Niushop open source mall system goodshistory parameter SQL injection vulnerabilities exist

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . Niushop open source mall system goodshistory parameters exist SQL injection vulnerability . As the system...

Threat Outbreak Alert RuleID29659: Email Messages Distributing Malicious Software on July 3, 2017

Medium Alert ID: 54347 First Published: 2017 July 3 18:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29659 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29632: Email Messages Distributing Malicious Software on June 30, 2017

Medium Alert ID: 54340 First Published: 2017 July 3 14:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29632 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29630: Email Messages Distributing Malicious Software on June 29, 2017

Medium Alert ID: 54328 First Published: 2017 June 29 16:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29630 may contain the following files: Name | Siz...

usatt.net XSS vulnerability

Vulnerable URL: http://www.usatt.net/history/rating/History/Tresult.asp?Blow=1"...

Threat Outbreak Alert RuleID29568: Email Messages Distributing Malicious Software on June 21, 2017

Medium Alert ID: 54269 First Published: 2017 June 21 18:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29568 may contain the following files: Name | Siz...

Tradition and Technology: Trend Micro Takes to the Water for Dragon Boat Challenge

At Trend Micro, we’re used to fighting it out against a constant barrage of cyber threats facing our customers. But we don’t just want to be number one in cybersecurity: We’re also highly competitive elsewhere. As a company proud of our East Asian links we’re keen Dragon Boat racers, and guess...

Threat Outbreak Alert RuleID29432: Email Messages Distributing Malicious Software on June 12, 2017

Medium Alert ID: 54169 First Published: 2017 June 12 12:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29432 may contain the following files: Name | Siz...

Information disclosure

IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 116136...

Threat Outbreak Alert RuleID29372: Email Messages Distributing Malicious Software on June 1, 2017

Medium Alert ID: 54016 First Published: 2017 June 1 13:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29372 may contain the following files: Name | Size...

SS-2017-004: XSS in page history comparison

More info at https://www.silverstripe.org/download/security-releases/ss-2017-004/...

BWT EP5 - It Has Been 0-days Since This Term was Abused

Beers with Talos Episode 5 "It Has Been 0-days Since This Term was Abused" is now availableListen here:Listen via iTunesListen directly on the Talos Podcasts page.Episode Notes:The crew talks about the potential of Samba echoing WannaCry and blocking SMB ports but you already did that, RIGHT?. We...

Threat Outbreak Alert RuleID29300: Email Messages Distributing Malicious Software on May 25, 2017

Medium Alert ID: 53971 First Published: 2017 May 25 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29300 may contain the following files: Name | Size...

WebKit - enqueuePageshowEvent enqueuePopstateEvent Universal Cross-Site Scripting

WebKit - enqueuePageshowEvent enqueuePopstateEvent Universal Cross-Site Scripting view-frame.page; frame.tree.appendChildchildFrame-view-frame; childFrame-open; enqueuePageshowEventPageshowEventPersisted; HistoryItem historyItem = frame.loader.history.currentItem; if historyItem &&...

CVE-2017-2495

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service application crash via a crafted web site that improperly interacts with the histor...

SUSE-SU-2017:1337-1 Security update for bash

This update for bash fixed several issues This security issue was fixed: - CVE-2016-9401: popd in bash might allowed local users to bypass the restricted shell and cause a use-after-free via a crafted address bsc1010845. This non-security issue was fixed: - Fix when HISTSIZE=0 and chattr +a...

Weblate: Old password can be new password

Affected Domain: https://demo.weblate.org/ Issue: The sites like Facebook and Google keeps tracks of old password and does not allow user to set password similar to their old passwords. However in case of demo.weblate.org. It is possible for a user to set new password which is exactly similar to...

Threat Outbreak Alert RuleID29140: Email Messages Distributing Malicious Software on May 16, 2017

Medium Alert ID: 53850 First Published: 2017 May 16 14:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29140 may contain the following files: Name | Size...

CVE-2017-0258

creationtimestamp| type| source ---|---|--- 2017-05-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42006...

Threat Outbreak Alert RuleID29063: Email Messages Distributing Malicious Software on May 11, 2017

Medium Alert ID: 53795 First Published: 2017 May 11 15:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29063 may contain the following files: Name | Size...