Threat Outbreak Alert: Fake Financial Account Statement Email Messages on October 23, 2013

Medium Alert ID: 31481 First Published: 2013 October 24 17:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account statement for the recipient. The text in the email message attempts to convince the recipient to op...

Zabbix 2.0.8 SQL Injection and Remote Code Execution

This Metasploit module exploits an unauthenticated SQL injection vulnerability affecting Zabbix versions 2.0.8 and lower. The SQL injection issue can be abused in order to retrieve an active session ID. If an administrator level user is identified, remote code execution can be gained by uploading...

OWASP ESAPI Security Advisory: MAC Bypass in ESAPI Symmetric Encryption

OWASP ESAPI for Java Security Advisory 1 The OWASP Foundation MAC Bypass in ESAPI Symmetric Encryption Summary ======= Category: Symmetric cryptography Module: ESAPI Encryptor interface Announced: 2013-08-23 via ESAPI-Dev mailing list...

Assessing risk for the August 2013 security updates

Today we released eight security bulletins addressing 23 CVE’s. Three bulletins have a maximum severity rating of Critical while the other five have a maximum severity rating of Important. We hope that the table below helps you prioritize the deployment of the updates appropriately for your...

PT-2013-3344 · Mozilla +1 · Firefox Esr +5

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 23.0 Firefox ESR 17.x versions prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR 17.x versions prior to 17.0.8 Description: The issue allows local users to gain privileges via a Trojan hors...

MiCasaVerde VeraLite 1.5.408 Traversal / Authorization / CSRF / Disclosure

Trustwave SpiderLabs Security Advisory TWSL2013-019: Multiple Vulnerabilities in MiCasaVerde VeraLite Published: 08/01/13 Version: 1.0 Vendor: MiCasaVerde http://www.micasaverde.com/ Product: VeraLite Version affected: 1.5.408 Product description: The MiCasaVerde VeraLite is the budget model from...

CVE-2013-2577

creationtimestamp| type| source ---|---|--- 2013-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27049...

Joomla Googlemaps XSS / XML Injection / Path Disclosure / DoS

Hello list! These are Denial of Service, XML Injection, Cross-Site Scripting and Full path disclosure vulnerabilities in Googlemaps plugin for Joomla. ------------------------- Affected products: ------------------------- Vulnerable are Googlemaps plugin for Joomla versions 2.x and 3.x and...

Solaris 10 (x86) : 148105-23 (deprecated)

SunOS 5.10x86: last, ssh/sshd patch. Date this patch was last updated by Sun : Jun/09/16 This plugin has been deprecated and either replaced with individual 148105 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

php security update

5.3.3-23 - add security fix for CVE-2013-4113...

Security fix for the ALT Linux 7 package krb5 version 1.11.2-alt2

May 14, 2013 Ivan A. Melnikov 1.11.2-alt2 - add patch 23 from upstream git to fix kpasswd udp ping-pong CVE-2002-2443...

PHDays 2013 hackquest

Кто еще не в курсе, вот здесь: hackquest.phdays.com розыгрываются 20 билетов и 20 фирменных футболок PHDays 2013, который пройдет в Москве 23-24 мая Всем удачи!...

STUNSHELL Web Shell Remote PHP Code Execution

Exploit for php platform in category remote exploits require 'msf/core' class Metasploit3 'STUNSHELL Web Shell Remote PHP Code Execution', 'Description' = %q This module exploits unauthenticated versions of the "STUNSHELL" web shell. This module works when safe mode is enabled on the web server...

Code injection

The Emerson DeltaV SE3006 through 11.3.1, DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1, and DeltaV VE3006 through 10.3.1 and 11.x through 11.3.1 allow remote attackers to cause a denial of service device restart via a crafted packet on 1 TCP port 23, 2 UDP port 161, or 3 TCP port 513...

CVE-2012-4703

The CVE-2012-4703 entry applies to Emerson DeltaV DeltaV SE3006 (up to v11.3.1) and VE3005/VE3006 (v10.3.1 and v11.x up to 11.3.1), affecting DeltaV control systems. The vulnerability allows remote attackers to cause a denial of service (device restart) by sending a crafted packet to (1) TCP port...

Google Implements Do Not Track in Chrome 23

Nearly two years after other browser vendors implemented it, Google on Tuesday finally released a version of Chrome that supports the Do Not Track functionality that helps users prevent Web sites from following their movements around the Web. Google’s move to include the technology is a response ...

Chrome 23 Released, 14 vulnerabilities patched

Google today released Chrome version 23 to the Stable Channel. 23.0.1271.64 for Windows, Mac, Linux, and Chrome Frame. Update includes patch for 12 vulnerabilities in the Windows version and two vulnerabilities in Mac OS X version. Chrome 23 is the support of the Do Not Track DNT protocol, number...

Google Patches 14 Flaws in Chrome 23

Google has released Chrome 23, the latest version of its browser, which includes fixes for 12 vulnerabilities in the Windows version and two other flaws that are specific only to Mac OS X. The company also handed out $9,000 in rewards to security researchers who reported the vulnerabilities. Six ...

Stable Channel Release and Beta Channel Update

The Chrome team is excited to announce the release of Chrome 23 to the Stable Channel. 23.0.1271.64for Windows, Mac, Linux, and Chrome Frame.Chrome 23 contains a number of new features including GPU accelerated video decoding on Windows and easier website permissions.More detailed updates are...

Apple QuickTime Player 7.7.2 - Crash (PoC)

!/usr/bin/perl Title : Apple QuickTime Player 7.7.2 Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- Don't forget that exploitable bugs will be...