In slap at Trump, Shadow Brokers release NSA EquationGroup files
Enlarge (credit: NSA) On April 8, as part of a long, awkwardly worded rant about President Donald Trump's betrayal of his "base," the individual or individuals known as the Shadow Brokers posted the...
View ArticleVuln: Atlassian JIRA 'project/ViewDefaultProjectRoleActors.jspa' HTML...
Atlassian JIRA 'project/ViewDefaultProjectRoleActors.jspa' HTML Injection Vulnerability
View ArticleVuln: Atlassian Bitbucket Server CVE-2016-4320 Directory Traversal Vulnerability
Atlassian Bitbucket Server CVE-2016-4320 Directory Traversal Vulnerability
View ArticleVuln: Atlassian JIRA Server CVE-2016-4319 Cross Site Request Forgery...
Atlassian JIRA Server CVE-2016-4319 Cross Site Request Forgery Vulnerability
View ArticleBugtraq: DefenseCode ThunderScan SAST Advisory: WordPress Tribulant Slideshow...
DefenseCode ThunderScan SAST Advisory: WordPress Tribulant Slideshow Gallery Plugin - Cross-Site Scripting Vulnerabilities
View ArticleVuln: Atlassian Confluence 'viewmyprofile.action' Cross Site Scripting...
Atlassian Confluence 'viewmyprofile.action' Cross Site Scripting Vulnerability
View ArticleVuln: Foxit PDF Toolkit CVE-2017-7584 Memory Corruption Vulnerability
Foxit PDF Toolkit CVE-2017-7584 Memory Corruption Vulnerability
View ArticleVuln: Schneider Electric SoMachine and Modicon CVE-2017-7574 Security Bypass...
Schneider Electric SoMachine and Modicon CVE-2017-7574 Security Bypass Vulnerability
View ArticleBugtraq: [SECURITY] CVE-2017-5651 Apache Tomcat Information Disclosure
[SECURITY] CVE-2017-5651 Apache Tomcat Information Disclosure
View ArticleBugtraq: [SECURITY] CVE-2017-5648 Apache Tomcat Information Disclosure
[SECURITY] CVE-2017-5648 Apache Tomcat Information Disclosure
View ArticleVuln: Foreman CVE-2017-2672 Information Disclosure Vulnerability
Foreman CVE-2017-2672 Information Disclosure Vulnerability
View ArticleVuln: Bluecoat SSL Visibility CVE-2016-10259 Denial of Service Vulnerability
Bluecoat SSL Visibility CVE-2016-10259 Denial of Service Vulnerability
View ArticleFeds deliver fatal blow to botnet that menaced world for 7 years
Enlarge (credit: manley099) Federal prosecutors say they've dealt a fatal blow to Kelihos, a network of more than 10,000 infected computers that was used to deliver spam, steal login passwords, and...
View ArticleDridex malspam seen on Monday 2017-04-10, (Tue, Apr 11th)
Introduction Malicious spam (malspam) pushing the Dridex banking Trojan disappeared in mid-2016, but it reappeared in January 2017 starting with a small campaign targeting UK financial institutions...
View ArticleISC Stormcast For Tuesday, April 11th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleMicrosoft Word 0-day used to push dangerous Dridex malware on millions
Enlarge / A sample e-mail from Dridex campaign exploiting Microsoft Word zero-day. (credit: Proofpoint) Booby-trapped documents exploiting a critical zero-day vulnerability in Microsoft Word have been...
View ArticleVuln: Multiple Bluecoat Products CVE-2016-9091 Command Injection Vulnerability
Multiple Bluecoat Products CVE-2016-9091 Command Injection Vulnerability
View ArticleVuln: Xen 'memory_exchange()' Function Incomplete Fix Privilege Escalation...
Xen 'memory_exchange()' Function Incomplete Fix Privilege Escalation Vulnerability
View ArticleVuln: Avaya Radvision SCOPIA Desktop SQL Injection Vulnerability
Avaya Radvision SCOPIA Desktop SQL Injection Vulnerability
View Article