Matisse & Co- Assimilated Asylum

Matisse & Co

Competitive Intelligence Data Services

Join Now-Sign Up
Log In

Search Results

Assimilated Asylum

Tags:

MCO Security Alerts Advisories

NA – CVE-2018-15393 – A vulnerability in the web-based management…
A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting ... read more
64.030
Newly Added (2)Android/Generic.Z.A04505!trAndroid/Generic.Z.A052AF!trModified (12)Adware/Agent!AndroidAdware/DataEye!AndroidAdware/Dowgin!AndroidAdware/Ewind!AndroidAdware/MobiDash!AndroidAdware/Mytrackp!AndroidAdware/Spyzie!AndroidAndroid/Agent.BCM!trAndroid/Hiddad.SP!trAndroid/Obfus.JA!trRiskware/Agent!AndroidRiskware/SmsReg!Android ]]> ... read more
AR18-312A: JexBoss – JBoss Verify and EXploitation Tool
Original release date: November 08, 2018Summary JBoss Verify and EXploitation tool (JexBoss) is an open-source tool used by cybersecurity hunt teams (sometimes referred to as “red teams”) and auditors to ... read more
Beta Channel Update for Desktop
The beta channel has been updated to 71.0.3578.44 for Windows, Mac, and, Linux.A full list of changes in this build is available in the log. Interested in switching release channels? ... read more
WebRTC Use After Free Code Execution (CVE-2018-16071)
A use-after-free vulnerability exists in WebRTC. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system. ... read more
Apple QuickLook OfficeImporter JavaScript Injection
A command injection vulnerability exists in Apple QuickLook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system. ... read more
Primetek Primefaces Weak Encryption Remote Code Execution (CVE-2017-1000486)
Primefaces versions prior to 5.2.21, 5.3.8 or 6.0 are vulnerable to a padding oracle attack, due to the use of weak crypto and default encryption password. ... read more
WebRTC FEC Out Of Bounds Read (CVE-2018-16083)
A out of bounds read vulnerability exists in WebRTC. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information. ... read more
64.029
Modified (6)Adware/Ewind!AndroidAdware/MobiDash!AndroidAndroid/VpsDrop.A!trRiskware/SmsPay!AndroidRiskware/SmsReg!AndroidiOS/YiSpecter.A!tr.dldr ]]> ... read more
Python Cryptographic Authority pyopenssl X509 Object Handling Use-After-Free Vulnerability
A vulnerability in Python Cryptographic Authority pyopenssl could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on a targeted system. The ... read more
Python Cryptographic Authority pyopenssl Memory Handling Denial of Service Vulnerability
A vulnerability in Python Cryptographic Authority pyopenssl could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted system. The vulnerability exists because the ... read more
CVE-2018-15394
A vulnerability in the Stealthwatch Management Console (SMC) of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an ... read more
CVE-2018-19114
An issue was discovered in MinDoc through v1.0.2. It allows attackers to gain privileges by uploading an image file with contents that represent an admin session, and then sending a ... read more
CVE-2018-15445
A vulnerability in the web-based management interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary ... read more
CVE-2018-15446
A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper protections on data that is returned ... read more
CVE-2018-15444
A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to gain read and write access to information that is stored ... read more
CVE-2018-15439
A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under ... read more
CVE-2018-15437
A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the ... read more
CVE-2018-15393
A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a ... read more
CVE-2018-15443
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured Intrusion Prevention System (IPS) rule that inspects certain types ... read more
New Spam Botnet Likely Infected 400,000 Devices (SecurityWeek)
... read more
Oops: Cisco accidentally leaked in-house Dirty COW exploit code with biz conf call software (The Register)
... read more
Steam bug could have gave you access to all the CD keys of any game (ZDNet)
... read more
64.028
Newly Added (1)Android/Generic.AP.1376594!trModified (5)Adware/Dowgin!AndroidAdware/MobiDash!AndroidAndroid/Android_Wapsx.IAndroid/Piom.LY!trRiskware/MobileTracker!Android ]]> ... read more
Philips iSite and IntelliSpace PACS
This medical device advisory includes mitigations for a weak password Requirements vulnerability in the Philips iSite and IntelliSpace PACS. ... read more
Getting ROI From a Security Advisory Board That Works: Part 1 – Why (SecurityWeek)
... read more
Apple 0, José 3 – Man versus Megacorp! [PODCAST]
Here's the latest Naked Security Podcast - enjoy! ... read more
