CVE-2013-2114

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

Unrestricted file upload

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

Threat Outbreak Alert: Fake Accounting Form Email Messages on November 15, 2013

Medium Alert ID: 31791 First Published: 2013 November 16 03:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an accounting form for the recipient. The text in the email message attempts to convince the recipient to ope...

CVE-2013-2114

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

CVE-2013-2114

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

Threat Outbreak Alert: Email Messages with Malicious Attachments on November 14, 2013

Medium Alert ID: 31768 First Published: 2013 November 14 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to persuade the recipient to open the attachment ...

OSX Screen Capture

This module takes screenshots of target desktop and automatically downloads them. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OSX Screen Capture', 'Description' = %q This module takes...

[SECURITY] [DSA 2796-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...

Threat Outbreak Alert: Fake Regulation Document Delivery Email Messages on November 6, 2013

Medium Alert ID: 31667 First Published: 2013 November 7 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a regulations document for the recipient. The text in the email message attempts to convince the recipient to...

NetGear router through command injection to obtain ROOT privileges[EXP]-vulnerability warning-the black bar safety net

! NetGear router through command injection to obtain ROOT privileges\EXP\ - ScriptALeRT - Minghacker /Article/UploadPic/2013-11/201311614443412.jpg Abroad a large cattle study found that the NetGear router wndr3700v4 firmware authenticate the existence of the vulnerability. Once the Web interface...

Threat Outbreak Alert: Fake Account Payment Notice Email Messages on November 3, 2013

Medium Alert ID: 31609 First Published: 2013 November 4 20:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince the recipient to ope...

Double Executable File Extension Arbitrary File Execution

Certain malicious executable files can be hidden using double extension filenames...

Threat Outbreak Alert: Fake Fax Delivery Notification Email Messages on October 30, 2013

Medium Alert ID: 31555 First Published: 2013 October 30 19:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax notification for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Wire Transfer Notification Email Messages on October 29, 2013

Medium Alert ID: 31533 First Published: 2013 October 29 19:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a wire transfer notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Purchase Order Attachment Email Messages on October 29, 2013

Medium Alert ID: 31531 First Published: 2013 October 29 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a copy of a purchase order for the recipient. The text in the email message attempts to convince the recipient...

PT-2013-6307

Name of the Vulnerable Software and Affected Versions http.server.CGIHTTPRequestHandler affected versions not specified Description The issue is related to an error in separating the path and filename of the CGI script to run, allowing the execution of arbitrary executables in the directory under...

CVE-2013-4465

The CVE-2013-4465 issue affects Simple Machines Forum (SMF) prior to versions 2.0.6 and 2.1, where the avatar upload functionality permits an unrestricted file upload. The root cause is that an uploaded file with an executable extension can be stored and later retrieved via a direct request to a ...

Threat Outbreak Alert: Email Messages with Malicious Attachments on December 24, 2013

Medium Alert ID: 31483 First Published: 2013 October 24 17:34 GMT Last Updated: 2013 December 24 16:39 GMT Version: 14 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message...

ARRIS DG860A - NVRAM Backup Password Disclosure

ARRIS DG860A - NVRAM Backup Password Disclosure ! /usr/bin/env ruby ARRIS DG860A NVRAM Backup 'Compressor/Decompressor', it really does xor? Gleaned from scmix executable in firmware dump. Backup file is world readable without authentication and contains password information in plain text...

Threat Outbreak Alert: Fake Bank Swift Payment Notification Email Messages on October 8, 2013

Medium Alert ID: 31173 First Published: 2013 October 9 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a bank payment information for the recipient. The text in the email message attempts to convince the recipient...