Vuln: Siemens Automation License Manager Multiple Security Vulnerabilities
Siemens Automation License Manager Multiple Security Vulnerabilities
View ArticleBugtraq: Evernote for Windows DLL Loading Remote Code Execution Vulnerability
Evernote for Windows DLL Loading Remote Code Execution Vulnerability
View ArticleVuln: Adobe Flash Player APSB16-32 Multiple Use After Free Remote Code...
Adobe Flash Player APSB16-32 Multiple Use After Free Remote Code Execution Vulnerabilities
View ArticleVuln: OpenSSL CVE-2016-2178 Side Channel Attack Information Disclosure...
OpenSSL CVE-2016-2178 Side Channel Attack Information Disclosure Vulnerability
View ArticleVuln: QEMU '/hw/char/serial.c' Divide By Zero Denial of Service Vulnerability
QEMU '/hw/char/serial.c' Divide By Zero Denial of Service Vulnerability
View ArticleVuln: QEMU 'hw/dma/rc4030.c' Divide By Zero Denial of Service Vulnerability
QEMU 'hw/dma/rc4030.c' Divide By Zero Denial of Service Vulnerability
View ArticleVuln: Apache Tomcat CVE-2016-5388 Security Bypass Vulnerability
Apache Tomcat CVE-2016-5388 Security Bypass Vulnerability
View ArticleVuln: Apache Tomcat CVE-2016-6325 Local Privilege Escalation Vulnerability
Apache Tomcat CVE-2016-6325 Local Privilege Escalation Vulnerability
View ArticlepseudoDarkleech Rig EK, (Fri, Oct 14th)
Introduction Since Monday 2016-10-03, the pseudoDarkleech campaign has been using Rig exploit kit (EK) to distribute Cerber ransomware." /> Shown above: An infection chain of events. Let" />...
View ArticleVuln: Microsoft Internet Explorer CVE-2016-3384 Remote Memory Corruption...
Microsoft Internet Explorer CVE-2016-3384 Remote Memory Corruption Vulnerability
View ArticleVuln: Microsoft Internet Explorer CVE-2016-3383 Remote Memory Corruption...
Microsoft Internet Explorer CVE-2016-3383 Remote Memory Corruption Vulnerability
View ArticleVuln: Microsoft Internet Explorer and Edge CVE-2016-3382 Remote Memory...
Microsoft Internet Explorer and Edge CVE-2016-3382 Remote Memory Corruption Vulnerability
View ArticleClik here to view.
Beware of all-powerful DDoS malware infecting cellular gateways, feds warn
Enlarge / One of the Sierra Wireless devices that can be infected by Mirai. (credit: Sierra Wireless) This week, the US government-backed ICS-CERT warned that the troubling new generation of computer...
View ArticleVuln: PHP 'password_verify()' Function Out-of-Bounds Read Denial of Service...
PHP 'password_verify()' Function Out-of-Bounds Read Denial of Service Vulnerability
View ArticleVuln: Magento CMS Flash File Uploader Cross Site Scripting Vulnerability
Magento CMS Flash File Uploader Cross Site Scripting Vulnerability
View ArticleVuln: Magento CMS Multiple Cross-Site Request Forgery Vulnerabilities
Magento CMS Multiple Cross-Site Request Forgery Vulnerabilities
View ArticleClik here to view.
Maldoc VBA Anti-Analysis, (Sat, Oct 15th)
I was asked for help with the analysis of sample 7c9505f2c041ba588bed854258344c43. Turns out this malicious Word document has some anti-analysis tricks ( older diary entry with other anti-analysis...
View ArticleVuln: Snoopy CVE-2008-7313 Arbitrary Command Execution Vulnerability
Snoopy CVE-2008-7313 Arbitrary Command Execution Vulnerability
View ArticleAnalyzing Office Maldocs With Decoder.xls, (Sun, Oct 16th)
In my last diary entry, I show how to decode VBA maldoc strings with Excel. A similar technique can be used to decode a payload (like shellcode). I explain this method in this video. Didier Stevens...
View ArticleISC Stormcast For Monday, October 17th 2016...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View Article