PT-2013-5734

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite and Server versions prior to 6.22.0 rev16 Open-Xchange AppSuite and Server versions 6.22.1 prior to rev19 Open-Xchange AppSuite and Server versions 7.0.1 prior to rev7 Open-Xchange AppSuite and Server versions 7.0.2 prior...

CVE-2013-5698: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allows remote authenticated users to inject arbitrary web script or HTML via a delivery=view action, aka Bug ID 26373, ...

Threat Outbreak Alert: Fake Package Delivery Notification Email Messages on September 3, 2013

Medium Alert ID: 30645 First Published: 2013 September 4 18:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery notification from UPS for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Package Delivery Notification Email Messages on September 2, 2013

Medium Alert ID: 30622 First Published: 2013 September 3 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a package delivery notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on August 30, 2013

Medium Alert ID: 30612 First Published: 2013 August 30 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a delivery failure notification for the recipient. The text in the email message attempts to convince the...

Google - (Pin via Postal Delivery) Information Disclosure

Document Title: =============== Google - Pin via Postal Delivery Information Disclosure References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1046 View: http://www.youtube.com/watch?v=nnAAdX9a3eU Release Date: ============= 2013-08-14 Vulnerability Laboratory ID VL-ID:...

Google - (Pin via Postal Delivery) Information Disclosure

Document Title: =============== Google - Pin via Postal Delivery Information Disclosure References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1046 View: http://www.youtube.com/watch?v=nnAAdX9a3eU Release Date: ============= 2013-08-14 Vulnerability Laboratory ID VL-ID:...

Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products

Multiple Cisco content network and video delivery products contain a vulnerability when they are configured to run in central management mode. This vulnerability could allow an authenticated but unprivileged, remote attacker to execute arbitrary code on the affected system and on the devices...

Powershell Payload Web Delivery Vulnerability

This Metasploit module quickly fires up a web server that serves the payload in powershell. The provided command will start powershell and then download and execute the payload. The IEX command can also be extracted to execute directly from powershell. The main purpose of this module is to quickl...

Powershell Payload Web Delivery

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Powershell Payload Web Delivery',...

Threat Outbreak Alert: Fake Shipment Delivery Failure Notification Email Messages on July 22, 2013

Medium Alert ID: 30166 First Published: 2013 July 22 16:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipment delivery failure notification from FedEx for the recipient. The text in the email message attempts to...

Script Web Delivery

This module quickly fires up a web server that serves a payload. The module will provide a command to be run on the target machine based on the selected target. The provided command will download and execute a payload using either a specified scripting language interpreter or "squiblydoo" via...

Threat Outbreak Alert: Fake FedEx Parcel Delivery Failure Notification Email Messages on July 10, 2013.

Medium Alert ID: 30033 First Published: 2013 July 11 12:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a FedEx parcel delivery failure notification for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Bank Delivery Notice Email Messages on June 19, 2013

Medium Alert ID: 29737 First Published: 2013 June 20 19:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a proof of deposit notification message for the recipient. The email message instructs the...

Threat Outbreak Alert: Fake Product Delivery Notification Email Messages on June 11, 2013

Medium Alert ID: 29639 First Published: 2013 June 11 18:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a product delivery notification for the recipient. The text in the email message attempts to...

[SET v5.1] The Social-Engineer Toolkit codename “Name of the Doctor”

The Social-Engineer Toolkit SET version 5.1 codename “ Name of the Doctor ” has been released. This version adds a complete rewrite of the MSSQL Bruter as well as a new attack vector utilizing the PSExec functionality within Metasploit. The MSSQL Bruter now incorporates UDP port 1434 quick...

Exim / Dovecot Command Execution

Advisory: Exim with Dovecot: Typical Misconfiguration Leads to Remote Command Execution During a penetration test a typical misconfiguration was found in the way Dovecot is used as a local delivery agent by Exim. A common use case for the Dovecot IMAP and POP3 server is the use of Dovecot as a...

Scheduled automatic dashboard delivery fails

Challenge In certaing scenarios, scheduled dashboard delivery in Veeam ONE Reporter fails and reports the 'Dashboard Capturing Failed' error in the reporting task session log. Cause This issue is usually related to the configured permissions of the Veeam ONE Service account, which makes the...

QlikView Installed

QlikView, a business delivery platform, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65810; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"QlikView Installed";...

Attackers Shifting to Delivering Unknown Malware Via FTP and Web Pages

The bulk of “unknown” malware is being delivered to systems via Web-based attacks, proxies and FTP sessions, according to a study released by Palo Alto Networks this week. The study dubbed “The Modern Malware Review,” found more than 26,000 malware samples, and focuses on what the firm calls...