buffer overflow 2016-12-21
Berend-Jan Wever (berendj nwever nl)

[SECURITY] [DSA 3732-2] php-ssh2 regression update 2016-12-21
Sebastien Delafond (seb debian org)

ASP.NET Core 5-RC1 HTTP Header Injection 2016-12-21
Advisories (advisories compass-security com)

Malware

Backdoor.Pralice

Trojan.Ticno

Exp.CVE-2016-7297

Phishing

Bank of America Alert	22nd December 2016
Security Alert: Suspicious Activity
AOL	22nd December 2016
An individual seems to have marked your current profile page
AOL	21st December 2016
A girl appears to have tagged your very own personal profile
James Williams	21st December 2016
mpsv@live.com Payment Attached
Paul Davis	21st December 2016
Finally 100% Binary Autopilot robot [DOWNLOAD LINK for mpsv@live.com]

Vulnerebility

SANS News

Threatpostpost

Siemens Patches Insufficient Entropy Vulnerability in ICS Systems

NIST Calls for Submissions to Secure Data Against Quantum Computing

Exploit

macOS < 10.12.2 / iOS < 10.2 Kernel - _kernelrpc_mach_port_insert_right_trap...

macOS < 10.12.2 / iOS < 10.2 - Broken Kernel Mach Port Name uref Handling...

macOS 10.12.1 / iOS < 10.2 - syslogd Arbitrary Port Replacement

macOS 10.12.1 / iOS < 10.2 - powerd Arbitrary Port Replacement

macOS < 10.12.2 / iOS < 10.2 Kernel - ipc_port_t Reference Count Leak Due to...

macOS 10.12 - Double vm_deallocate in Userspace MIG Code Use-After-Free

macOS 10.12.1 Kernel - Writable Privileged IOKit Registry Properties Code Execution

Microsoft Internet Explorer 11 - MSHTML CPasteCommand::ConvertBitmaptoPng He...

Vesta Control Panel 0.9.8-16 - Local Privilege Escalation

IBM AIX 6.1/7.1/7.2 - 'Bellmail' Privilege Escalation

22.12.2016

Bugtraq

[SECURITY] [DSA 3732-2] php-ssh2 regression update 2016-12-21
Sebastien Delafond (seb debian org)

ASP.NET Core 5-RC1 HTTP Header Injection 2016-12-21
Advisories (advisories compass-security com)

Malware

Ransom:Win32/Cerber

Backdoor.Pralice

Linux.Rakos

Phishing

Vulnerebility

SANS News

What are your 2017 infosec predictions?

Threatpostpost

New Wave of Hailstorm Spam Pelts Inboxes

Congressional Group Says Encryption Backdoors Are a Bad Idea

Exploit

IBM AIX 6.1/7.1/7.2 - 'Bellmail' Privilege Escalation

21.12.2016

Bugtraq

[SECURITY] [DSA 3732-2] php-ssh2 regression update 2016-12-21
Sebastien Delafond (seb debian org)

ASP.NET Core 5-RC1 HTTP Header Injection 2016-12-21
Advisories (advisories compass-security com)

[SECURITY] [DSA 3743-1] python-bottle security update 2016-12-20
Sebastien Delafond (seb debian org)

CVE-2014-1785: MSIE 11 MSHTML CSpliceTreeEngine::RemoveSplice use-after-free 2016-12-20
Berend-Jan Wever (berendj nwever nl)

[SECURITY] [DSA 3738-1] tomcat7 security update 2016-12-18
Sebastien Delafond (seb debian org)

Malware

Backdoor.Pralice

TrojanDownloader:JS/Stenago.A

Phishing

SunTrust Online	20th December 2016
Notification Alert: Update your information
BB&T Bank	20th December 2016
BB&T BANK - PERSONAL INFORMATION UPDATE
AOL	20th December 2016
new msg
NatWest Bank	20th December 2016
Important information about your account

Vulnerebility

SANS News

What are your 2017 infosec predictions?

Threatpostpost

ShadowBrokers Dump Came from Internal Code Repository, Insider

In-Flight Entertainment System Flaws Put Passenger Data at Risk

New Decryptor Unlocks CryptXXX v3 Files

Wassenaar Renegotiation Will Be in Trump Administration’s Hands

Exploit

NETGEAR WNR2000v5 - Remote Code Execution

Microsoft Edge - Internationalization Initialization Type Confusion (MS16-144)

Microsoft Edge - SIMD.toLocaleString Uninitialized Memory (MS16-145)

Microsoft Internet Explorer 11 MSHTML - CSpliceTreeEngine::RemoveSplice Us...

Google Android - WifiNative::setHotlist Stack Overflow

20.12.2016

Bugtraq

CVE-2014-1785: MSIE 11 MSHTML CSpliceTreeEngine::RemoveSplice use-after-free 2016-12-20
Berend-Jan Wever (berendj nwever nl)

[SECURITY] [DSA 3738-1] tomcat7 security update 2016-12-18
Sebastien Delafond (seb debian org)

Samsung DVR credentials encoded in base64 in cookie header 2016-12-17
Jacobo Avariento (spinfoo vuln gmail com)

[security bulletin] HPSBMU03684 rev.1 - HPE Version Control Repository Manager (VCRM), Multiple Remote Vulnerabilities 2016-12-16
security-alert hpe com

[SECURITY] [DSA 3736-1] libupnp security update 2016-12-16
Sebastien Delafond (seb debian org)

Malware

Exp.CVE-2016-7202

Exp.CVE-2016-7283

Phishing

PayPal	19th December 2016
YOUR PAYPAL ACCOUNT HAS BEEN LIMITED.
PayPal	18th December 2016
Unlock Your PayPal Account
Apple	17th December 2016
Please update your Account Information
Tesco.com	17th December 2016
Tesco is giving you a chance to shop for free.
AOL	16th December 2016
new message

Vulnerebility

SANS News

Mirai Scanning for Port 6789 Looking for New Victims

Threatpostpost

Insecure NAS Device Exposes 350 Ameriprise Investment Accounts

Google Unveils Cryptographic Library Test Suite Wycheproof

ShadowBrokers Dump Came from Internal Code Repository, Insider

In-Flight Entertainment System Flaws Put Passenger Data at Risk

Exploit

Google Chrome + Fedora 25 / Ubuntu 16.04 - 'tracker-extract' /...

Google Chrome < 31.0.1650.48 - HTTP 1xx...

RedStar 3.0 Server - 'BEAM & RSSMON' Command Execution (Shellshock)

Apport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution

Naenara Browser 3.5 (RedStar 3.0 Desktop) - 'JACKRABBIT' Client-Side Command...

19.12.2016

Bugtraq

[SECURITY] [DSA 3738-1] tomcat7 security update 2016-12-18
Sebastien Delafond (seb debian org)

Samsung DVR credentials encoded in base64 in cookie header 2016-12-17
Jacobo Avariento (spinfoo vuln gmail com)

[security bulletin] HPSBMU03684 rev.1 - HPE Version Control Repository Manager (VCRM), Multiple Remote Vulnerabilities 2016-12-16
security-alert hpe com

[SECURITY] [DSA 3736-1] libupnp security update 2016-12-16
Sebastien Delafond (seb debian org)

Malware

Backdoor.Telebot

Exp.CVE-2016-7892

Phishing

Vulnerebility

SANS News

Threatpostpost

Exploit

RedStar 3.0 Server - 'BEAM & RSSMON' Command Execution (Shellshock)

Apport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution

Naenara Browser 3.5 (RedStar 3.0 Desktop) - 'JACKRABBIT' Client-Side Command...

