In-the-wild exploits ramp up against high-impact sites using Apache Struts
Enlarge (credit: AlienVault) Eight days after developers patched a critical flaw in the Apache Struts Web application framework, there has been no let-up in the volley of attacks attempting to exploit...
View ArticleBugtraq: Microsoft Edge Fetch API allows setting of arbitrary request headers
Microsoft Edge Fetch API allows setting of arbitrary request headers
View ArticleVuln: Microsoft Windows Graphics CVE-2017-0025 Local Privilege Escalation...
Microsoft Windows Graphics CVE-2017-0025 Local Privilege Escalation Vulnerability
View ArticleVuln: Microsoft Windows Graphics Component CVE-2017-0073 Local Information...
Microsoft Windows Graphics Component CVE-2017-0073 Local Information Disclosure Vulnerability
View ArticleVuln: Microsoft Windows CVE-2017-0038 Incomplete Fix Information Disclosure...
Microsoft Windows CVE-2017-0038 Incomplete Fix Information Disclosure Vulnerability
View ArticleVuln: Microsoft Internet Explorer and Edge CVE-2017-0037 Remote Memory...
Microsoft Internet Explorer and Edge CVE-2017-0037 Remote Memory Corruption Vulnerability
View ArticleVuln: Adobe Flash Player APSB17-07 Multiple Memory Corruption Vulnerabilities
Adobe Flash Player APSB17-07 Multiple Memory Corruption Vulnerabilities
View ArticleVuln: Adobe Flash Player APSB17-07 Multiple Use After Free Remote Code...
Adobe Flash Player APSB17-07 Multiple Use After Free Remote Code Execution Vulnerabilities
View ArticleVuln: Microsoft Windows Hyper-V CVE-2017-0021 Memory Corruption Vulnerability
Microsoft Windows Hyper-V CVE-2017-0021 Memory Corruption Vulnerability
View ArticleISC Stormcast For Wednesday, March 15th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleRetro Hunting!, (Wed, Mar 15th)
For a while, one of the securitytrends is to integrate information from 3rd-party feeds to improve the detection of suspicious activities. By collecting indicators of compromize[1], other tools may...
View ArticleVuln: Microsoft Office CVE-2017-0029 Denial of Service Vulnerability
Microsoft Office CVE-2017-0029 Denial of Service Vulnerability
View ArticleVuln: SAP NetWeaver Visual Composer Denial of Service Vulnerability
SAP NetWeaver Visual Composer Denial of Service Vulnerability
View ArticleVuln: Fatek Automation PLC Ethernet Module CVE-2017-6023 Stack Based Buffer...
Fatek Automation PLC Ethernet Module CVE-2017-6023 Stack Based Buffer Overflow Vulnerability
View ArticleVuln: concrete5 Multiple Cross Site Scripting Vulnerabilities
concrete5 Multiple Cross Site Scripting Vulnerabilities
View ArticleVuln: JIRA Server XML External Entity Injection and Arbitrary Code Execution...
JIRA Server XML External Entity Injection and Arbitrary Code Execution Vulnerability
View ArticleUS charges two Russian agents with ordering hack of 500m Yahoo accounts
Enlarge (credit: Bloomberg / Getty Images News) Federal prosecutors charged two Russian intelligence agents with orchestrating a 2014 hack that compromised 500 million Yahoo accounts in a brazen...
View ArticleVuln: Red Hat JBoss Enterprise Application Platform CVE-2016-8657 Local...
Red Hat JBoss Enterprise Application Platform CVE-2016-8657 Local Privilege Escalation Vulnerability
View ArticleVuln: Microsoft Windows Hyper-V CVE-2017-0098 Remote Denial of Service...
Microsoft Windows Hyper-V CVE-2017-0098 Remote Denial of Service Vulnerability
View ArticleVuln: Microsoft Windows Hyper-V CVE-2017-0076 Remote Denial of Service...
Microsoft Windows Hyper-V CVE-2017-0076 Remote Denial of Service Vulnerability
View Article