CVE-2016-2565

The connected records corroborate that Samsung SecEmailSync on the Galaxy S6 (Samsung SM-G920F, build G920FXXU2COH2) contains a vulnerability class in the SecEmailSync plugin. CNVD entries describe two concrete issues: (1) CVE-2016-2565/2566 family in SecEmailSync, with an SQL injection vector (S...

Threat Outbreak Alert RuleID28658: Email Messages Distributing Malicious Software on April 10, 2017

Medium Alert ID: 53388 First Published: 2017 April 10 19:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28658 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28670: Email Messages Distributing Malicious Software on April 7, 2017

Medium Alert ID: 53369 First Published: 2017 April 7 12:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28670 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28668: Email Messages Distributing Malicious Software on April 7, 2017

Medium Alert ID: 53368 First Published: 2017 April 7 12:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28668 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28646: Email Messages Distributing Malicious Software on April 6, 2017

Medium Alert ID: 53363 First Published: 2017 April 6 18:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28646 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28545: Email Messages Distributing Malicious Software on April 4, 2017

Medium Alert ID: 53324 First Published: 2017 April 4 16:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28545 may contain the following files: Name | Siz...

CVE-2017-7414

In Horde_Crypt (PHP Horde) prior to 2.7.6, used in Horde Groupware Webmail Edition 5.x–5.2.17, a crafted PGP-signed email can trigger OS command injection when the recipient views or previews the message. The vulnerability arises when PGP features are enabled and “Should PGP signed messages be au...

Threat Outbreak Alert RuleID28592: Email Messages Distributing Malicious Software on April 3, 2017

Medium Alert ID: 53302 First Published: 2017 April 3 17:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28592 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28569: Email Messages Distributing Malicious Software on March 30, 2017

Medium Alert ID: 53241 First Published: 2017 March 30 18:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28569 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID27819: Email Messages Distributing Malicious Software on March 27, 2017

Medium Alert ID: 53162 First Published: 2017 March 27 12:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27819 may contain the following files: Name | Si...

CVE-2017-6955

The CVE-2017-6955 vulnerability affects the WordPress plugin Invite Anyone, specifically by-email/by-email.php in versions prior to 1.3.15. An authenticated or sufficient-privileges user can modify the subject and body of the invitation email, which should be immutable, facilitating social engine...

Threat Outbreak Alert RuleID28326: Email Messages Distributing Malicious Software on March 15, 2017

Medium Alert ID: 53038 First Published: 2017 March 15 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28326 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28294: Email Messages Distributing Malicious Software on March 15, 2017

Medium Alert ID: 53037 First Published: 2017 March 15 15:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28294 may contain the following files: Name | Si...

US Charges Two Russian Spies & Two Hackers For Hacking 500 Million Yahoo Accounts

The 2014 Yahoo hack disclosed late last year that compromised over 500 million Yahoo user accounts was believed to be carried out by a state-sponsored hacking group. Now, two Russian intelligence officers and two criminal hackers have been charged by the US government in connection with the 2014...

Threat Outbreak Alert RuleID28088: Email Messages Distributing Malicious Software on February 27, 2017

Medium Alert ID: 52788 First Published: 2017 February 28 13:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28088 may contain the following files: Name |...

CVE-2017-3827

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: This...

CVE-2017-3827

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: This...

CVE-2017-3827

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: This...

CVE-2017-3827

CVE-2017-3827 affects Cisco AsyncOS MIME scanner in Cisco ESA/WSA. A remote, unauthenticated attacker can bypass configured user filters due to improper handling of malformed MIME headers, enabling bypass of filter protections on affected devices. Affected releases include Cisco ESA/WSA versions ...

Threat Outbreak Alert RuleID27682: Email Messages Distributing Malicious Software on February 20, 2017

Medium Alert ID: 52692 First Published: 2017 February 21 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27682 may contain the following files: Name |...