Threat Outbreak Alert: Fake Contract Expiration Notice Email Messages on September 15, 2013

Medium Alert ID: 30818 First Published: 2013 September 16 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an expired contract notification for the recipient. The text in the email message attemp...

Threat Outbreak Alert: Fake Order Price Inquiry Email Messages on September 16, 2013

Medium Alert ID: 30815 First Published: 2013 September 16 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain an order price inquiry notification for the recipient. The text in the email message attemp...

execution of javascript from filename

Steps to replicate: Add an attachment Rename the file to ".txt" Copy its remove link and open the link in a new browser window Result: The JavaScript code is executed, rather than showing the "proceed w/ deletion" screen. Everything works normally if you just click the delete button rather than...

execution of javascript from filename

Steps to replicate: Add an attachment Rename the file to ".txt" Copy its remove link and open the link in a new browser window Result: The JavaScript code is executed, rather than showing the "proceed w/ deletion" screen. Everything works normally if you just click the delete button rather than...

execution of javascript from filename

Steps to replicate: Add an attachment Rename the file to ".txt" Copy its remove link and open the link in a new browser window Result: The JavaScript code is executed, rather than showing the "proceed w/ deletion" screen. Everything works normally if you just click the delete button rather than...

Threat Outbreak Alert: Fake Financial Issue Payment Notification Email Messages on September 13, 2013

Medium Alert ID: 30794 First Published: 2013 September 13 19:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment processing notification for the recipient. The text in the email message instructs the recipient t...

Threat Outbreak Alert: Fake Order Quote Request Email Messages on September 13, 2013

Medium Alert ID: 30793 First Published: 2013 September 13 16:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order quotation request for the recipient. The text in the email message instructs the recipient to open...

Threat Outbreak Alert: Fake Quote Order List Email Messages on September 13, 2013

Medium Alert ID: 30789 First Published: 2013 September 13 15:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order quotation request for the recipient. The text in the email message instructs the recipient to open...

Threat Outbreak Alert: Fake Order Renewal Request Email Messages on September 12, 2013

Medium Alert ID: 30788 First Published: 2013 September 13 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order renewal request for the recipient. The text in the email message instructs the recipient to open th...

[SpearPhisher] A Simple Phishing Email Generation Tool

SpearPhisher is a simple point and click Windows GUI tool designed for mostly non-technical people who would like to supplement the education and awareness aspect of their information security program. Not only is it useful to non-technical folks, penetration testers may find it handy for sending...

Threat Outbreak Alert: Fake Product Order Request Email Messages on September 12, 2013

Medium Alert ID: 30786 First Published: 2013 September 12 19:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to request the status of a product order and its related price and terms for shipping. The email message includes an...

Threat Outbreak Alert: Fake Banking Document Email Messages on September 12, 2013

Medium Alert ID: 30764 First Published: 2013 September 12 19:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an important document for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Document Attachment Email Messages on September 9, 2013

Medium Alert ID: 30768 First Published: 2013 September 12 17:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a utility form for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on September 10, 2013

Medium Alert ID: 30760 First Published: 2013 September 12 15:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a copy of a money transfer receipt for the recipient. The email message instructs the recipient to open the...

Threat Outbreak Alert: Fake Account Payment Notification Email Messages on September 10, 2013

Medium Alert ID: 30740 First Published: 2013 September 11 14:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment transaction notification for the recipient. The text in the email message attempts...

Threat Outbreak Alert: Fake Contract Delivery Email Messages on September 10, 2013

Medium Alert ID: 30741 First Published: 2013 September 11 14:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to Danish-language spam email messages that claim to contain contract attachment for the recipient. The text in the email message attempts to convince th...

disable XSRF check property has no effect on REST API

When disable the xsrf through the property in jira.xsrf.enabled=false in jira-config.properties according to the page|https://developer.atlassian.com/display/JIRADEV/Form+Token+Handling, it doesn't stop the xsrf checking when using JIRA REST API. However, the property took effect when you try som...

disable XSRF check property has no effect on REST API

When disable the xsrf through the property in jira.xsrf.enabled=false in jira-config.properties according to the page|https://developer.atlassian.com/display/JIRADEV/Form+Token+Handling, it doesn't stop the xsrf checking when using JIRA REST API. However, the property took effect when you try som...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on September 8, 2013

Medium Alert ID: 30716 First Published: 2013 September 10 15:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a money transfer notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Tax Return Submission Notification Email Messages on September 10, 2013

Medium Alert ID: 30714 First Published: 2013 September 10 15:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an online tax return submission notification for the recipient. The text in the email message attempts to...