CVE-2015-4184

The anti-spam scanner on Cisco Email Security Appliance ESA devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a malformed DNS SPF record, aka Bug IDs CSCuu35853 and CSCuu37733...

CVE-2015-4184

The anti-spam scanner on Cisco Email Security Appliance ESA devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a malformed DNS SPF record, aka Bug IDs CSCuu35853 and CSCuu37733...

CVE-2015-4184

Cisco Email Security Appliance (ESA) AsyncOS contains an anti-spam scanner vulnerability caused by improper handling of a crafted DNS SPF TXT record, allowing unauthenticated remote bypass of anti-spam restrictions. Affected ESA versions include 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074. Exploitatio...

Cisco Email Security Appliance Anti-Spam Scanner Bypass Vulnerability

A vulnerability in the anti-spam scanner of the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the anti-spam functionality of the ESA. The vulnerability is due to improper handling of a malformed packet in the anti-spam scanner. An attacker could...

Cisco Email Security Appliance Anti-Spam Scanner Bypass Vulnerability

A vulnerability in the anti-spam scanner of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the anti-spam functionality of the ESA. The vulnerability is due to improper error handling of a malformed packet in the anti-spam scanner. An...

Threat Outbreak Alert RuleID15783: Email Messages Distributing Malicious Software on June 8, 2015

Medium Alert ID: 39246 First Published: 2015 June 8 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15783 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID15757: Email Messages Distributing Malicious Software on June 7, 2015

Medium Alert ID: 39236 First Published: 2015 June 8 17:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15757 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID15789: Email Messages Distributing Malicious Software on June 8, 2015

Medium Alert ID: 39247 First Published: 2015 June 8 16:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15789 may contain the following files: Name | Size...

Phishers Going the Long Way Round to Avoid Filtering Systems

Any human with an email address likely has gotten thousands of spam messages that look like delivery notifications, invoices, or other alleged communications from shipping companies such as UPS or DHL. They typically contain malicious attachments with exploits for a browser or plug-in...

金蝶某处配置不当可导致内部敏感信息泄露

简要描述： rt审核帮忙打一下码谢谢 详细说明： 问题出现在：https://github.com/Kevin2030/financemonitor/blob/9c4ffc8dd773ee072648de3a2e5d7b8afabf638a/src/main/resources/monitor.properties mail.from==?UTF-8?B?6YeR6J225LqS6IGU572R6YeR6J6N?= mail.smtp.host=kdmail.kingdee.com mail.smtp.auth=true mail.debug=false...

Sendio ESP 'jsessionid' Information Disclosure Vulnerability

Sendio ESP Email Security Platform is a network appliance that provides anti-spam and anti-virus solutions for organizations from Sendio, USA. A security vulnerability exists in Sendio ESP versions prior to 7.2.4. Due to the presence of session identifiers in emails. A remote attacker can exploit...

Threat Outbreak Alert RuleID15634: Email Messages Distributing Malicious Software on June 1, 2015

Medium Alert ID: 39144 First Published: 2015 June 1 15:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15634 may contain the following files: Name | Size...

Facebook Adds PGP Encryption Feature to Email

Facebook announced early Monday that the social network is in the process of adopting OpenPGP encryption and that it will give privacy conscious users the ability to post their public keys on their profile. The feature, which is gradually rolling out to users today, should better lock down messag...

Threat Outbreak Alert RuleID15530: Email Messages Distributing Malicious Software on May 27, 2015

Medium Alert ID: 39034 First Published: 2015 May 27 13:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15530 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID15238: Email Messages Distributing Malicious Software on May 26, 2015

Medium Alert ID: 38993 First Published: 2015 May 26 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15238 may contain the following files: Name | Size...

Sendio ESP - Information Disclosure

Advisory Information Title: Sendio ESP Information Disclosure Vulnerability Advisory ID: CORE-2015-0010 Advisory URL: http://www.coresecurity.com/advisories/sendio-esp-information-disclosure-vulnerability Date published: 2015-05-22 Date of last update: 2015-05-22 Vendors contacted: Sendio...

Sendio Email Security Platform Vulnerability Patch

Email security vendor Sendio has patched a pair of remotely exploitable security bypass vulnerabilities in its Sendio ESP, or Email Security Platform, product. Researchers at Core Security Technologies reported the vulnerabilities March 26 to Sendio, along with a proof of concept that triggers th...

Sendio ESP Information Disclosure Vulnerability

1. Advisory Information Title: Sendio ESP Information Disclosure Vulnerability Advisory ID: CORE-2015-0010 Advisory URL: Date published: 2015-05-22 Date of last update: 2015-05-22 Vendors contacted: Sendio Release mode: Coordinated release 2. Vulnerability Information Class: OWASP Top Ten 2013...

Multiple Cross-Site Scripting Vulnerabilities in Cisco Email Security Appliance

Cisco Email Security Appliance is a set of e-mail security appliances from Cisco Cisco. The appliance provides spam protection, email encryption, data loss prevention and other features. Multiple cross-site scripting vulnerabilities exist in the Cisco Email Security Appliance, allowing remote...

CVE-2015-0734

Multiple cross-site scripting XSS vulnerabilities on the Cisco Email Security Appliance ESA 8.5.6-106 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCut87743...