3768 matches found
CVE-2015-2167
Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp...
mailman -- path traversal vulnerability
Mark Sapiro reports: A path traversal vulnerability has been discovered and fixed. This vulnerability is only exploitable by a local user on a Mailman server where the suggested Exim transport, the Postfix postfixtomailman.py transport or some other programmatic MTA delivery not using aliases is...
Threat Outbreak Alert RuleID14120: Email Messages Distributing Malicious Software on March 20, 2015
Medium Alert ID: 37967 First Published: 2015 March 20 12:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14120 may contain the following files: Name | Si...
HTTPS Opens Door to Paid Pinterest Bug Bounty
Pinterest’s journey toward becoming a fully HTTPS website opened a lot of doors, including a potentially profitable one for hackers. The social networking site this week announced that it would begin paying cash rewards through its bug bounty program, upping the stakes from the T-shirt it...
Threat Outbreak Alert RuleID13978: Email Messages Distributing Malicious Software on March 17, 2015
Medium Alert ID: 37858 First Published: 2015 March 13 14:51 GMT Last Updated: 2015 March 18 16:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13978 and...
File Containment Vulnerability in CDN Acceleration Server of Shanghai Dilian Information Technology Co.
Ltd. CDN acceleration server, through the introduction of active content management layer and global load balancing, and combined with content caching and other technologies, for users to build a middle layer optimized for broadband service support on the basis of the existing IP network, so that...
Threat Outbreak Alert RuleID13746: Email Messages Distributing Malicious Software on February 27, 2015
Medium Alert ID: 37620 First Published: 2015 February 27 15:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13746 may contain the following files: Name |...
SYNCK GRAPHICA Mailform Pro Remote Code Execution Vulnerability
Mailform Pro CGI is a mail form application. A security vulnerability exists in Mailform Pro CGI's handling of email delivery, which allows remote attackers to exploit the vulnerability to execute arbitrary code...
PYSEC-2015-38
OpenStack Image Registry and Delivery Service Glance 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service disk consumption by creating a large number of images using the task v2 API and then deleting them, a different...
OpenStack Image Registry Delivery Service Arbitrary File Manipulation Vulnerability
The OpenStack Image Registry Delivery Service is an OpenStack project that stores, queries, and retrieves virtual machine images. An arbitrary file manipulation vulnerability exists in OpenStack Image Registry Delivery Service versions prior to 2014.1.4, and 2014.2.x versions prior to 2014.2.2,...
CVE-2015-1195
The CVE-2015-1195 issue concerns OpenStack Image Registry Delivery Service (Glance) V2 API where versions prior to 2014.1.4 and 2014.2.x prior to 2014.2.2 allow an authenticated remote user to read or delete arbitrary files via a full pathname in a filesystem:// URL in the image location property...
WordPress Welcart e-Commerce Plugin <= 1.3.12 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML in an adddeliverymethod action to wp-admin/admin-ajax.php via 4 parameters: "name", "intl", "nocod", or "time parameter". Solution Update the plugin...
Cisco Enterprise Content Delivery System Web Directory Traversal and Arbitrary File Access Vulnerability
A vulnerability in Cisco Enterprise Content Delivery System ECDS could allow an unauthenticated, remote attacker to conduct directory traversal attacks on a targeted system. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could...
CVE-2014-8019
Directory traversal vulnerability in Cisco Enterprise Content Delivery System ECDS allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCuo90148...
FTC Releases "Package Delivery" Themed Scam Alert
The Federal Trade Commission FTC has released a Scam Alert addressing a "Package Delivery" themed phishing campaign regarding package delivery notifications from the U.S. Postal Service. Scam operators often use false information linked to reputable organizations to imply the email is legitimate...
PT-2014-8628 · Citrix · Citrix Netscaler Application Delivery Controller +1
Name of the Vulnerable Software and Affected Versions: Citrix NetScaler Application Delivery Controller and NetScaler Gateway versions 10.5.50.10 through 10.5-52.10 Citrix NetScaler Application Delivery Controller and NetScaler Gateway versions 10.1.122.17 through 10.1-129.10 Citrix NetScaler...
Mail Transfer Agent and Mail Delivery Agent Remote Command Execution via Shellshock
The remote host appears to be running a mail transfer or mail delivery agent such as Courier, Exim, Postfix, or Procmail. Many of these agents can be configured to run utility scripts for a diverse number of tasks including filtering, sorting, and delivering mail. These scripts may create the...
Broken shell Vulnerability, CVE-2 0 1 4-6 2 7 1 Integrated analysis:“break the shell”loophole series analysis of two-vulnerability and early warning-the black bar safety net
A“broken shell”vulnerability overview Our team in 9 months 2 5, 1 0 when released the“break the shell”VulnerabilityCVE-2 0 1 4-6 2 7 1A comprehensive analysis of, and update multiple versions. In this process, we monitor the collection and sample Exchange System, found a lot to exploit the...
CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw
Description of Problem The recently disclosed protocol flaw in SSLv3, referred to as CVE-2014-3566 or POODLE, could expose some deployments that support SSLv3 to a risk of an active Man in the Middle MITM attack. A successful attack could lead to the disclosure of the information that is being se...
