CVE-2011-1649

CVE-2011-1649 affects Cisco Content Delivery System (CDS) Internet Streamer Web Server. A vulnerability in the Web Engine allows an unauthenticated remote attacker to crash the Web Engine by processing specially crafted URLs, causing a denial of service. Affected CDS Internet Streamer software ve...

Cisco Security Advisory: Cisco Content Delivery System Internet Streamer: Web Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Delivery System Internet Streamer: Web Server Vulnerability Advisory ID: cisco-sa-20110525-spcdn Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...

Cisco CDS Internet Streamer Web服务器远程拒绝服务漏洞

Bugtraq ID: 47979 CVE ID：CVE-2011-1649 Cisco Content Delivery System是一款思科公司开发的内容分发系统解决方案。 Cisco Internet Streamer应用程序是Cisco CDS中的一个组件，其WEB服务器存在一个安全漏洞，当解析特定URL时，WEB服务器引擎会崩溃。 未验证攻击者可以利用此漏洞对运行在服务引擎上的WEB服务器进行拒绝服务攻击，设备会继续工作，WEB引擎在攻击之后会重新启动。 Cisco Content Delivery System 2.5.9 Cisco Content Delivery...

Cisco Content Delivery System DoS

Internet Streamer URL processing crash...

Cisco Content Delivery System Internet Streamer: Web Server Vulnerability

...

Threat Outbreak Alert: Fake DHL Package Delivery Notification Email Messages on March 20, 2015

Medium Alert ID: 23104 First Published: 2011 May 9 12:53 GMT Last Updated: 2015 March 20 12:50 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a DHL package delivery notification. The text in the email message instructs...

Threat Outbreak Alert: Fake Delivery Express Parcel Notification Email Messages on�August 25, 2015

Medium Alert ID: 22891 First Published: 2011 April 8 14:39 GMT Last Updated: 2015 August 27 13:02 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages that inform the recipient about a parcel delivery from Delivery Express. The text in the email...

[SECURITY] Fedora 15 Update: rubygem-actionmailer-3.0.5-1.fc15

Makes it trivial to test and deliver emails sent from a single service laye r...

The Challenge of Starting an Application Security Program

Since organizations started opening their internal applications to the Web, a little more than a decade ago, it became clear that the security of those connected applications would be more complex – and critical to get right – than before. Unfortunately, through complacency, perhaps a feeling tha...

New Adobe Under Zero-Day Attack !

Adobe today released an advisory to warn about a remote code execution vulnerability in Flash Player, which also affects Adobe Reader and Acrobat. This critical vulnerability has been assigned CVE-2011-0609. Currently seen attacks work through a malicious SWF file which is embedded inside an Exce...

Mutare Software EVM - CSRF and XSS Vulnerabilities

Description: Mutare Software EVM 2.2.9 possibly earlier versions is vulnerable to CSRF and XSS. An attacker could do the following to a users' EVM settings: A. Change their EVM PIN B. Delete all of their voice messages C. Change or add any of their delivery address for voicemails CERT Vulnerabili...

Mutare Software EVM 2.2.9 Cross Site Request Forgery / Cross Site Scripting

Description: Mutare Software EVM 2.2.9 possibly earlier versions is vulnerable to CSRF and XSS. An attacker could do the following to a users' EVM settings: A. Change their EVM PIN B. Delete all of their voice messages C. Change or add any of their delivery address for voicemails CERT Vulnerabili...

IC3: Internet Crime Up in 2010

Internet crime is on the rise again according to a report recently released by The Internet Crime Complaint Center IC3. The organization said last week that it received the second-highest number of complaints in its decade long history in 2010. Released on February 24, the 2010 Internet Crime...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via 1 a delivery address and possibly 2 a PIN...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-1104

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-1105

Multiple cross-site scripting XSS vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via 1 a delivery address and possibly 2 a PIN...

CVE-2011-1105

Multiple cross-site scripting XSS vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via 1 a delivery address and possibly 2 a PIN...

CVE-2011-1104

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

Microsoft SQL Server - Payload Execution (via SQL Injection) (Metasploit)

$Id: mssqlpayloadsqli.rb 11730 2011-02-08 23:31:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...