NGS00153 Patch Notification: McAfee Email and Web Security Appliance v5.6 - Reflective XSS allowing an attacker to gain session tokens

High Risk Vulnerability in McAfee Email and Web Security Appliance 29 March 2012 Ben Williams of NGS Secure has discovered a high risk vulnerability in the McAfee Email and Web Security Appliance Impact: Reflective XSS allowing an attacker to gain session tokens Versions affected: All versions...

McAfee Email and Web Security Appliance multiple security vulnerabilities

XSS, authentication bypass, privilege escalation, information leakage, directory traversal...

Anonymous Hack Syrian President's Emails with Password "12345"

Anonymous Hack Syrian President's Emails with Password "12345" Hundreds of emails from Syrian President Bashar Assad's office were leaked on Monday after an attack by the hacker group Anonymous. The target was the mail server of the Syrian Ministry of Presidential Affairs and about 78 inboxes of...

[Suspected Spam] Barracuda Spam/Virus WAF 600 - Multiple Web Vulnerabilities

Title: ====== Barracuda Spam/Virus WAF 600 - Multiple Web Vulnerabilities Date: ===== 2012-01-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=28 VL-ID: ===== 28 Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. The Barracuda...

Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability

Cisco AsyncOS Software for Cisco Web Security Appliance WSA, Cisco Email Security Appliance ESA, and Cisco Content Security Management Appliance SMA contain a vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code with elevated privileges. Cisco has released...

SpamTitan Application v5.08x - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: ====== SpamTitan Application v5.08x - SQL Injection Vulnerability Introduction: ============= SpamTitan Anti Spam is a complete software solution to email security offering protection from Spam, Viruses, Trojans, Phishing and unwanted...

Barracuda Spam/Virus WAF 600 - Multiple Vulnerabilities

Document Title: =============== Barracuda Spam/Virus WAF 600 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=28 Release Date: ============= 2012-01-18 Vulnerability Laboratory ID VL-ID: ==================================== 28...

SonicWall AntiSpam And Email Security 7.x XSS / Redirection

Title: ====== SonicWall AntiSpam & EMail Security v7.x - Multiple Web Vulnerabilities Date: ===== 2012-01-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=58 VL-ID: ===== 58 Introduction: ============= Spam-, Phishing- und mit Viren infizierte Nachrichten verursachen ...

SpamTitan 5.08 - Multiple Vulnerabilities

SpamTitan 5.08 - Multiple Vulnerabilities Title: ====== SpamTitan v5.08 - Multiple Web Vulnerabilities Date: ===== 2011-12-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=91 VL-ID: ===== 91 Introduction: ============= SpamTitan Anti Spam is a complete software soluti...

SpamTitan 5.08 Cross Site Scripting

Title: ====== SpamTitan v5.08 - Multiple Web Vulnerabilities Date: ===== 2011-12-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=91 VL-ID: ===== 91 Introduction: ============= SpamTitan Anti Spam is a complete software solution to email security offering protection...

SpamTitan 5.08 - Multiple Vulnerabilities

Title: ====== SpamTitan v5.08 - Multiple Web Vulnerabilities Date: ===== 2011-12-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=91 VL-ID: ===== 91 Introduction: ============= SpamTitan Anti Spam is a complete software solution to email security offering protection...

SpamTitan v5.08 Multiple Vulnerabilities

Exploit for php platform in category web applications Introduction: ============= SpamTitan Anti Spam is a complete software solution to email security offering protection from Spam, Viruses, Trojans, Phishing and unwanted content. Feature Set Two Anti Virus engines including ClamAV and Kaspersky...

SpamTitan v5.08 - Multiple Web Vulnerabilities

Document Title: =============== SpamTitan v5.08 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=91 Release Date: ============= 2011-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 91 Product &...

Beware - Gaddafi malware on Internet

Beware - Gaddafi malware on Internet As is not unusual when big news breaks, malware authors try to take advantage of the situation.A global computer virus that hides in an email about Gaddafi's death has been detected by Norman. The malware was caught in its worldwide network of spam traps. The...

Dominant Creature BBG/RPG Browser Game Cross Site Scripting

=================================================================================== Dominant Creature BBG/RPG browser game XSS vulnerabilities =================================================================================== Exploit Title: Dominant Creature BBG/RPG browser game XSS...

Beware of New Twitter Spam - "Bad blog going around about you"

Beware of New Twitter Spam - "Bad blog going around about you" This is not first time I have received spam messages from Twitter. Just now I checked my twitter account and what I see is two Direct Message saying "Bad blog going around about you, have you read it yet?" followed by a URL shortened...

Barracuda Backup v2.0 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Backup v2.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201109-650 Release Date: ============= 2011-10-03 Vulnerability Laboratory ID VL-ID:...

Intelligence and National Security Alliance (INSA) hacked

Intelligence and National Security Alliance INSA hacked On Wednesday, 48 hours after releasing a policy paper on cybersecurity, the top trade association for intelligence contractors got a first-hand lesson on the subject: they discovered that their website was hacked. Cryptome, a site affiliated...

Potential Hurricane Irene Phishing Scams

In the past, US-CERT has received reports of phishing scams and malware campaigns related to topics that are of high-interest to the U.S. Government or news media, such as Hurricane Irene. Users' systems have been compromised by receiving and accessing phishing emails with subject lines that seem...

CentOS Update for seamonkey CESA-2009:1134 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...