WordPress Plugin 404 Redirection Manager 1.0 - SQL Injection

Wordpress Plugin WP Private Messages 1.0.1 - SQL Injection

Wordpress Plugin WP Support Plus Responsive Ticket System 7.1.3 - SQL Injection

18.12.2016

Bugtraq

[security bulletin] HPSBMU03684 rev.1 - HPE Version Control Repository Manager (VCRM), Multiple Remote Vulnerabilities 2016-12-16
security-alert hpe com

[SECURITY] [DSA 3736-1] libupnp security update 2016-12-16
Sebastien Delafond (seb debian org)

CVE-2016-9277,CVE-2016-9966,CVE-2016-9967: Possible Privilege Escalation in telecom 2016-12-16
unlimitsec gmail com

Malware

Phishing

Tesco.com	17th December 2016
Tesco is giving you a chance to shop for free.
AOL	16th December 2016
new message
PayPal	16th December 2016
We noticed unusual activity in your PayPal account (Ref #PP-003-760-771-972)

Vulnerebility

SANS News

Blocking Powershell Connection via Windows Firewall.

Threatpostpost

Tales of WordPress Plugin Insecurity Overblown, Researchers Say

Nagios Core Patches Root, RCE Vulnerabilities

Remote Code Execution Bug Found in Ubuntu Quantal

SQL Injection Attack is Tied to Election Commission Breach

Exploit

iOS 10.1.1 / macOS 10.12 16A323 XNU Kernel - set_dp_control_port Lack of Locking...

WordPress Plugin Quiz And Survey Master 4.5.4 / 4.7.8 - Cross-Site Request Forgery

WHMCS Addon VMPanel 2.7.4 - SQL Injection

Horos 2.1.0 DICOM Medical Image Viewer - Denial of Service

DCMTK 3.6.0 storescp - Stack Buffer Overflow

ConQuest DICOM Server 1.4.17d - Stack Buffer Overflow

OsiriX DICOM Viewer 8.0.1 - Memory Corruption

Orthanc DICOM Server 1.1.0 - Memory Corruption

16.12.2016

Bugtraq

[security bulletin] HPSBMU03684 rev.1 - HPE Version Control Repository Manager (VCRM), Multiple Remote Vulnerabilities 2016-12-16
security-alert hpe com

[SECURITY] [DSA 3736-1] libupnp security update 2016-12-16
Sebastien Delafond (seb debian org)

CVE-2016-9277,CVE-2016-9966,CVE-2016-9967: Possible Privilege Escalation in telecom 2016-12-16
unlimitsec gmail com

CVE-2013-0090: MSIE 9 IEFRAME CView::EnsureSize use-after-free 2016-12-16
Berend-Jan Wever (berendj nwever nl)

MSIE 9 IEFRAME CMarkupÂPointer::MoveÂToÂGap use-after-free 2016-12-15
Berend-Jan Wever (berendj nwever nl)

Nagios Core < 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565] 2016-12-15
Dawid Golunski (dawid legalhackers com)

Adobe Animate <= v15.2.1.95 Memory Corruption Vulnerability 2016-12-14
apparitionsec gmail com (hyp3rlinx)

Secunia Research: Microsoft Windows Type 1 Font Processing Vulnerability 2016-12-14
Secunia Research (remove-vuln secunia com)

CVE-2013-3143: MSIE 9 IEFRAME CMarkup..RemoveÂPointerÂPos use-after-free 2016-12-14
Berend-Jan Wever (berendj nwever nl)

Malware

Phishing

AOL	16th December 2016
Shes waiting for your answer!
AOL	15th December 2016
youve got an incoming message
AOL	15th December 2016
This woman is awaiting your response!

Vulnerebility

SANS News

One, if by email, and two, if by EK: The Cerbers are coming!

Threatpostpost

Microsoft, Google to Block Flash by Default in Edge, Chrome

DNSChanger Exploit Kit Hijacks Routers, Not Browsers

Tales of WordPress Plugin Insecurity Overblown, Researchers Say

Exploit

Horos 2.1.0 Web Portal - Directory Traversal

Nagios < 4.2.4 - Privilege Escalation

Linux/x86 - /bin/bash -c Arbitrary Command Execution Shellcode (72 bytes)

Orthanc DICOM Server 1.1.0 - Memory Corruption

OsiriX DICOM Viewer 8.0.1 - Memory Corruption

ConQuest DICOM Server 1.4.17d - Stack Buffer Overflow

DCMTK 3.6.0 storescp - Stack Buffer Overflow

Horos 2.1.0 DICOM Medical Image Viewer - Denial of Service

Nagios < 4.2.2 - Arbitrary Code Execution

Nagios < 4.2.4 - Privilege Escalation

Nidesoft MP3 Converter 2.6.18 - SEH Local Buffer Overflow

Microsoft Internet Explorer 9 IEFRAME - CMarkup::RemovePointerPos Use-After-Free (...

Microsoft Internet Explorer 9 MSHTML - CMarkup::ReloadInCompatView Us...

15.12.2016

Bugtraq

MSIE 9 IEFRAME CMarkupÂPointer::MoveÂToÂGap use-after-free 2016-12-15
Berend-Jan Wever (berendj nwever nl)

Nagios Core < 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565] 2016-12-15
Dawid Golunski (dawid legalhackers com)

Adobe Animate <= v15.2.1.95 Memory Corruption Vulnerability 2016-12-14
apparitionsec gmail com (hyp3rlinx)

Secunia Research: Microsoft Windows Type 1 Font Processing Vulnerability 2016-12-14
Secunia Research (remove-vuln secunia com)

CVE-2013-3143: MSIE 9 IEFRAME CMarkup..RemoveÂPointerÂPos use-after-free 2016-12-14
Berend-Jan Wever (berendj nwever nl)

[slackware-security] mozilla-firefox (SSA:2016-348-01) 2016-12-13
Slackware Security Team (security slackware com)

MSIE 9 MSHTML CMarkup::ReloadInCompatView use-after-free 2016-12-13
Berend-Jan Wever (berendj nwever nl)

APPLE-SA-2016-12-13-7 Additional information for APPLE-SA-2016-12-12-2 watchOS 3.1.1 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-13-8 Transporter 1.9.2 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-13-5 Additional information for APPLE-SA-2016-12-12-1 iOS 10.2 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-13-2 Safari 10.0.2 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-13-3 iTunes 12.5.4 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

Malware

Backdoor:Win32/Truvasys.D!dha
Backdoor:Win32/Truvasys.A!dha
Backdoor:Win32/Truvasys.C!dha
Backdoor:Win32/Myntor.A!dha

Phishing

Vulnerebility

SANS News

Domaincop malpsam

Threatpostpost

Apple Fixes 97 Vulnerabilities Across macOS, iTunes, Safari, iCloud

Google Discloses Contents of Eight National Security Letters

Mirai Giving DDoS-as-a-Service Industry a Boost

Bug Hunters Prefer Communication Ovear Compensation

Exploit

APT - Repository Signing Bypass via Memory Allocation Failure

Adobe Animate 15.2.1.95 - Memory Corruption

14.12.2016

Bugtraq

CVE-2013-3143: MSIE 9 IEFRAME CMarkup..RemoveÂPointerÂPos use-after-free 2016-12-14
Berend-Jan Wever (berendj nwever nl)

