❌ Evil TeamViewer Attacks Under the Guise of the U.S. State Department ❌
📖 Read
via "Threatpost".
The attack is targeting financial regulators and embassy staff-- but probably isn't the work of an APT.📖 Read
via "Threatpost".
Threat Post
Evil TeamViewer Attacks Under the Guise of the U.S. State Department
The attack is targeting financial regulators and embassy staff– but probably isn't the work of an APT.
ATENTION‼ New - CVE-2016-1587
📖 Read
via "National Vulnerability Database".
The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the user, nor the origin of the connection. An attacker could have used the controls to remotely add a valid, but malicious, snap package, from the Store, potentially using system resources without permission from the legitimate administrator of the system.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-1586
📖 Read
via "National Vulnerability Database".
A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-1585
📖 Read
via "National Vulnerability Database".
In all versions of AppArmor mount rules are accidentally widened when compiled.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-1584
📖 Read
via "National Vulnerability Database".
In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-1579
📖 Read
via "National Vulnerability Database".
UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functionality was not restricted to unconfined applications. Before UDM version 1.2+16.04.20160408-0ubuntu1 any confined application could make use of the UDM C++ API to run arbitrary commands in an unconfined environment as the phablet user.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-1573
📖 Read
via "National Vulnerability Database".
Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1343
📖 Read
via "National Vulnerability Database".
All versions of unity-scope-gdrive logs search terms to syslog.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1341
📖 Read
via "National Vulnerability Database".
Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Appoprt before 2.19.2 function _python_module_path.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1340
📖 Read
via "National Vulnerability Database".
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1327
📖 Read
via "National Vulnerability Database".
Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1326
📖 Read
via "National Vulnerability Database".
python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1320
📖 Read
via "National Vulnerability Database".
The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1316
📖 Read
via "National Vulnerability Database".
Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-1428
📖 Read
via "National Vulnerability Database".
A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-1427
📖 Read
via "National Vulnerability Database".
A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-1426
📖 Read
via "National Vulnerability Database".
A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-3151
📖 Read
via "National Vulnerability Database".
The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-3147
📖 Read
via "National Vulnerability Database".
Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-3145
📖 Read
via "National Vulnerability Database".
When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-1830
📖 Read
via "National Vulnerability Database".
Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.📖 Read
via "National Vulnerability Database".