Threat Outbreak Alert RuleID31357: Email Messages Distributing Malicious Software on November 20, 2017

Medium Alert ID: 55981 First Published: 2017 November 20 16:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31357 may contain the following files: Name |...

Threat Outbreak Alert RuleID31115: Email Messages Distributing Malicious Software on November 15, 2017

Medium Alert ID: 55929 First Published: 2017 November 15 19:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31115 may contain the following files: Name |...

Identity Governance 12.6 Cross Site Scripting Vulnerability

Exploit for windows platform in category web applications Security Notice for CA Identity Governance CA Technologies support is alerting customers to a potential risk with CA Identity Governance. A vulnerability exists that can potentially allow a malicious actor to conduct cross-site scripting...

Threat Outbreak Alert RuleID31295: Email Messages Distributing Malicious Software on November 14, 2017

Medium Alert ID: 55917 First Published: 2017 November 14 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31295 may contain the following files: Name |...

Threat Outbreak Alert RuleID31284: Email Messages Distributing Malicious Software on November 14, 2017

Medium Alert ID: 55909 First Published: 2017 November 14 14:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31284 may contain the following files: Name |...

How to Opt Out of Equifax Revealing Your Salary History

A KrebsOnSecurity series on how easy big-three credit bureau Equifax makes it to get detailed salary history data on tens of millions of Americans apparently inspired a deeper dive on the subject by Fast Company, which examined how this Equifax division has been one of the company's best...

Threat Outbreak Alert RuleID31216: Email Messages Distributing Malicious Software on November 13, 2017

Medium Alert ID: 55886 First Published: 2017 November 13 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31216 may contain the following files: Name |...

Threat Outbreak Alert RuleID31200: Email Messages Distributing Malicious Software on November 8, 2017

Medium Alert ID: 55805 First Published: 2017 November 8 14:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31200 may contain the following files: Name |...

Threat Outbreak Alert RuleID31191: Email Messages Distributing Malicious Software on November 7, 2017

Medium Alert ID: 55793 First Published: 2017 November 7 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31191 may contain the following files: Name |...

Equifax Reopens Salary Lookup Service

Equifax has re-opened a Web site that lets anyone look up the salary history of a large portion of the American workforce using little more than a person's Social Security number and their date of birth. The big-three credit bureau took the site down just hours after I wrote about it on Oct. 8, a...

Threat Outbreak Alert RuleID31165: Email Messages Distributing Malicious Software on November 1, 2017

Medium Alert ID: 55756 First Published: 2017 November 1 16:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31165 may contain the following files: Name |...

computinghistory.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-384987 Description| Value ---|--- Affected Website:| computinghistory.org.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

WordPress user-login-history plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. user-login-history plugin is one of the user login tracking plugin. A cross-site scripting vulnerability exists in...

WordPress User Login History 1.5.2 Cross Site Scripting Vulnerability

WordPress User Login History plugin version 1.5.2 suffers from a cross site scripting vulnerability. Product: User Login History Wordpress Plugin - https://wordpress.org/plugins/user-login-history/ Vendor: Er Faiyaz Alam Tested version: 1.5.2 CVE ID: CVE-2017-15867 CVE description Multiple...

WordPress User Login History 1.5.2 Cross Site Scripting

Product: User Login History Wordpress Plugin - https://wordpress.org/plugins/user-login-history/ Vendor: Er Faiyaz Alam Tested version: 1.5.2 CVE ID: CVE-2017-15867 CVE description Multiple cross-site scripting XSS vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow...

IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32855)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform versions 9.2 and 9.5, which can be exploited by remote attackers to access URLs via server logs, referrer headers, or browser history...

Tizen Studio 1.3 Smart Development Bridge Buffer Overflow

Exploit Title: Smart Development Bridge =2.3.2 part of Tizen Studio 1.3 Windows x86/x64 - Buffer Overflow PoC Date: 22.10.17 Exploit Author: Marcin Kopec Vendor Homepage: https://developer.tizen.org/ Software Link: https://developer.tizen.org/development/tizen-studio/download Version: 2.3.0, 2.3....

Information disclosure

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...

CVE-2017-1225

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...

CVE-2017-1225

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...