Threat Outbreak Alert: Fake Information Request Email Messages on October 29, 2013

Medium Alert ID: 31549 First Published: 2013 October 30 19:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a request for personal details for the recipient. The text in the email message attempts to convince the...

EUVD-2013-3620

AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file...

Adobe Acrobat, ColdFusion Source Code, Customer Data Stolen

Attackers accessed customer IDs, encrypted passwords as well as source code for a number of Adobe products, Adobe chief security officer Brad Arkin announced. Arkin said Adobe is working with law enforcement on the breach in which attackers accessed source code for Adobe Acrobat, ColdFusion,...

APPLE-SA-2013-09-18-2 iOS 7

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-09-18-2 iOS 7 iOS 7 is now available and addresses the following: Certificate Trust Policy Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: Root certificates have been updated Description:...

Unauthenticated access to private information via tinymce plugin

It is possible for unauthenticated users to retrieve information from a Confluence instance, including tables of contents and change histories for private pages, and lists of all attachments in a space, by making calls to the preview function of the macro REST API in the confluence-tinymce-plugin...

Threat Outbreak Alert: Fake Overdue Payment Notification Email Messages on September 9, 2013

Medium Alert ID: 30715 First Published: 2013 September 10 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a payment notification for the recipient. The text in the email message attempts to...

EMLOG offline writing high-risk security vulnerabilities-vulnerability warning-the black bar safety net

You emlog user, EMLOG Development Group today confirmed EMLOG 5.1 series of versions exist offline writing interface permission validation is not strict, high-risk vulnerabilities. The vulnerability can lead an attacker can bypass the system user authentication mechanism through the offline writi...

MAPCO Incident Highlights the Risks Faced by All Convenience Stores

On May 6, 2013, convenience store operator MAPCO Express, Inc. did a responsible thing - they issued a press release that shared important information about a data security incident that was discovered at their stores. Such notices ---along with a whole lot of behind-the-scenes investigative work...

Flickr Usage

Binary data 6972.prm...

INSTEON Hub 2242-222 - Lack of Web and API Authentication

INSTEON Hub 2242-222 - Lack of Web and API Authentication Trustwave SpiderLabs Security Advisory TWSL2013-023: Lack of Web and API Authentication Vulnerability in INSTEON Hub Published: 8/01/13 Version: 1.0 Vendor: INSTEON http://www.INSTEON.com/ Product: Hub Version affected: 2242-222 model...

Apple to Fix Malicious Fake USB Charger Flaw

Apple claims it will fix a previously disclosed flaw in the current iteration of its mobile operating system, iOS 6, that can allow hackers complete access to an iPhone or iPad via a fake USB charger. Reuters confirmed the impending fix Wednesday after speaking with Apple spokesman Tom Numayr at...

CVE-2013-3011

Unspecified vulnerability in the Java Runtime Environment JRE in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a...

South Korea defense bans Smartphones for data security

South Korea's Ministry of National Defense is banning its employees from using the smart phones inside of the ministry's building in a bid to prevent military data leaks. At present, the only way to ensure sensitive corporate and Defense data is not lost is to provide employees with devices owned...

South Korea defense bans Smartphones for data security

South Korea’s Ministry of National Defense is banning its employees from using the smart phones inside of the ministry's building in a bid to prevent military data leaks. At present, the only way to ensure sensitive corporate and Defense data is not lost is to provide employees with devices owned...

Code injection

LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SCCheckError.php and data/class/SCFormParam.php...

Good MDM Settings

Binary data gmdmsettings.nbin...

CVE-2013-2147

CVE-2013-2147 affects the Linux kernel drivers for HP Smart Array/Compaq SMART2 (cpqarray/cciss). The root cause is uninitialized data structures in ida_locked_ioctl (via /dev/ida) and cciss_ioctl32_passthru (via /dev/cciss), allowing local attackers to read kernel memory how? through crafted IDA...

OpenJDK: image processing vulnerability (2D, 8007617)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate...

National Security Data on Private Networks Exposed as a Weak Point

The United States intelligence community and its counterparts in law enforcement are quite secretive about their surveillance methods and the targets of those operations. Few people are privy to information about ongoing surveillance, but now it turns out that the Chinese government may have a...

Kimai 0.9.2.1306-3 - SQL Injection

Kimai 0.9.2.1306-3 - SQL Injection Exploit Title: Kimai 0.9.2.1306-3 SQLi Date: 05/20/2013 Exploit Author: drone @dronesec Vendor Homepage: http://www.kimai.org/ Software Link: https://downloads.sourceforge.net/project/kimai/0.9.x/kimai.0.9.2.1306-3.zip Version: 0.9.2.1306-3 Fixed in: source...