[slackware-security] mozilla-firefox (SSA:2016-348-01) 2016-12-13
Slackware Security Team (security slackware com)

MSIE 9 MSHTML CMarkup::ReloadInCompatView use-after-free 2016-12-13
Berend-Jan Wever (berendj nwever nl)

APPLE-SA-2016-12-13-7 Additional information for APPLE-SA-2016-12-12-2 watchOS 3.1.1 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-13-8 Transporter 1.9.2 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-13-5 Additional information for APPLE-SA-2016-12-12-1 iOS 10.2 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-13-2 Safari 10.0.2 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-13-3 iTunes 12.5.4 2016-12-13
Apple Product Security (product-security-noreply lists apple com)

[slackware-security] kernel (SSA:2016-347-01) 2016-12-12
Slackware Security Team (security slackware com)

[slackware-security] php (SSA:2016-347-03) 2016-12-12
Slackware Security Team (security slackware com)

Malware

BrowserModifier:Win32/Clodaconas
BrowserModifer:Win32/Clodaconas

Backdoor.Telebot

Phishing

Pastor.Fred Wilson	13th December 2016
Here is the information;MTCN; 2133097115
AOL	12th December 2016
new message

Vulnerebility

SANS News

UAC Bypass in JScript Dropper

Threatpostpost

Adobe Patches 31 Vulnerabilities, Flash Zero-Day Under Attack

Microsoft Patches Publicly Disclosed IE, Edge Vulnerabilities

Beta Firmware Updates Available for Vulnerable Netgear Routers

Zcash Spurs Rash of Malicious Mining Software

Law Enforcement Targets Users of DDoS-For-Hire Services

Exploit

13.12.2016

Bugtraq

[slackware-security] kernel (SSA:2016-347-01) 2016-12-12
Slackware Security Team (security slackware com)

[slackware-security] php (SSA:2016-347-03) 2016-12-12
Slackware Security Team (security slackware com)

Apple iOS/tvOS/watchOS Remote memory corruption through certificate 2016-12-12
submit cxsec org

APPLE-SA-2016-12-12-2 watchOS 3.1.1 2016-12-12
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-12-3 tvOS 10.1 2016-12-12
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2016-12-12-1 iOS 10.2 2016-12-12
Apple Product Security (product-security-noreply lists apple com)

[SECURITY] CVE-2016-8745 Apache Tomcat Information Disclosure 2016-12-12
Mark Thomas (markt apache org)

[SECURITY] [DSA 3730-1] icedove security update 2016-12-11
Salvatore Bonaccorso (carnil debian org)

Malware

BrowserModifier:Win32/Linkhortry

Phishing

AOL	12th December 2016
new message
Wellsfargo Online	12th December 2016
Wells Fargo Fraud Prevention Inquiry

Vulnerebility

SANS News

December 2016 Patch Tuesday Brief and Updates

Threatpostpost

Netgear Routers Remain Exposed to Critical Flaw

Apple Fixes 12 Vulnerabilities in iOS 10.2

Facebook Releases Free Certificate Transparency Monitoring Tool

Exploit

McAfee Virus Scan Enterprise for Linux - Remote Code Execution

Joomla Component DT Register - 'cat' SQL Injection

Samsung Devices KNOX Extensions - OTP TrustZone Trustlet Stack Buffer Overflow

WordPress Plugin Multisite Post Duplicator 0.9.5.1 - Cross-Site Request Forgery

Smart Guard Network Manager 6.3.2 - SQL Injection

iOS 10.1.x - Certificate File Memory Corruption

TP-LINK TD-W8151N - Denial of Service

Serva 3.0.0 HTTP Server - Denial of Service

Microsoft Internet Explorer 9 IEFRAME -...

12.12.2016

Bugtraq

[SECURITY] CVE-2016-8745 Apache Tomcat Information Disclosure 2016-12-12
Mark Thomas (markt apache org)

[SECURITY] [DSA 3730-1] icedove security update 2016-12-11
Salvatore Bonaccorso (carnil debian org)

MSIE 9 MSHTML CElement::HasÂFlag memory corruption 2016-12-09
Berend-Jan Wever (berendj nwever nl)

Symantec VIP Access Desktop Arbitrary DLL Execution 2016-12-09
apparitionsec gmail com - hyp3rlinx

Malware

Backdoor:Win32/Wingbird.A!dha

Linux.Mirai

Trojan.Gen.8

Phishing

Vulnerebility

SANS News

5 Questions to Ask your IoT Vendors; But Do Not Expect an Answer.

Threatpostpost

German Industrial Giant Victim of Cyber Espionage

Exploit

OpenSSL 1.1.0a/1.1.0b - Denial of Service

Smart Guard Network Manager 6.3.2 - SQL Injection

ARG-W4 ADSL Router - Multiple Vulnerabilities

Netgear R7000 - Cross-Site Scripting

EasyPHP Devserver 16.1.1 - Insecure File Permissions Privilege Escalation

11.12.2016

Bugtraq

Malware

Trojan:Win64/Depriz.D!dha
Trojan:Win32/Depriz.C!dha
Trojan:Win32/Depriz.A!dha
Trojan:Win32/Depriz.B!dha
Trojan:Win32/Cadlotcorg.A
Win32/Depriz

X97M.Goldendrop

Phishing

Email Administrator	10th December 2016
Account Suspection Notice
Bank of America	9th December 2016
Bank of America Alert: Your Online Access is Temporarily Locked

Vulnerebility

SANS News

Mirai - now with DGA

Threatpostpost

Yahoo Mail XSS Bug Worth Another $10K to Researcher

Ransomware Gives Free Decryption Keys to Victims Who Infect Others

Exploit

Microsoft Internet Explorer 9 MSHTML - CElement::HasFlag Memory Corruption

Microsoft Internet Explorer 9 MSHTML - CDispNode::InsertSiblingNode Us...

Splunk Enterprise 6.4.3 - Server-Side Request Forgery

Roundcube 1.2.2 - Remote Code Execution

9.12.2016

Bugtraq

MSIE 9 MSHTML CElement::HasÂFlag memory corruption 2016-12-09
Berend-Jan Wever (berendj nwever nl)

Symantec VIP Access Desktop Arbitrary DLL Execution 2016-12-09
apparitionsec gmail com - hyp3rlinx

AST-2016-009: <br> 2016-12-08
Asterisk Security Team (security asterisk org)

AST-2016-008: Crash on SDP offer or answer from endpoint using Opus 2016-12-08
Asterisk Security Team (security asterisk org)

CVE-2013-1306: MSIE 9 MSHTML CDispÂNode::InsertÂSiblingÂNode use-after-free details 2016-12-08
Berend-Jan Wever (berendj nwever nl)

[security bulletin] HPSBHF03674 rev.1 HPE Comware 5 and Comware 7 Network Products using SSL/TLS, Remote Disclosure of Information 2016-12-07
security-alert hpe com

Malware

Phishing

AOL	8th December 2016
Somebody seems to have marked your current account
Chase online	8th December 2016
New Security Alert
MR. Don C.John	8th December 2016
RE: 2016 VICTIMS COMPENSATION FROM THE IMF BENIN

