CVE-2017-6661

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an...

Cisco Email Security and Content Security Management Appliance Cross-Site Scripting Vulnerability

The Cisco Email Security Appliance is a suite of email security appliances.Cisco Content Security Management is a unified email and Web security management solution. A cross-site scripting vulnerability in the Cisco Email Security and Content Security Management Appliance allows remote attackers ...

Cisco Email Security Appliance Message Tracking Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. SPDX-FileCopyrightText: 2017 Greenbo...

Cisco Email Security Appliance Attachment Filter Bypass Vulnerability

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

Cisco Email Security Appliance Attachment Filter Bypass Vulnerability

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper input validation of an email with an attachment and...

Cisco Email Security and Content Security Management Appliance Message Tracking Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an...

FBI Releases Article on Protecting Business Email Systems

The Federal Bureau of Investigation FBI has released an article on Building a Digital Defense with an Email Fortress. FBI warns that scammers commonly target business email accounts with phishing and social engineering schemes. Strategies for preventing email compromises include avoiding the use ...

Threat Outbreak Alert RuleID29301: Email Messages Distributing Malicious Software on May 26, 2017

Medium Alert ID: 53980 First Published: 2017 May 26 13:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29301 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29182: Email Messages Distributing Malicious Software on May 19, 2017

Medium Alert ID: 53899 First Published: 2017 May 20 03:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29182 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29141: Email Messages Distributing Malicious Software on May 16, 2017

Medium Alert ID: 53851 First Published: 2017 May 16 14:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29141 may contain the following files: Name | Size...

Discourse: Any authenticated user can download full list of users, including email

The ExportCsvController allows users to export different types of entities, if one has guardian access: https://github.com/discourse/discourse/blob/master/app/controllers/exportcsvcontroller.rbL6 However, the guardian check only checks that the entity type is not "admin":...

Threat Outbreak Alert RuleID29094: Email Messages Distributing Malicious Software on May 12, 2017

Medium Alert ID: 53816 First Published: 2017 May 13 02:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29094 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29104: Email Messages Distributing Malicious Software on May 12, 2017

Medium Alert ID: 53819 First Published: 2017 May 12 14:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29104 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29016: Email Messages Distributing Malicious Software on May 5, 2017

Medium Alert ID: 53723 First Published: 2017 May 5 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29016 may contain the following files: Name | Size ...

Google Docs Phishing Campaign

US-CERT is aware of a phishing campaign that affected Google Docs users. The campaign used spoofed email addresses to target users with emails purporting to share a document for collaboration. Once the targeted users accepted invitations, they were encouraged to allow the phishing program access ...

Threat Outbreak Alert RuleID28914: Email Messages Distributing Malicious Software on April 27, 2017

Medium Alert ID: 53593 First Published: 2017 April 27 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28914 may contain the following files: Name | Si...

A Storm’s a Coming: How businesses can defend against threat actor groups like Pawn Storm

Pawn Storm aka Sednit5, Fancy Bear, APT28, Sofacy and STRONTIUM8 might sound like Instagram accounts, top-secret spy programs or recently passed legislation, but in reality they are all different names for the same successful cyber espionage group or threat actor group. These actors often use...

Weblate: [hosted.weblate.org]Account Takeover

Hello Team, Steps to Reproduce: Go to Login Page Reset Your Password by Clicking Reset it. Put your email and answer the captcha. Go to your email and click your reset Link. You dont need to Change Your Password because you'll be logged in. Scenario Victim forgot to logout his/her Email Account o...

CVE-2016-4842

CVE-2016-4842 affects Cybozu Mailwise prior to 5.4.0. A vulnerability in the mail view page can disclose that a user read a specific email when a specially crafted message is opened, enabling information disclosure from remote attackers. Affected versions are 5.0.0 through 5.3.2. The root cause r...

Threat Outbreak Alert RuleID28753: Email Messages Distributing Malicious Software on April 14, 2017

Medium Alert ID: 53462 First Published: 2017 April 14 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28753 may contain the following files: Name | Si...