Several Vulnerabilities Patched in nginx (SecurityWeek)
... read more
Attack uses malicious InPage document and outdated VLC media player to give attackers backdoor access to targets
Our analysis of a targeted attack that used a language-specific word processor shows why its important to understand and protect against small-scale and localized attacks as well as broad-scale malware ... read more
64.027
Newly Added (3)Android/Ctchm.C!trAndroid/Generic.S.5903E8!trAndroid/Xiny.TGVP!trModified (10)Adware/AirPush!AndroidAdware/Dowgin!AndroidAdware/Ginamster!AndroidAdware/Kuguo!AndroidAndroid/Agent.AZK!trAndroid/Agent.CKA!trAndroid/Agent.CKY!trAndroid/Agent.QA!trAndroid/Banker.AJU!tr.spyRiskware/Dnotua!Android ]]> ... read more
Metamorfo Banking Trojan Keeps Its Sights on Brazil
... read more
CVE-2018-15381
A Java deserialization vulnerability in Cisco Unity Express (CUE) could allow an unauthenticated, remote attacker to execute arbitrary shell commands with the privileges of the root user. The vulnerability is ... read more
CVE-2018-0284
A vulnerability in the local status page functionality of the Cisco Meraki MR, MS, MX, Z1, and Z3 product lines could allow an authenticated, remote attacker to modify device configuration ... read more
Dropbox integrates with Google Cloud Identity for advanced security features (ZDNet)
... read more
How to disable simultaneous multithreading on Lenovo ThinkPads (TechRepublic)
... read more
Metamorfo Banking Trojan Keeps Its Sights on Brazil
This blog post was authored by Edmund Brumaghin, Warren Mercer, Paul Rascagneres, and Vitor Ventura.Executive SummaryFinancially motivated cybercriminals have used banking trojans for years to steal sensitive financial information from ... read more
64.026
Modified (8)Adware/Ewind!AndroidAndroid/Agent.AEV!trAndroid/Agent.AWG!trAndroid/Agent.CKA!trAndroid/Ctchm.C!trAndroid/Generic.S.1EBBC6!trAndroid/Generic.S.5903E8!trAndroid/Xiny.TGVP!tr ]]> ... read more
NA – USN-3813-1 – pyOpenSSL vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several security issues were fixed in pyOpenSSL. Software Description: - pyopenssl: ... read more
NA – CVE-2018-1314 – In Apache Hive 2.3.3, 3.1.0 and earlier, Hive…
In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do "EXPLAIN" on arbitrary ... read more
NA – CVE-2018-11777 – In Apache Hive 2.3.3, 3.1.0 and earlier, local…
In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use. ... read more
NA – CVE-2018-6433 – A vulnerability in the secryptocfg export…
A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to bypass the export file access restrictions and ... read more
NA – CVE-2018-6441 – A vulnerability in Secure Shell implementation…
A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbitrary environment variables, and bypass ... read more
NA – CVE-2018-6442 – A vulnerability in the Brocade Webtools…
A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute arbitrary commands. ... read more
NA – CVE-2018-6435 – A Vulnerability in the secryptocfg command of…
A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted ... read more
NA – CVE-2018-6434 – A vulnerability in the web management interface…
A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept or manipulate a user's session ID. ... read more
When it Comes to Ransomware Demands, Just say No
While some targets have paid to get back their data, experts say most victims continue to reject extortion demands ... read more
DJI Drone Vulnerability Exposed Customer Data, Flight Logs, Photos and Videos (SecurityWeek)
... read more
64.025
Newly Added (1)Android/Generik.NNQAYJR!trModified (6)Adware/MobiDash!AndroidAndroid/Agent.AQE!tr.spyAndroid/Agent.CNF!trAndroid/Hiddad.HI!trAndroid/Piom.PAC!trRiskware/Miner!Android ]]> ... read more
NIAS 2018 Highlights
NATO NIAS was an excellent conference for NATO, Cisco, and all attendees. I eagerly anticipate another excellent conference at NIAS 2019! ... read more
Ranting researcher publishes VM-busting zero-day without warning
A security researcher has published a zero-day flaw in a commonly-used virtual machine management system without notifying the vendor, justifying it with a scathing critique of the infosecurity industry. ... read more

Matisse & Co @2019

KAVI MCO iSTRACIN Platform v 02.25 Friday, April 19, 2024

Disclaimer |
Terms |
Privacy
About-Services
Blog-Reports
YouTube
Pinterest
LinkedIn
Twitter
LinkedIn
Twitter
Connect-Contact

Login

Login to Matisse & Co Competitive Intelligence

Forgot password?

Register Now

Hello

Your Account Type is
Your Mail Id is
Your Username is

Security Briefing Search

PDF Library Search

Search

Reset Password

Reset Password

You have no permission to access this content