Vulnerebility

SANS News

Threatpostpost

Yahoo Mail XSS Bug Worth Another $10K to Researcher

NYU Students Apply Blockchain Solution to Electronic Voting Security

Exploit

8.12.2016

Bugtraq

CVE-2013-1306: MSIE 9 MSHTML CDispÂNode::InsertÂSiblingÂNode use-after-free details 2016-12-08
Berend-Jan Wever (berendj nwever nl)

[security bulletin] HPSBHF03674 rev.1 HPE Comware 5 and Comware 7 Network Products using SSL/TLS, Remote Disclosure of Information 2016-12-07
security-alert hpe com

Microsoft Remote Desktop Client for Mac Remote Code Execution 2016-12-07
Filippo Cavallarin (filippo cavallarin wearesegment com)

[ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security 2016-12-07
ESNC Security (secure esnc de)

CVE-2015-1730: MSIE jscript9 JavaÂScriptÂStackÂWalker memory corruption details and PoC 2016-12-06
Berend-Jan Wever (berendj nwever nl)

Malware

W97M.Downloader.O

W97M.Downloader.N

Phishing

AOL	7th December 2016
Someone has now marked your current profile page
AOL	7th December 2016
Gertrude78 has posted you a buddy request
AOL	7th December 2016
Someone has recently tagged your own account
AOL	7th December 2016
A woman has now marked your current profile
AOL	7th December 2016
A girl has already tagged your current profile
Wells Fargo Online Banking	7th December 2016
Wells Fargo Information Updated
no-reply	7th December 2016
WE NEED YOUR HELP ASAP
service	7th December 2016
ACCOUNT NOTIFICATION
AOL	7th December 2016
Halle65 has placed a new friend request

Vulnerebility

SANS News

Good Cop; Bad Cop; Domain Cop?

Threatpostpost

New Call to Regulate IoT Security By Design

OpenVPN to Undergo Cryptographic Audit

Researchers Question Security in AMD’s Upcoming Zen Chips

Buffer Overflow in BSD libc Library Patched

Solar Power Firm Patches Meters Vulnerable to Command Injection Attacks

Old Linux Kernel Code Execution Bug Patched

Exploit

Netgear R7000 - Command Injection

Windows x64 - Bind Shell TCP Shellcode (508 bytes)

7.12.2016

Bugtraq

[ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security 2016-12-07
ESNC Security (secure esnc de)

CVE-2015-1730: MSIE jscript9 JavaÂScriptÂStackÂWalker memory corruption details and PoC 2016-12-06
Berend-Jan Wever (berendj nwever nl)

Re: CVE-2016-3222: MS Edge CBaseScriptable::PrivateQueryInterface memory corruption 2016-12-06
Berend-Jan Wever (berendj nwever nl)

CVE-2016-8740, Server memory can be exhausted and service denied when HTTP/2 is used 2016-12-05
Eissing Stefan (stefan eissing gmail com)

Malware

Ransom.Goldeneye

Phishing

AOL	7th December 2016
Halle65 has placed a new friend request
AOL	6th December 2016
A person seems to have marked your own account
service	6th December 2016
ACCOUNT NOTIFICATION

Vulnerebility

SANS News

Attacking NoSQL applications

The Passwords You Should Never Use

Threatpostpost

DailyMotion Hack Leaks Emails, Passwords of 87M Users

Flash Exploit Found in Seven Exploit Kits

Hackers Gamify DDoS Attacks With Collaborative Platform

Critical Vulnerability Patched in Roundcube Webmail

Exploit

TP-LINK TD-W8951ND - Denial of Service

OpenSSH 7.2 - Denial of Service

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

Windows 10 x86/x64 WLAN AutoConfig - Denial of Service (POC)

Microsoft Edge - CBaseScriptable::PrivateQueryInterface Memory Corruption (M...

Microsoft Internet Explorer jscript9 - JavaScriptStackWalker Memory Corruption (M...

Dual DHCP DNS Server 7.29 - Denial of Service

6.12.2016

Bugtraq

Re: CVE-2016-3222: MS Edge CBaseScriptable::PrivateQueryInterface memory corruption 2016-12-06
Berend-Jan Wever (berendj nwever nl)

CVE-2016-8740, Server memory can be exhausted and service denied when HTTP/2 is used 2016-12-05
Eissing Stefan (stefan eissing gmail com)

Microsoft MSINFO32.EXE ".NFO" Files XML External Entity 2016-12-04
apparitionsec gmail com/hyp3rlinx

Microsoft Windows Media Center "ehshell.exe" XML External Entity 2016-12-04
apparitionsec gmail com/hyp3rlinx

[slackware-security] mozilla-firefox (SSA:2016-336-01) 2016-12-01
Slackware Security Team (security slackware com)

Malware

SoftwareBundler:Win32/Prepscram.B
SoftwareBundler:Win32/Prepscram.C
PUA:Win32/Prepscram
SoftwareBundler:Win32/Prepscram.A
SoftwareBundler:Win32/Prepscram!rfn

Phishing

PAYPAL_SUPPORT	6th December 2016
Confirm your account

Vulnerebility

SANS News

Threatpostpost

Dirty Cow Vulnerability Patched in Android Security Bulletin

Exploit

Android - IOMXNodeInstance::enableNativeBuffers Unchecked Index

Microsoft Edge - CMarkup::EnsureDeleteCFState Use-After-Free (MS15-125)

Microsoft Internet Explorer 9 - CDoc::ExecuteScriptUri Use-After-Free (MS13-009)

Microsoft Edge - CBaseScriptable::PrivateQueryInterface Memory Corruption (M...

Microsoft PowerShell - XML External Entity Injection

Microsoft Internet Explorer jscript9 - JavaScriptStackWalker Memory Corruption (M...

Android - Inter-Process munmap with User-Controlled Size in android.graphics.Bitmap

DiskBoss Enterprise 7.4.28 - 'GET' Buffer Overflow

Dup Scout Enterprise 9.1.14 - Buffer Overflow (SEH)

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Wordpress Plugin Single Personal Message 1.0.3 - SQL Injection

Apache CouchDB 2.0.0 - Local Privilege Escalation

Microsoft MSINFO32.EXE 6.1.7601 - '.NFO' XML External Entity Injection

Microsoft Event Viewer 1.0 - XML External Entity Injection

NetCat 0.7.1 - Denial of Service

5.12.2016

Bugtraq

CVE-2016-8740, Server memory can be exhausted and service denied when HTTP/2 is used 2016-12-05
Eissing Stefan (stefan eissing gmail com)

Microsoft MSINFO32.EXE ".NFO" Files XML External Entity 2016-12-04
apparitionsec gmail com/hyp3rlinx

Microsoft Windows Media Center "ehshell.exe" XML External Entity 2016-12-04
apparitionsec gmail com/hyp3rlinx

[slackware-security] mozilla-firefox (SSA:2016-336-01) 2016-12-01
Slackware Security Team (security slackware com)

Malware

Exploit:SWF/Dlcypt.A

SoftwareBundler:Win32/Bervisec
BrowserModifier:Win32/Riccietex

Phishing

Support Team	4th December 2016
Account Notification !
USAA	3rd December 2016
USAA ONLINE NEW MESSAGE FOR YOUR VIEW

Vulnerebility

SANS News

Hancitor Maldoc Videos

Threatpostpost

EFF Blasts DEA in Ongoing Secret ‘Super Search Engine’ Lawsuit

New Large-Scale DDoS Attacks Follow Schedule

Exploit

Microsoft Event Viewer 1.0 - XML External Entity Injection

Microsoft MSINFO32.EXE 6.1.7601 - '.NFO' XML External Entity Injection

Microsoft Windows Media Center 6.1.7600 - 'ehshell.exe' XML External Entity...

