Threat Outbreak Alert RuleID23886: Email Messages Distributing Malicious Software on July 19, 2016

Medium Alert ID: 47136 First Published: 2016 July 19 20:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23886 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID23877: Email Messages Distributing Malicious Software on July 18, 2016

Medium Alert ID: 47124 First Published: 2016 July 18 19:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23877 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID23742: Email Messages Distributing Malicious Software on July 5, 2016

Medium Alert ID: 46991 First Published: 2016 July 5 16:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23742 may contain the following files: Name | Size...

Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow (PoC)

Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow PoC Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=823 A PowerPoint PPT file is a complicated OLE compound document comprising of a series of streams. The format is described by Microsoft in...

Symantec Decomposer Engine Multiple Parsing Vulnerabilities

SUMMARY Symantec is aware of buffer overflow and memory corruption findings in the AntiVirus Decomposer engine used in various configurations by multiple Symantec products. FAQ on Impact to Symantec Products: AFFECTED PRODUCTS Affected Enterprise Products Product | Version | Solutions ---|---|---...

Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability

A vulnerability in the anti-spam filter of the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass anti-spam filtering functionality on an affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a reference...

CVE-2016-1438

Cisco AsyncOS 9.7.0-125 on Email Security Appliance ESA devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210...

CVE-2016-1438

Cisco AsyncOS 9.7.0-125 on Email Security Appliance ESA devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210...

Design/Logic Flaw

Cisco AsyncOS 9.7.0-125 on Email Security Appliance ESA devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210...

Cisco Email Security Appliance AsyncOS Security Bypass Vulnerability

Cisco AsyncOS on Email Security Appliance ESA is a set of operating systems running in the Email Security Appliance ESA from Cisco USA. A security bypass vulnerability exists in Cisco AsyncOS version 9.7.0-125 on Cisco ESA appliances. A remote attacker could exploit this vulnerability to bypass...

CVE-2016-1438

CVE-2016-1438 affects Cisco AsyncOS on Email Security Appliance (ESA) 9.7.0-125. It exploits improper handling of content in .zip files to bypass the anti-spam filtering, enabling remote attackers to bypass filtering via a crafted ZIP payload. Exploitation details in public sources align with a b...

CVE-2016-1438

Cisco AsyncOS 9.7.0-125 on Email Security Appliance ESA devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210...

Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability

A vulnerability in the Message Filter and Content Filter of the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system. The vulnerability is due to improper handling of content in .zip files. An attacker could...

New Relic: Html injection in monitor name textbox

Hello guys, Details: Encoded image tag via HTML-Encoding is executed in Monitot failed email Payload: Plain text: Encoded: PoC: F100855 Remediation: Before sending an email - make sanitization / filtering / encoding of whole special characters. If you have any question, plz let me know Thanks, St...

email.stepstone.com XSS vulnerability

Vulnerable URL:...

Threat Outbreak Alert RuleID23465: Email Messages Distributing Malicious Software on June 18, 2016

Medium Alert ID: 46728 First Published: 2016 June 17 14:43 GMT Last Updated: 2016 June 20 11:49 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23465 and...

CVE-2016-1405

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

DEBIAN-CVE-2016-1405

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

CVE-2016-1405

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

Design/Logic Flaw

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...