CVE-2017-3219

Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash...

Threat Outbreak Alert RuleID29535: Email Messages Distributing Malicious Software on June 20, 2017

Medium Alert ID: 54245 First Published: 2017 June 20 13:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29535 may contain the following files: Name | Siz...

VulnCheck KEV: CVE-2007-1675

Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server nimap.exe in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username...

Threat Outbreak Alert RuleID29514: Email Messages Distributing Malicious Software on June 19, 2017

Medium Alert ID: 54231 First Published: 2017 June 19 13:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29514 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29487: Email Messages Distributing Malicious Software on June 14, 2017

Medium Alert ID: 54201 First Published: 2017 June 14 20:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29487 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29490: Email Messages Distributing Malicious Software on June 14, 2017

Medium Alert ID: 54203 First Published: 2017 June 14 16:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29490 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29480: Email Messages Distributing Malicious Software on June 14, 2017

Medium Alert ID: 54199 First Published: 2017 June 14 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29480 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29478: Email Messages Distributing Malicious Software on June 14, 2017

Medium Alert ID: 54198 First Published: 2017 June 14 15:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29478 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29474: Email Messages Distributing Malicious Software on June 13, 2017

Medium Alert ID: 54185 First Published: 2017 June 13 13:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29474 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29470: Email Messages Distributing Malicious Software on June 13, 2017

Medium Alert ID: 54183 First Published: 2017 June 13 13:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29470 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29467: Email Messages Distributing Malicious Software on June 13, 2017

Medium Alert ID: 54181 First Published: 2017 June 13 13:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29467 may contain the following files: Name | Siz...

Automattic: Timing attack woocommerce, simplify commerce gateway

file class-wc-gateway-simplify-commerce.php method returnhandler e.g. where woocommerce marks the order regarding its payment / transaction. public function returnhandler @obclean; header 'HTTP/1.1 200 OK' ; if isset $REQUEST'reference' && isset $REQUEST'paymentId' && isset $REQUEST'signature'...

Threat Outbreak Alert RuleID29455: Email Messages Distributing Malicious Software on June 12, 2017

Medium Alert ID: 54173 First Published: 2017 June 12 12:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29455 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29435: Email Messages Distributing Malicious Software on June 12, 2017

Medium Alert ID: 54170 First Published: 2017 June 12 12:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29435 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29432: Email Messages Distributing Malicious Software on June 12, 2017

Medium Alert ID: 54169 First Published: 2017 June 12 12:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29432 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29423: Email Messages Distributing Malicious Software on June 9, 2017

Medium Alert ID: 54167 First Published: 2017 June 9 15:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29423 may contain the following files: Name | Size...

Uniview NVR - Password Disclosure

Uniview NVR remote passwords disclosure Author: B1t The Uniview NVR web application does not enforce authorizations on the main.cgi file when requesting json data. It says that you can do anything without authentication, however you must know the request structure. In addition, the users' passwor...

Uniview NVR - Password Disclosure

Uniview NVR - Password Disclosure Uniview NVR remote passwords disclosure Author: B1t The Uniview NVR web application does not enforce authorizations on the main.cgi file when requesting json data. It says that you can do anything without authentication, however you must know the request structur...

Threat Outbreak Alert RuleID29421: Email Messages Distributing Malicious Software on June 7, 2017

Medium Alert ID: 54135 First Published: 2017 June 7 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29421 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29418: Email Messages Distributing Malicious Software on June 7, 2017

Medium Alert ID: 54133 First Published: 2017 June 7 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29418 may contain the following files: Name | Size...