Microsoft Excel Starter 2010 - XML External Entity Injection

Microsoft Authorization Manager 6.1.7601 - 'azman' XML External Entity Injection

Alcatel Lucent Omnivista 8770 - Remote Code Execution

BlackStratus LOGStorm 4.5.1.35/4.5.1.96 - Remote Code Execution

Apache CouchDB 2.0.0 - Local Privilege Escalation

NetCat 0.7.1 - Denial of Service

DiskBoss Enterprise 7.4.28 - 'GET' Buffer Overflow

Dup Scout Enterprise 9.1.14 - Buffer Overflow (SEH)

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

4.12.2016

Bugtraq

[slackware-security] mozilla-firefox (SSA:2016-336-01) 2016-12-01
Slackware Security Team (security slackware com)

[security bulletin] HPSBUX03665 rev.3 - HP-UX Tomcat-based Servlet Engine, Remote Denial of Service (DoS), URL Redirection 2016-11-30
security-alert hpe com

Malware

Phishing

WellsfargoOnline	3rd December 2016
Wells Fargo Online
Capital One	2nd December 2016
Capital One Re-Validate Account for Your Security

Vulnerebility

SANS News

Threatpostpost

Google Fixes 12 High-Severity Flaws In Chrome Browser

Exploit

Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution

Xfinity Gateway - Remote Code Execution

2.12.2016

Bugtraq

[slackware-security] mozilla-firefox (SSA:2016-336-01) 2016-12-01
Slackware Security Team (security slackware com)

[security bulletin] HPSBUX03665 rev.3 - HP-UX Tomcat-based Servlet Engine, Remote Denial of Service (DoS), URL Redirection 2016-11-30
security-alert hpe com

Malware

Exploit:SWF/Netis.C
SoftwareBundler:Win32/Bervisec
BrowserModifier:Win32/Riccietex
SoftwareBundler:Win32/Dlhelper

Linux.Horsepill

Phishing

Apple Store Service	1st December 2016
Apple Client Support (Ticket Ref#:32951)
APPSTORE LD	1st December 2016
Renewal required

Vulnerebility

SANS News

Tap Gigabit Networks on the Cheap

Protecting Powershell Credentials (NOT)

Threatpostpost

Rule 41 Opponents Vow to Fight Government’s New Hacking Powers

Exploit

Disk Savvy Enterprise 9.1.14 - 'GET' Buffer Overflow

1.12.2016

Bugtraq

[slackware-security] mozilla-firefox (SSA:2016-336-01) 2016-12-01
Slackware Security Team (security slackware com)

[security bulletin] HPSBUX03665 rev.3 - HP-UX Tomcat-based Servlet Engine, Remote Denial of Service (DoS), URL Redirection 2016-11-30
security-alert hpe com

[security bulletin] HPSBGN03680 rev.1 - HPE Propel, Local Denial of Service (DoS), Escalation of Privilege 2016-11-30
security-alert hpe com

[security bulletin] HPSBGN03677 rev.1 - HPE Network Automation using RPCServlet and Java Deserialization, Remote Code Execution 2016-11-30
security-alert hpe com

[FOXMOLE SA 2016-05-02] e107 Content Management System (CMS) - Multiple Issues 2016-11-30
FOXMOLE Advisories (advisories foxmole com)

[security bulletin] HPSBHF03682 rev.1 - HPE Comware 7 Network Products using SSL/TLS, Local Gain Privileged Access 2016-11-30
security-alert hpe com

[RT-SA-2016-003] Less.js: Compilation of Untrusted LESS Files May Lead to Code Execution through the JavaScript Less Compiler 2016-11-30
RedTeam Pentesting GmbH (release redteam-pentesting de)

XSS in tooltip plugin of Zurb Foundation 5 2016-11-29
Winni Neessen (winni insecure so)

Malware

W97M.Downloader.M

Phishing

APPSTORE LD	1st December 2016
Renewal required
noreply@amazon.com	30th November 2016
Important message please read
James B. Comey	29th November 2016
Executive Director FBI

Vulnerebility

SANS News

Threatpostpost

Microsoft Silently Fixes Kernel Bug That Led to Chrome Sandbox Bypass

Gooligan Malware Breaches 1 Million Google Accounts

Exploit

Disk Savvy Enterprise 9.1.14 - 'GET' Buffer Overflow

Xfinity Gateway - Cross-Site Request Forgery

Joomla! Component Portfolio Gallery 1.0.6 - SQL Injection

Joomla! Component Catalog 1.0.7 - SQL Injection

Wordpress Plugin WP Vault 0.8.6.6 - Local File Inclusion

Xitami Web Server 5.0a0 - Denial of Service

30.11.2016

Bugtraq

[RT-SA-2016-003] Less.js: Compilation of Untrusted LESS Files May Lead to Code Execution through the JavaScript Less Compiler 2016-11-30
RedTeam Pentesting GmbH (release redteam-pentesting de)

XSS in tooltip plugin of Zurb Foundation 5 2016-11-29
Winni Neessen (winni insecure so)

Google Chrome Accessibility blink::Node corruption details 2016-11-29
Berend-Jan Wever (berendj nwever nl)

SEC Consult SA-20161128-0 :: DoS & heap-based buffer overflow in Guidance Software EnCase Forensic 2016-11-28
SEC Consult Vulnerability Lab (research sec-consult com)

Malware

Trojan.Sponkirob

Phishing

noreply@amazon.com	30th November 2016
Important message please read
James B. Comey	29th November 2016
Executive Director FBI
Apple	29th November 2016
About your transaction #5748573
IAPPIE.LD	29th November 2016
Account Suspended

Vulnerebility

SANS News

Unpatched Vulnerability in Firefox used to Attack Tor Browser

Take Back Wednesday? SQL Slammer... still alive but barely kicking

Threatpostpost

New Mirai Variant Targets Routers, Knocks 900,000 Offline

NetWire RAT Back, Stealing Payment Card Data

New Cerber Variant Leverages Tor2Web Proxies, Google Redirects

Exploit

WinPower 4.9.0.4 - Privilege Escalation

Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' /proc/self/mem Race Condition Privilege...

29.11.2016

Bugtraq

XSS in tooltip plugin of Zurb Foundation 5 2016-11-29
Winni Neessen (winni insecure so)

Google Chrome Accessibility blink::Node corruption details 2016-11-29
Berend-Jan Wever (berendj nwever nl)

SEC Consult SA-20161128-0 :: DoS & heap-based buffer overflow in Guidance Software EnCase Forensic 2016-11-28
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 3725-1] icu security update 2016-11-27
Luciano Bello (luciano debian org)

Core FTP LE v2.2 Remote SSH/SFTP Buffer Overflow 2016-11-27
apparitionsec gmail com/hyp3rlinx

WorldCIST'2017 - Submission deadline: November 30 2016-11-26
ML (marialemos72 gmail com)

Malware

Ransom.YeeScrLocker

Linux.Gafgyt.B

Phishing

IAPPIE.LD	29th November 2016
Account Suspended
Service Info	29th November 2016
UPDATE
noreply@amazon.com	29th November 2016
Important message please read

Vulnerebility

SANS News

Port 7547 SOAP Remote Code Execution Attack Against DSL Modems

TR-069 NewNTPServer Exploits: What we know so far

Threatpostpost

PayPal Fixes OAuth Token Leaking Vulnerability

Exploit

Android - 'BadKernel' Remote Code Execution

Microsoft Internet Explorer 8 / 9 / 10 / 11 MSHTML - 'DOMImplementation' Type...

