6711 matches found
Kaspersky: Keys
Check the attachment...
Malicious Embedded Executable Downloader
Many campaigns are known to use mail attachments containing double zipped files. A remote attacker could convince users to manually trigger their execution. This would allow the malicious code to run and infect the target system...
Remote code execution
Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to...
Cisco Email Security Appliance Malformed EML Attachment Bypass Vulnerability (cisco-sa-20170906-esa)
According to its self-reported version, the Cisco Email Security Appliance ESA is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...
Cisco Email Security Appliance Malformed EML Attachment Bypass Vulnerability
A vulnerability in the malware detection functionality within Advanced Malware Protection AMP of Cisco AsyncOS Software for Cisco Email Security Appliances ESAs could allow an unauthenticated, remote attacker to cause an email attachment containing malware to be delivered to the end user. The...
CVE-2017-14146
CVE-2017-14146 affects HelpDEZk 1.1.1 and enables remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it from the helpdezk\app\uploads\helpdezk\attachments\ directory. The available sources confirm this file-upload vulnerability and PHP code...
CVE-2017-14146
HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\app\uploads\helpdezk\attachments\ directory...
Reflected Cross-Site Scripting Vulnerability in ZYCHCMS V06 admin_Attachment.asp Page
ZYCHCMS is an enterprise website management system. A reflective cross-site scripting vulnerability exists in the /admin/adminAttachment.asp page in ZYCHCMS version V06. An attacker can construct XSS statements to pop-up boxes and obtain sensitive information such as user cookies...
Cross site scripting
Cross-site scripting XSS vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment...
CVE-2015-6942
Cross-site scripting XSS vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment...
CVE-2015-6942
Cross-site scripting XSS vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment...
Threat Outbreak Alert RuleID30280: Email Messages Distributing Malicious Software on August 22, 2017
Medium Alert ID: 54913 First Published: 2017 August 22 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30280 may contain the following files: Name |...
GLSA-201708-02 : TNEF: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201708-02 TNEF: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TNEF. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a specially...
WordPress Attachment Manager Plugin <= 2.1.1 - Arbitrary File Upload Vulnerability
WordPress Attachment Manager Plugin Arbitrary File Upload Vulnerability is prone to a Arbitrary File Upload Vulnerability. In the function handeactions, it's missing an additional check for "page" and "wamaddicon" GET variables. Solution Update the plugin...
Threat Outbreak Alert RuleID29930: Email Messages Distributing Malicious Software on August 7, 2017
Medium Alert ID: 54752 First Published: 2017 August 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29930 may contain the following files: Name | Si...
Security Updates for Outlook (July 2017)
The Microsoft Office or Outlook application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Microsoft Office due to improper handling of user-supplied input. An...
HawkEye Credential Theft Malware Distributed in Recent Phishing Campaign
A wide variety of threat actors began distributing HawkEye malware through high-volume email campaigns after it became available for purchase via a public-facing website. The actors behind the phishing campaigns typically used email themes based on current events and media reports that would piqu...
HawkEye Credential Theft Malware Distributed in Recent Phishing Campaign
A wide variety of threat actors began distributing HawkEye malware through high-volume email campaigns after it became available for purchase via a public-facing website. The actors behind the phishing campaigns typically used email themes based on current events and media reports that would piqu...
Threat Outbreak Alert RuleID29868: Email Messages Distributing Malicious Software on July 21, 2017
Medium Alert ID: 54541 First Published: 2017 July 21 13:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29868 may contain the following files: Name | Siz...
