Vuln: Schneider Electric Conext ComBox CVE-2017-6019 Denial of Service...
Schneider Electric Conext ComBox CVE-2017-6019 Denial of Service Vulnerability
View ArticleVuln: IBM Development Package for Apache Spark CVE-2016-4970 Denial of...
IBM Development Package for Apache Spark CVE-2016-4970 Denial of Service Vulnerability
View ArticleVuln: Eaton xComfort Ethernet Communication Interface CVE-2017-9368...
Eaton xComfort Ethernet Communication Interface CVE-2017-9368 Information Disclosure Vulnerability
View ArticleVuln: ImageMagick CVE-2017-6335 Local Denial of Service Vulnerability
ImageMagick CVE-2017-6335 Local Denial of Service Vulnerability
View ArticleVuln: WordPress Mobile App Plugin CVE-2017-6104 Arbitrary File Upload...
WordPress Mobile App Plugin CVE-2017-6104 Arbitrary File Upload Vulnerability
View ArticleVuln: HashOver CVE-2017-6395 Cross Site Scripting Vulnerability
HashOver CVE-2017-6395 Cross Site Scripting Vulnerability
View ArticleVuln: Rapid7 Insight Collector CVE-2017-5234 DLL Loading Remote Code...
Rapid7 Insight Collector CVE-2017-5234 DLL Loading Remote Code Execution Vulnerability
View ArticleVuln: Adobe Flash Player APSB17-04 Multiple Unspecified Memory Corruption...
Adobe Flash Player APSB17-04 Multiple Unspecified Memory Corruption Vulnerabilities
View ArticleVuln: Adobe Flash Player CVE-2017-2995 Type Confusion Remote Code Execution...
Adobe Flash Player CVE-2017-2995 Type Confusion Remote Code Execution Vulnerability
View ArticleVuln: Adobe Flash Player CVE-2017-2987 Unspecified Integer Overflow...
Adobe Flash Player CVE-2017-2987 Unspecified Integer Overflow Vulnerability
View ArticleVuln: Cisco Meeting Server CVE-2017-3837 Denial of Service Vulnerability
Cisco Meeting Server CVE-2017-3837 Denial of Service Vulnerability
View ArticleVuln: FlightAirMap CVE-2017-6397 Multiple Cross Site Scripting Vulnerabilities
FlightAirMap CVE-2017-6397 Multiple Cross Site Scripting Vulnerabilities
View ArticleVuln: WordPress fast-image-adder Plugin CVE-2015-1000001 Arbitrary File...
WordPress fast-image-adder Plugin CVE-2015-1000001 Arbitrary File Upload Vulnerability
View ArticleVuln: Soruly whatanime.ga CVE-2017-6390 Cross Site Scripting Vulnerability
Soruly whatanime.ga CVE-2017-6390 Cross Site Scripting Vulnerability
View ArticleVuln: Atheme IRC Services CVE-2017-6384 Denial of Service Vulnerability
Atheme IRC Services CVE-2017-6384 Denial of Service Vulnerability
View ArticleHow your pictures may affect your website reputation, (Sat, Mar 4th)
In a previous diary[1], I explained why the automatic processing of IOCs (Indicator of Compromise) could lead to false positives. Here is a practical example found yesterday. I captured the following...
View ArticleVuln: IBM UrbanCode Deploy CVE-2016-2941 Local Information Disclosure...
IBM UrbanCode Deploy CVE-2016-2941 Local Information Disclosure Vulnerability
View ArticleVuln: IBM UrbanCode Deploy CVE-2016-2942 Security Bypass Vulnerability
IBM UrbanCode Deploy CVE-2016-2942 Security Bypass Vulnerability
View ArticleClik here to view.
Another example of maldoc string obfuscation, with extra bonus: UAC bypass,...
I had to help out someone with this sample. It contains obfuscated strings like these: Notice the Like operator. This is a strong indication that the strings are obfuscated by adding extra characters...
View Article