Microsoft Internet Explorer 10 MSHTML - 'CEditAdorner::Detach' Use-After-Free ...

Microsoft Internet Explorer 11 MSHTML -...

Microsoft Internet Explorer 8 MSHTML - 'SRunPointer::SpanQualifier/RunType' Ou...

NTP 4.2.8p3 - Denial of Service

Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege...

Red Hat JBoss EAP - Deserialization of Untrusted Data

Tenda/Dlink/Tplink TD-W8961ND - 'DHCP' Cross-Site Scripting

28.11.2016

Bugtraq

SEC Consult SA-20161128-0 :: DoS & heap-based buffer overflow in Guidance Software EnCase Forensic 2016-11-28
SEC Consult Vulnerability Lab (research sec-consult com)

[SECURITY] [DSA 3725-1] icu security update 2016-11-27
Luciano Bello (luciano debian org)

Core FTP LE v2.2 Remote SSH/SFTP Buffer Overflow 2016-11-27
apparitionsec gmail com/hyp3rlinx

WorldCIST'2017 - Submission deadline: November 30 2016-11-26
ML (marialemos72 gmail com)

CVE 2016-6803: Apache OpenOffice Unquoted Search Path Vulnerability 2016-11-25
Apache OpenOffice Security (orcmid apache org)

Call for Participation - 5th International Conference on Cyber Security, Cyber Welfare and Digital Forensic 2016-11-25
Jackie Blanco (jackie sdiwc info)

[SECURITY] [DSA 3724-1] gst-plugins-good0.10 security update 2016-11-24
Salvatore Bonaccorso (carnil debian org)

Call for Participation - 5th International Conference on Cyber Security, Cyber Welfare and Digital Forensic 2016-11-25
Jackie Blanco (jackie sdiwc info)

[SECURITY] [DSA 3723-1] gst-plugins-good1.0 security update 2016-11-24
Salvatore Bonaccorso (carnil debian org)

Malware

HackTool:Win32/AutoKMS!rfn

Phishing

Vulnerebility

SANS News

Port 7547 SOAP Remote Code Execution Attack Against DSL Modems

Scapy vs. CozyDuke

Threatpostpost

Exploit

Disk Pulse Enterprise 9.1.16 - Buffer Overflow

Disk Savvy Enterprise 9.1.14 - Buffer Overflow

Dup Scout Enterprise 9.1.14 - Buffer Overflow

Disk Sorter Enterprise 9.1.12 - Buffer Overflow

Sync Breeze Enterprise 9.1.16 - Buffer Overflow

VX Search Enterprise 9.1.12 - Buffer Overflow

27.11.2016

Bugtraq

Call for Participation - 5th International Conference on Cyber Security, Cyber Welfare and Digital Forensic 2016-11-25
Jackie Blanco (jackie sdiwc info)

Malware

Phishing

Apple	27th November 2016
[Norton Anti]Please Review Your Account Informations
Virgin Media	26th November 2016
AN UPDATE FROM VIRGIN MEDIA
Support	26th November 2016
[PAYPAL] PLEASE CONFIRM YOUR INFORMATIONS

Vulnerebility

SANS News

Threatpostpost

Exploit

Linux/x86 - Egg-hunter Shellcode (25 bytes)

Core FTP LE 2.2 - 'SSH/SFTP' Remote Buffer Overflow (PoC)

25.11.2016

Bugtraq

Call for Participation - 5th International Conference on Cyber Security, Cyber Welfare and Digital Forensic 2016-11-25
Jackie Blanco (jackie sdiwc info)

[SECURITY] [DSA 3724-1] gst-plugins-good0.10 security update 2016-11-24
Salvatore Bonaccorso (carnil debian org)

Call for Participation - 5th International Conference on Cyber Security, Cyber Welfare and Digital Forensic 2016-11-25
Jackie Blanco (jackie sdiwc info)

[SECURITY] [DSA 3723-1] gst-plugins-good1.0 security update 2016-11-24
Salvatore Bonaccorso (carnil debian org)

WorldCIST'17 - Submission deadline: November 27 2016-11-24
ML (marialemos72 gmail com)

Malware

Phishing

Apple	25th November 2016
Your Apple ID was used to sign in to iMessage on an iPhone 6.
info	24th November 2016
PAYPAL - VERIFICATION REQUIRED
Tesco Credit Card Services	23rd November 2016
Your Account
NatWest	23rd November 2016
New online login authentication procedures

Vulnerebility

SANS News

Extracting Shellcode From JavaScript

Free Software Quick Security Checklist

Threatpostpost

Exploit

Osticket 1.9.14 - 'X-Forwarded-For' Cross-Site Scripting

Microsoft Windows Kernel win32k.sys - 'NtSetWindowLongPtr' Privilege Escalation...

Remote Utilities Host 6.3 - Denial of Service

24.11.2016

Bugtraq

[SYSS-2016-107] EASY HOME Alarmanlagen-Set - Cryptographic Issues (CWE-310) 2016-11-24
gerhard klostermeier syss de

[SYSS-2016-071] Blaupunkt Smart GSM Alarm SA 2500 Kit - Missing Protection against Replay Attacks 2016-11-24
matthias deeg syss de

[SYSS-2016-064] Multi Kon Trade M2B GSM Wireless Alarm System - Improper Restriction of Excessive Authentication Attempts (CWE-307) 2016-11-24
gerhard klostermeier syss de

[SYSS-2016-066] Multi Kon Trade M2B GSM Wireless Alarm System - Missing Protection against Replay Attacks 2016-11-24
gerhard klostermeier syss de

[CVE-2016-7098] GNU Wget < 1.18 Access List Bypass / Race Condition 2016-11-24
Dawid Golunski (dawid legalhackers com)

Malware

TrojanDownloader:JS/Nemucod
JS/Nemucod
Ransom:Win32/Locky.A

Trojan.Ismdoor

Ransom.OzozaLocker

Phishing

info	24th November 2016
PAYPAL - VERIFICATION REQUIRED
Tesco Credit Card Services	23rd November 2016
Your Account

Vulnerebility

SANS News

Threatpostpost

Exploit

UCanCode - Multiple Vulnerabilities

Linux Kernel 2.6.32-642 / 3.16.0-4 - 'inode' Integer Overflow

Windows x64 - Download & Execute Shellcode (358 bytes)

GNU Wget < 1.18 - Access List Bypass / Race Condition

Microsoft Windows Kernel win32k.sys - 'NtSetWindowLongPtr' Privilege Escalation...

