Threat Outbreak Alert: Fake Purchase Order Confirmation Attachment Email Messages on December 17, 2013

Medium Alert ID: 29118 First Published: 2013 April 29 19:04 GMT Last Updated: 2013 December 18 13:44 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order confirmation attachment for the recipient. The text in...

Websense Email Security 信息泄露漏洞(CVE-2012-4605)

BUGTRAQ ID: 59313 CVECAN ID: CVE-2012-4605 Websense Email Security是综合的邮件安全软件，对邮件和Web 2.0的混合威胁提供防护。 Websense Email Security 6.1-7.3版本内的SMTP组件的默认配置，在"SurfControl plc\SuperScout Email Filter\SMTP"注册表项中启用了弱SSL密码，远程攻击者通过嗅探网络并对加密会话数据进行暴力攻击，可获取敏感信息。 0 Websense Web Security 7.2 Websense Web Security 7.1...

Spammers Finding Favor with Google Translate

Some spammers, looking to launder the dirty links they email you, are relying on the positive reputation of Google Translate to redirect victims to rogue websites. Researchers at Barracuda Labs who maintain the company’s spam honeypots have spotted a rash of illicit messages trying to beat...

Cyber security scenario according to WebSense

It's time of stocktaking, principal security firm are proposing their analysis to synthesize actual situation on cyber security, 2012 is widely considered a year when the malware has increased significantly thanks to the contributions of various actors that we will analyze shortly. WebSense has...

Threat Outbreak Alert: Fake Photo Attachment Email Messages on February 24, 2013

Medium Alert ID: 28366 First Published: 2013 February 26 00:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim to contain a photo attachment for the recipient. The text in the e-mail message attempts to convince the recipient to...

Phishing Attack Leads to Phony Google, Compromised Red Cross Sites

An apparent phishing scam involving fake Google and Red Cross websites is making the rounds according to security firm Sophos, which intercepted a spammy e-mail this morning that tries to send unsuspecting users to less than genuine versions of those sites. An email with the subject line, “Re:...

E-Mail Security Virtual Appliance 2.0.5 RCE

Remote code execution vulnerability in E-Mail Security Virtual Appliance learn-msg.cgi Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Threat Outbreak Alert: Fake Personal Video Sharing Email Messages on October 9, 2013

Low Alert ID: 27713 First Published: 2013 January 2 15:05 GMT Last Updated: 2013 October 9 18:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a video attachment for the recipient. The text in the email message attempt...

Threat Outbreak Alert: Fake Personal Picture Sharing Email Messages on September 4, 2013

Low Alert ID: 27717 First Published: 2013 January 2 15:05 GMT Last Updated: 2013 September 5 14:46 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian language spam email messages that claim to contain personal pictures for the recipient. The text in the ema...

SonicWall Email Security crossite scripting

Crossite scripting in Web administration interface...

SonicWall Email Security 7.4.1.x - Persistent Web Vulnerability

Title: ====== SonicWall Email Security 7.4.1.x - Persistent Web Vulnerability Date: ===== 2012-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=768 VL-ID: ===== 768 Common Vulnerability Scoring System: ==================================== 4.1 Introduction:...

SonicWall Email Security 7.4.1.x Cross Site Scripting

Title: ====== SonicWall Email Security 7.4.1.x - Persistent Web Vulnerability Date: ===== 2012-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=768 VL-ID: ===== 768 Common Vulnerability Scoring System: ==================================== 4.1 Introduction:...

SonicWall Email Security 7.4.1.x - Persistent Vulnerability

Document Title: =============== SonicWall Email Security 7.4.1.x - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=768 Release Date: ============= 2012-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

Holiday deals can really be hiding hacker surprises

It is that time of year which everybody loves. It is the holiday season and you will start to see a lot more people express good attitudes and wish everyone else a happy new year. As a matter of fact it may be hard to think that with all of this much goodwill in the air there is someone out there...

Microsoft Word RTF File 'listoverridecount'远程代码执行漏洞（MS12-079)

BUGTRAQ ID: 56834 CVECAN ID: CVE-2012-2539 Microsoft Word 属于办公软件是微软公司的一个文字处理器应用程序。 Microsoft Word 在解析listoverridecount相关的RTF（Rich Text Format）数据时存在漏洞。通过诱使用户浏览恶意网站或在e-mail邮件中打开特定格式的rtf文件，未经身份验证的远程攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office 2003 Professional Edition Microsoft Office Word Viewer...

Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download

======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams Vendor: Symantec Vendor Reference: Systems Affected: Symantec Messaging Gateway 9.5.3-3 Risk:...

NGS000266 Technical Advisory: Symantec Messaging Gateway Arbitrary file download is possible with a crafted URL

======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams [email protected] Vendor: Symantec Vendor Reference: Systems Affected: Symantec...

NGS000268 Technical Advisory: Symantec Messaging Gateway - Out-of-band stored-XSS delivered by email

======= Summary ======= Name: Symantec Messaging Gateway - Out-of-band stored-XSS delivered by email Release Date: 30 November 2012 Reference: NGS00268 Discoverer: Ben Williams [email protected] Vendor: Symantec Vendor Reference: Systems Affected: Symantec Messaging Gateway 9.5.3-3 Risk:...

Symantec Messaging Gateway 9.5.3-3 Arbitrary File Download

======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams Vendor: Symantec Vendor Reference: Systems Affected: Symantec Messaging Gateway 9.5.3-3 Risk:...

Barracuda EMail Security - Filter Bypass Vulnerability

Document Title: =============== Barracuda EMail Security - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=579 Download: http://www.vulnerability-lab.com/resources/videos/744.wmv View: http://www.youtube.com/watch?v=r9cwfFta5OY Release Date:...