4968 matches found
CVE-2013-7149
A critical SQL injection vulnerability exists in the Revive Adserver (versions prior to 3.0.2 ) and OpenX Source (versions 2.8.11 and earlier, including potentially phpAdsNew 2.0.x ). The root cause is that the www/delivery/axmlrpc.php script (XML-RPC delivery invocation) fails to properly saniti...
VulnCheck KEV: CVE-2013-7149
SQL injection vulnerability in www/delivery/axmlrpc.php aka the XML-RPC delivery invocation script in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method...
Cutwail Spam Botnet Feels Effect of Blackhole Takedown
The arrest of alleged hacker Paunch and the subsequent dismantling of the Blackhole Exploit Kit operation has cybercrime groups scrambling to find another automated means of delivering exploits. In the meantime, some are settling for old-school tactics that include infected email attachments and ...
Breach incident
News Breach incident Share December 11th, 2013 At Opera, we strive to be open, and we want to continue this tradition, by sharing with you what happens here. High profile companies like Opera are under continuous attack by hackers trying to break into their systems, and we want to tell you about ...
Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on December 9, 2013
Medium Alert ID: 32095 First Published: 2013 December 9 20:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery failure notification for the recipient. The text in the email message attempts to convince...
Threat Outbreak Alert: Fake Bank Document Delivery Email Messages on December 4, 2013
Medium Alert ID: 32006 First Published: 2013 December 4 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank document delivery notification for the recipient. The text in the email message...
Preparing for Managed Security Services
Wade Woolwine Presents at MIRcon® 2013 As a complement to my MIRcon® 2013 presentation titled "Getting the Best Bang for the Buck with Managed Security Providers" and to address some questions I received from the audience, I have prepared a quick summary of my presentation. Many businesses consid...
Threat Outbreak Alert: Fake Invoice Delivery Email Messages on November 27, 2013
Medium Alert ID: 31922 First Published: 2013 November 27 15:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the recipie...
Privacy, Human Rights Groups Form New Anti-Surveillance Coalition
A large group of privacy and digital rights organizations has put together a new effort to urge politicians to curtail the mass surveillance operations that have been exposed in the last few months. The new coalition has developed a set of 13 principles for governments to follow in their...
CVE-2013-4354
The API before 2.1 in OpenStack Image Registry and Delivery Service Glance makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image...
PT-2013-4968
Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions prior to 2.1 Description The issue allows local users to more easily inject images into arbitrary tenants by adding the tenant as a member of the image. This is due to a problem in...
CVE-2013-4354: Improper Input Validation
The API before 2.1 in OpenStack Image Registry and Delivery Service Glance makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image...
Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on May 6, 2015
Medium Alert ID: 31863 First Published: 2013 November 21 20:35 GMT Last Updated: 2015 May 7 12:18 GMT Version: 80 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The te...
Threat Outbreak Alert: Fake Package Delivery Failure Notice Email Messages on November 20, 2013
Medium Alert ID: 31832 First Published: 2013 November 20 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim to contain a package delivery failure notification. The text in the e-mail message instructs the recipient to open the...
Threat Outbreak Alert: Fake Package Delivery Failure Email Messages on November 18, 2013
Medium Alert ID: 31785 First Published: 2013 November 15 21:26 GMT Last Updated: 2013 November 18 22:42 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed package delivery notification for the...
Threat Outbreak Alert: Fake Package Delivery Information Email Messages on November 7, 2013
Medium Alert ID: 31684 First Published: 2013 November 8 17:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain package delivery information for the recipient. The text in the email message attempts to convince the recipie...
Threat Outbreak Alert: Fake Fax Delivery Email Messages on November 7, 2013
Medium Alert ID: 31674 First Published: 2013 November 7 19:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax delivery notification for the recipient. The text in the email message attempts to convince the recipien...
Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on November 5, 2013
Medium Alert ID: 31637 First Published: 2013 November 5 19:25 GMT Last Updated: 2013 November 6 15:52 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The...
Threat Outbreak Alert: Fake Fax Delivery Notification Email Messages on October 30, 2013
Medium Alert ID: 31555 First Published: 2013 October 30 19:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax notification for the recipient. The text in the email message attempts to convince the recipient to open...
