Mail.ru: VERY DANGEROUS XSS STORED inside emails

Hi guys, This bug is very dangerous you should fix it as fast as you can To reproduce: Attach xss.eml file to a message and send it when a user open the message the javascript will be executed and xss alert box will popup this bug affect tel.mail.ru , m.mail.ru and light.mail.ru but i couldn't...

Threat Outbreak Alert RuleID19830: Email Messages Distributing Malicious Software on December 10, 2015

Medium Alert ID: 42465 First Published: 2015 December 3 13:19 GMT Last Updated: 2015 December 11 13:30 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19830...

Threat Outbreak Alert RuleID19637: Email Messages Distributing Malicious Software on November 29, 2015

Medium Alert ID: 42303 First Published: 2015 November 30 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19637 may contain the following files: Name |...

Cisco Email Security Appliance Email Scanner Denial of Service Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an ESA device to become unavailable due to a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text...

Threat Outbreak Alert RuleID18390: Email Messages Distributing Malicious Software on October 1, 2015

Medium Alert ID: 41319 First Published: 2015 October 1 15:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18390 may contain the following files: Name |...

CVE-2015-5590

Stack-based buffer overflow in the pharfixfilepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling...

Threat Outbreak Alert RuleID14745: Email Messages Distributing Malicious Software on April 16, 2015

Medium Alert ID: 38419 First Published: 2015 April 16 19:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14745 may contain the following files: Name | Si...

Code injection

The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance ESA devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343...

Cisco AsyncOS Software Uuencoded Email Filtering Bypass Vulnerability

A vulnerability in the uuencode inspection engine of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass engine protection and deliver a malicious file as an email attachment. The vulnerability is due to improper implementation of the log...

Threat Outbreak Alert RuleID13394: Email Messages Distributing Malicious Software on February 3, 2015

Medium Alert ID: 37333 First Published: 2015 February 3 16:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13394 may contain the following files: Name |...

Atmail-Email-Server-6.4

By sending an email to a user with the Atmail administrative interface open, we can call a remote JavaScript file that will initiate the installation of a specially crafted plugin file via CSRF, enabling remote code execution on the Atmail server. import smtplib, urllib2, sys def sendMaildstemail...

Threat Outbreak Alert RuleID8337: Email Messages Distributing Malicious Software on December 23, 2014

Medium Alert ID: 35450 First Published: 2014 August 27 18:11 GMT Last Updated: 2014 December 24 12:54 GMT Version: 33 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID8337K...

After Takedown, GameOver Zeus Banking Trojan Returns Again

A month after the FBI and Europol took down the GameOver Zeus botnet by seizing servers and disrupting the botnet’s operation, security researchers have unearthed a new variant of malware based explicitly on the same Gameover ZeuS that compromised users’ computers and collectively formed a massiv...

SCT Campus Pipeline 1.0/2.x/3.x Email Attachment Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10154/info It has been reported that Campus Pipeline is prone to a remote email attachment script injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied HTML and scri...

ILIAS 4.4.1 - Multiple Vulnerabilities

No description provided by source. ============================================================== Title ...| Multiple vulnerabilities in ILIAS Version .| ilias-4.4.1.zip Date ....| 21.02.2014 Found ...| HauntIT Blog Home ....| www.ilias.de...

MDaemon 8.0 Content Filter Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14400/info MDaemon server is prone to a directory traversal vulnerability due to improper sanitization of user input. Failure to sanitize the filename and path may result in compromise of the file system outside of the...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0215-1)

The Adobe Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue. This vulnerability CVE-2011-0609 could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the wild...

Please make sure you have offline backups

This ransomware has hit not only personal computers, but also organizations, including a town in New Hampshire. This particular attack was carried out when an employee opened a seemingly legitimate email attachment, once again reminding us of the ever-present danger of social engineering...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 28, 2014

Medium Alert ID: 34394 First Published: 2014 May 28 16:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order request for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Email Messages with Malicious Attachment on May 27, 2014

Medium Alert ID: 34370 First Published: 2014 May 27 19:20 GMT Last Updated: 2014 May 29 12:59 GMT Version: 2 Summary Cisco Security has detected significant activity related to German-language spam email messages that contain an attachment for the recipient. The email message attempts to convince...