Threat Outbreak Alert RuleID12022: Email Messages Distributing Malicious Software on October 19, 2014

Medium Alert ID: 36131 First Published: 2014 October 20 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12022 may contain the following files: Name |...

CVE-2014-7509

The A Very Short History of Japan aka com.ireadercity.c51 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7509

CVE-2014-7509 affects the Android app “A Very Short History of Japan” (package com.ireadercity.c51) v3.0.2, which does not verify X.509 certificates in SSL, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. Root cause: missing server certificate val...

Threat Outbreak Alert RuleID11631: Email Messages Distributing Malicious Software on September 22, 2014

Medium Alert ID: 35802 First Published: 2014 September 23 14:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11631 may contain the following files: Name ...

phpMyAdmin 4.0.x < 4.0.10.3 / 4.1.x < 4.1.14.4 / 4.2.x < 4.2.8.1 Micro History XSS and XSRF Vulnerabilities (PMASA-2014-10)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.0.x prior to 4.0.10.3, 4.1.x prior to 4.1.14.4, or 4.2.x prior to 4.2.8.1. It is, therefore, affected by an input-validation error related to the 'micro history' feature that could allow...

CVE-2014-6287

creationtimestamp| type| source ---|---|--- 2014-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34668 2014-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34926 2016-01-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39161 2018-05-29...

FreeBSD : phpMyAdmin -- XSRF/CSRF due to DOM based XSS in the micro history feature (cc627e6c-3b89-11e4-b629-6805ca0b3d42)

The phpMyAdmin development team reports : XSRF/CSRF due to DOM based XSS in the micro history feature. By deceiving a logged-in user to click on a crafted URL, it is possible to perform remote code execution and in some cases, create a root account due to a DOM based XSS vulnerability in the micr...

Threat Outbreak Alert RuleID11529: Email Messages Distributing Malicious Software on September 14, 2014

Medium Alert ID: 35699 First Published: 2014 September 13 04:30 GMT Last Updated: 2014 September 15 13:14 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat...

phpMyAdmin -- XSRF/CSRF due to DOM based XSS in the micro history feature

The phpMyAdmin development team reports: XSRF/CSRF due to DOM based XSS in the micro history feature. By deceiving a logged-in user to click on a crafted URL, it is possible to perform remote code execution and in some cases, create a root account due to a DOM based XSS vulnerability in the micro...

XSRF/CSRF due to DOM based XSS in the micro history feature

PMASA-2014-10 Announcement-ID: PMASA-2014-10 Date: 2014-09-13 Summary XSRF/CSRF due to DOM based XSS in the micro history feature Description By deceiving a logged-in user to click on a crafted URL, it is possible to perform remote code execution and in some cases, create a root account due to a...

Threat Outbreak Alert RuleID11493: Email Messages Distributing Malicious Software on September 10, 2014

Medium Alert ID: 35668 First Published: 2014 September 10 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11493 may contain the following files: Name ...

Threat Outbreak Alert RuleID11497: Email Messages Distributing Malicious Software on September 10, 2014

Medium Alert ID: 35667 First Published: 2014 September 10 14:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11497 may contain the following files: Name ...

SA-CONTRIB-2014-085 - Ubercart - Information disclosure

The Ubercart module for Drupal provides a shopping cart and e-commerce features for Drupal. The per-user order history view is not properly protected. This vulnerability is mitigated by the fact that an attacker must have an account with the "view own orders" permission and can only view order ID...

Threat Outbreak Alert RuleID11474: Email Messages Distributing Malicious Software on September 9, 2014

Medium Alert ID: 35658 First Published: 2014 September 9 15:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11474 may contain the following files: Name |...

Threat Outbreak Alert RuleID11472: Email Messages Distributing Malicious Software on September 8, 2014

Medium Alert ID: 35648 First Published: 2014 September 8 20:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11472 may contain the following files: Name |...

[SECURITY] Fedora 20 Update: subversion-1.8.10-1.fc20

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

[SECURITY] Fedora 19 Update: subversion-1.7.18-1.fc19

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

Threat Outbreak Alert RuleID11305: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 35462 First Published: 2014 August 28 13:03 GMT Last Updated: 2015 February 10 14:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11305...

Google Map Tracks Your Every Move. Check Your 'Location History' to Verify It

Google has been involved in several controversies including among the companies that was claimed to cooperate with US surveillance agencies on their global data-mining programmes, and just yesterday the popular Media tycoon Rupert Murdoch labeled Google worse than the NSA, saying “NSA privacy...

Threat Outbreak Alert RuleID11160: Email Messages Distributing Malicious Software on August 19, 2014

Medium Alert ID: 35336 First Published: 2014 August 18 19:54 GMT Last Updated: 2014 August 20 12:10 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11160 an...