Threat Outbreak Alert RuleID24893: Email Messages Distributing Malicious Software on September 9, 2016

Medium Alert ID: 48827 First Published: 2016 September 9 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24893 may contain the following files: Name |...

Threat Outbreak Alert RuleID24467: Email Messages Distributing Malicious Software on September 8, 2016

Medium Alert ID: 48809 First Published: 2016 September 8 12:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24467 may contain the following files: Name |...

Intercepting Proxy for Performing Web Application Security Testing: The Pappy Proxy

Intercepting Proxy for Performing Web application security testing The Pappy P roxy A ttack P roxy P rox Y Proxy is an intercepting proxy for performing web application security testing. Its features are often similar, or straight up rippoffs from Burp Suite . However, Burp Suite is neither open...

Threat Outbreak Alert RuleID24825: Email Messages Distributing Malicious Software on September 4, 2016

Medium Alert ID: 48770 First Published: 2016 September 6 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24825 may contain the following files: Name |...

Threat Outbreak Alert RuleID24792: Email Messages Distributing Malicious Software on September 5, 2016

Medium Alert ID: 48773 First Published: 2016 September 6 14:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24792 may contain the following files: Name |...

CVE-2016-7034

It has been reported that CSRF tokens are not properly handled in JBoss BPM suite dashbuilder. Old tokens generated during an active session can be used to bypass CSRF protection. In addition, the tokens are sent in query string so they can be exposed through the browser's history, referrers, web...

Threat Outbreak Alert RuleID24772: Email Messages Distributing Malicious Software on September 1, 2016

Medium Alert ID: 48701 First Published: 2016 September 1 14:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24772 may contain the following files: Name |...

Updated redis packages fix security vulnerability

It was discovered that redis did not properly protect redis-cli history files; they were created by default with world-readable permissions CVE-2013-7458...

MGASA-2016-0295 Updated redis packages fix security vulnerability

It was discovered that redis did not properly protect redis-cli history files; they were created by default with world-readable permissions CVE-2013-7458...

Threat Outbreak Alert RuleID24702: Email Messages Distributing Malicious Software on August 30, 2016

Medium Alert ID: 48670 First Published: 2016 August 30 18:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24702 may contain the following files: Name |...

Threat Outbreak Alert RuleID24693: Email Messages Distributing Malicious Software on August 30, 2016

Medium Alert ID: 48656 First Published: 2016 August 30 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24693 may contain the following files: Name |...

WordPress 3.6-4.5.2 Authenticated Revision History Information Disclosure

No description provided by source...

Threat Outbreak Alert RuleID24612: Email Messages Distributing Malicious Software on August 25, 2016

Medium Alert ID: 48605 First Published: 2016 August 25 18:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24612 may contain the following files: Name |...

Threat Outbreak Alert RuleID24606: Email Messages Distributing Malicious Software on August 25, 2016

Medium Alert ID: 48596 First Published: 2016 August 25 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24606 may contain the following files: Name |...

Threat Outbreak Alert RuleID24159: Email Messages Distributing Malicious Software on August 11, 2016

Medium Alert ID: 48448 First Published: 2016 August 11 19:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24159 may contain the following files: Name |...

Threat Outbreak Alert RuleID24147: Email Messages Distributing Malicious Software on August 11, 2016

Medium Alert ID: 48441 First Published: 2016 August 11 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24147 may contain the following files: Name |...

UBUNTU-CVE-2013-7458

linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .redisclihistory, which allows local users to obtain sensitive information by reading the file...

DEBIAN-CVE-2013-7458

linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .redisclihistory, which allows local users to obtain sensitive information by reading the file...

Debian DLA-588-2 : mongodb security update

This is an update of DLA-588-1. The previous build had revision number that was considered lower than the one in wheezy and was therefore not installed at upgrade. The text for DLA-588-1 is included here for reference with some improvement. Two security related problems have been found in the...

[SECURITY] [DLA 588-1] mongodb security update

Package : mongodb Version : 2.0.6-1+deb7u1 CVE ID : CVE-2016-6494 Debian Bug : 832908, 833087 Two security related problems have been found in the mongodb package, related to logging. CVE-2016-6494 World-readable .dbshell history file TEMP-0833087-C5410D Bruteforcable challenge responses in...