23.11.2016

Bugtraq

CVE-2015-1251: Chrome blink SpeechÂRecognitionÂController use-after-free details 2016-11-23
Berend-Jan Wever (berendj nwever nl)

[SYSS-2016-106] EASY HOME Alarmanlagen-Set - Missing Protection against Replay Attacks 2016-11-23
matthias deeg syss de

[SYSS-2016-072] Olympia Protect 9061 - Missing Protection against Replay Attacks 2016-11-23
matthias deeg syss de

[CORE-2016-0007] - TP-LINK TDDP Multiple Vulnerabilities 2016-11-22
CORE Advisories Team (advisories coresecurity com)

CVE-2015-0050: Microsoft Internet Explorer 8 MSHTML SRunPointer::SpanQualifier/RunType OOB read details 2016-11-22
Berend-Jan Wever (berendj nwever nl)

Web vulnerabilities in Siemens S7-300/S7-400/CP343-1/CP443-1 2016-11-21
Andrea Barisani (andrea inversepath com)

[SECURITY] [DSA 3719-1] wireshark security update 2016-11-21
Sebastien Delafond (seb debian org)

Malware

Ransom.PrincessLocker

W32.Disttrack.B

Phishing

NatWest	23rd November 2016
New online login authentication procedures
Apple Support	21st November 2016
Apple Account
USAA	19th November 2016
MY SUBJECT

Vulnerebility

SANS News

Mapping Attack Methodology to Controls

Threatpostpost

Microsoft Cutting Off SHA-1 Support in February for Edge, IE 11

InPage Zero Day Used in Attacks Against Banks

Uber Portal Leaked Names, Phone Numbers, Email Addresses, Unique Identifiers

Exploit

Linux Kenrel 2.6.10 < 2.6.31.5 - 'pipe.c' Privilege Escalation

Linux Kernel 2.6.32-rc1 (x86-64) - Register Leak

Linux Kernel 2.6.18 - 'move_pages()' Information Leak

Linux Kernel 2.6.32-642 / 3.16.0-4 - 'inode' Integer Overflow (PoC)

Linux/x86-64 - /bin/sh -c reboot Shellcode (89 bytes)

Crestron AM-100 - Multiple Vulnerabilities

SAP NetWeaver AS JAVA - 'BC-BMT-BPM-DSK' XML External Entity Injection

EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery / Remote Command Execution

AppFusions Doxygen for Atlassian Confluence 1.3.2 - Cross-Site Scripting

Microsoft Internet Explorer 8 MSHTML - 'Ptls5::LsFindSpanVisualBoundaries' Mem...

TP-LINK TDDP - Multiple Vulnerabilities

22.11.2016

Bugtraq

[CORE-2016-0007] - TP-LINK TDDP Multiple Vulnerabilities 2016-11-22
CORE Advisories Team (advisories coresecurity com)

CVE-2015-0050: Microsoft Internet Explorer 8 MSHTML SRunPointer::SpanQualifier/RunType OOB read details 2016-11-22
Berend-Jan Wever (berendj nwever nl)

Web vulnerabilities in Siemens S7-300/S7-400/CP343-1/CP443-1 2016-11-21
Andrea Barisani (andrea inversepath com)

[SECURITY] [DSA 3719-1] wireshark security update 2016-11-21
Sebastien Delafond (seb debian org)

[ERPSCAN-16-034] SAP NetWeaver AS JAVA - XXE vulnerability in BC-BMT-BPM-DSK component 2016-11-21
ERPScan inc (erpscan online gmail com)

Nginx (Debian-based distros) - Root Privilege Escalation (CVE-2016-1247) 2016-11-21
Dawid Golunski (dawid legalhackers com)

[RCESEC-2016-009] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Persistent Cross-Site Scripting 2016-11-20
Julien Ahrens (info rcesecurity com)

[RCESEC-2016-008] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Full Path Information Disclosure 2016-11-20
Julien Ahrens (info rcesecurity com)

Malware

Phishing

Vulnerebility

SANS News

ZIP With Comment

Threatpostpost

Microsoft Cutting Off SHA-1 Support in February for Edge, IE 11

Office 365 Vulnerability Identified Bogus Microsoft.com Email as Valid

DoD Publishes Vulnerability Disclosure Policy

WordPress Plugins Leave Black Friday Shoppers Vulnerable

Exploit Code Released for NTP Vulnerability

Exploit

EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery / Remote Command Execution

Wordpress Plugin Olimometer 2.56 - SQL Injection

Huawei UTPS - Unquoted Service Path Privilege Escalation

Linux/x86-64 - /bin/sh -c reboot Shellcode (89 bytes)

Tetris Heap Spraying: Spraying the Heap on a Budget

Microsoft Internet Explorer 8 jscript - 'RegExpBase::FBadHeader' Use-After-Free (...

Microsoft Edge - 'CTextExtractor::GetBlockText' Out-of-Bounds Read (MS16-104)

Microsoft Edge Scripting Engine - Memory Corruption (MS16-129)

Dlink DIR Routers - Unauthenticated HNAP Login Stack Buffer Overflow (Metasploit)

Wordpress Plugin Olimometer 2.56 - SQL Injection

FUDforum 3.0.6 - Local File Inclusion

FUDforum 3.0.6 - Cross-Site Scripting / Cross-Site Request Forgery

LEPTON 2.2.2 - Remote Code Execution

LEPTON 2.2.2 - SQL Injection

Mezzanine 4.2.0 - Cross-Site Scripting

WordPress Plugin Instagram Feed 1.4.6.2 - Cross-Site Request Forgery

NTP 4.2.8p8 - Denial of Service

21.11.2016

Bugtraq

[SECURITY] [DSA 3719-1] wireshark security update 2016-11-21
Sebastien Delafond (seb debian org)

[ERPSCAN-16-034] SAP NetWeaver AS JAVA - XXE vulnerability in BC-BMT-BPM-DSK component 2016-11-21
ERPScan inc (erpscan online gmail com)

Nginx (Debian-based distros) - Root Privilege Escalation (CVE-2016-1247) 2016-11-21
Dawid Golunski (dawid legalhackers com)

[RCESEC-2016-009] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Persistent Cross-Site Scripting 2016-11-20
Julien Ahrens (info rcesecurity com)

[RCESEC-2016-008] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Full Path Information Disclosure 2016-11-20
Julien Ahrens (info rcesecurity com)

[RCESEC-2016-007] AppFusions Doxygen for Atlassian Confluence v1.3.0 getTemporaryDirectory() tempId Path Traversal/Remote Code Execution 2016-11-20
Julien Ahrens (julien ahrens rcesecurity com)

Multiple issues in OpManager 12100 & 12200 2016-11-20
Michael Heydon (michael mheydon net)

[security bulletin] HPSBHF03675 rev.1 - HPE Integrated Lights-Out 3 and 4 (iLO 3, iLO 4), Cross-Site Scripting (XSS) 2016-11-20
security-alert hpe com

Putty Cleartext Password Storage 2016-11-20
apparitionsec gmail com/hyp3rlinx

Malware

Phishing

Apple Support	21st November 2016
Apple Account
USAA	19th November 2016
MY SUBJECT

Vulnerebility

SANS News

How many ?Epoch? times? Epocalypse.py timestamp converter

Threatpostpost

Nemucod Infections Spreading Locky Over Facebook

Credentials Accessible in Siemens-Branded CCTV Cameras

Exploit

CMS Made Simple 2.1.5 - Cross-Site Scripting

ScriptCase 8.1.053 - Multiple Vulnerabilities

20.11.2016

Bugtraq

CVE-2016-3247 Microsoft Edge CTextExtractor::GetBlockText OOB read details 2016-11-18
Berend-Jan Wever (berendj nwever nl)

Reason Core Security v1.2.0.1 - Unqoted Path Privilege Escalation Vulnerability 2016-11-18
Vulnerability Lab (research vulnerability-lab com)

Malware

Phishing

Apple Support	19th November 2016
Apple Account
SunTrust Bank	18th November 2016
Online Access Suspended
Chase Online	18th November 2016
Chase Online Notification
SERVICE ACCOUNT	18th November 2016
Account update - Receipt #97548978

Vulnerebility

SANS News

2016-11-18 example of KaiXin EK activity

VBA Shellcode and Windows 10

Threatpostpost

Qualcomm and HackerOne Partner on Bounty Program

Drupal Fixes ‘Moderately Critical’ Vulnerabilities in Core Engine

Exploit

Microsoft Edge - 'Array.reverse' Overflow

Microsoft Edge - 'Array.filter' Info Leak

Microsoft Edge - 'FillFromPrototypes' Type Confusion

Palo Alto Networks PanOS root_reboot - Privilege Escalation

Palo Alto Networks PanOS root_trace - Privilege Escalation

Palo Alto Networks PanOS appweb3 - Stack Buffer Overflow

18.11.2016

Bugtraq

CVE-2016-3247 Microsoft Edge CTextExtractor::GetBlockText OOB read details 2016-11-18
Berend-Jan Wever (berendj nwever nl)

Reason Core Security v1.2.0.1 - Unqoted Path Privilege Escalation Vulnerability 2016-11-18
Vulnerability Lab (research vulnerability-lab com)

[ERPSCAN-16-031] SAP NetWeaver AS ABAP â?? directory traversal using READ DATASET 2016-11-18
ERPScan inc (erpscan online gmail com)

[ERPSCAN-16-032] SAP Telnet Console â?? Directory traversal vulnerability 2016-11-18

Executable installers are vulnerable^WEVIL (case 41): EmsiSoft's Emergency Kit allows elevation of privilege for everybody 2016-11-17
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 3716-1] firefox-esr security update 2016-11-16
Moritz Muehlenhoff (jmm debian org)

[security bulletin] HPSBGN03676 rev.1 - HPE Helion OpenStack Glance Image Service, Remote Denial of Service (DoS) 2016-11-16
security-alert hpe com

CVE-2015-2482 MSIE 8 jscript RegExpBase::FBadHeader use-after-free details 2016-11-16
Berend-Jan Wever (berendj nwever nl)

[security bulletin] HPSBST03671 rev.1 - HPE StoreEver MSL6480 Tape Library, Remote Unauthorized Disclosure of Information 2016-11-15
security-alert hpe com

Actiontec WCB3000N (Telus Branded) Local Unauthenticated Privilege Elevation and Password Reset 2016-11-15
Andrew Klaus (andrewklaus gmail com)

CVE-2016-4484: - Cryptsetup Initrd root Shell 2016-11-14
Hector Marco (hmarco hmarco org) (1 replies)

Re: [oss-security] CVE-2016-4484: - Cryptsetup Initrd root Shell 2016-11-15
Leo Famulari (leo famulari name)

[security bulletin] HPSBUX03665 rev.2 - HP-UX Tomcat-based Servlet Engine, Remote Denial of Service (DoS) and URL Redirection 2016-11-14
security-alert hpe com

[security bulletin] HPSBGN03669 rev.1 - HPE SiteScope, Local Elevation of Privilege, Remote Denial of Service, Arbitrary Code Execution and Cross-Site Request Forgery 2016-11-14
security-alert hpe com

SEC Consult SA-20161114-0 :: Multiple vulnerabilities in I-Panda SolarEagle - Solar Controller Administration Software / MPPT Solar Controller SMART2 2016-11-14
SEC Consult Vulnerability Lab (research sec-consult com)

WHM Panel Mail Delivery Reports crash database Vulnerability 2016-11-13
iedb team gmail com

Multiple vulnerabilities in Barco Clickshare 2016-11-14
vincent ruijter kpn com

WHM Panel Mail Delivery Reports crash database Vulnerability 2016-11-12
iedb team gmail com

CVE-2015-0040: Microsoft Internet Explorer 11 MSHTML CMapElement::Notify use-after-free details 2016-11-14
Berend-Jan Wever (berendj nwever nl)

[CVE-2016-8736] Apache Openmeetings RMI Registry Java Deserialization RCE 2016-11-13
Maxim Solodovnik (solomax apache org)

CVE-2016-9277: A IDX Out of Bound vulnerability in systemui can make crash and ui restart 2016-11-12
unlimitsec gmail com

[SECURITY] [DSA 3711-1] mariadb-10.0 security update 2016-11-11
Salvatore Bonaccorso (carnil debian org)

Malware

PWS:Win32/Hoardy
Trojan:Win32/Godzilia.A
TrojanDownloader:JS/Crimace.A
Ransom:Win32/WinPlock.A
TrojanSpy:MSIL/Omaneat.H!bit
TrojanDropper:Win32/Sality!rfn

Trojan.Flokibot

W97M.Empstage

Trojan.Powerduke

Ransom.PCsurveyLocker

Ransom.Ransoc

Phishing

SERVICE ACCOUNT	18th November 2016
Account update - Receipt #97548978
Wells Fargo	18th November 2016
Alert: Unread new SECURED message
Martin Cox	17th November 2016
Account Overdue (Please Review Today)
Martin Cox	17th November 2016
Verification Required
noreply@amazon.com	17th November 2016
Important message please read
Apple	17th November 2016
Your Apple ID was used to sign in to iMessage on an iPhone 6.
USAA	17th November 2016
INCOMING PAYMENT PENDING YOUR APPROVAL
PayPal	17th November 2016
Second reminder to respond to PayPal claim: Case ID #PP-003-153-234-760
No reply	16th November 2016
Request to Close Your Account
USAA	16th November 2016
Urgent - Incoming Payment Transfer On Hold
HM Revenue &	16th November 2016
HM Revenue & Customs - You are eligible to receive a tax refund !
Warning from Amazon	16th November 2016
PLEASE CHECK YOUR BILLING ADDRESS AND PAYMENT WITHIN 24 HOURS OR YOUR ACCOUNT WILL BE REMOVED PERMANENTLY !
PayPal	16th November 2016
Your account has been limited until you confirm your personal data
Chase Online	15th November 2016
Dear Chase OnlineSM Customer
Amazon.com	15th November 2016
Security Alerts - Act Now!
SunTrust Bank	15th November 2016
Online Access Suspended

Vulnerebility

SANS News

Example of Getting Analysts & Researchers Away

Threatpostpost

Mozilla Patches 29 Vulnerabilities, Prevents MIME Confusion Attacks, in Firefox 50

IBM Opens Attack Simulation Test Center

iOS 10 Passcode Bypass Can Access Photos, Contacts

Google Removing SHA-1 Support in Chrome 56

Exploit

Windows x64 - Reverse Shell TCP Shellcode (694 bytes)

Wordpress Plugin Sirv 1.3.1 - SQL Injection

Wordpress Plugin Answer My Question 1.3 - SQL Injection

Microsoft Edge - 'eval' Type Confusion

FTPShell Client 5.24 - 'PWD' Remote Buffer Overflow

EditMe CMS - Cross-Site Request Forgery (Add New Admin)

Moxa SoftCMS 1.5 - Denial of Service (PoC)

Nagios 4.2.2 - Privilege Escalation