Local Path Disclosure when using Asset Pipeline - ownCloud

ownCloud 7 introduced the so-called "Asset Pipeline". It is disabled by default, but can be enabled by setting asset-pipeline.enabled to true in config.php When the setting is enabled ownCloud concatenates all CSS and JS files into a single large blob file. Thus the amount of initial required...

Server: Local Path Disclosure when using Asset Pipeline

ownCloud 7 introduced the so-called "Asset Pipeline". It is disabled by default, but can be enabled by setting asset-pipeline.enabled to true in config.php When the setting is enabled ownCloud concatenates all CSS and JS files into a single large blob file. Thus the amount of initial required...

Arris VAP2500 tools_command.php Command Execution

Arris VAP2500 access points are vulnerable to OS command injection in the web management portal via the toolscommand.php page. Though authentication is required to access this page, it is trivially bypassed by setting the value of a cookie to an md5 hash of a valid username. Module Options msf us...

Threat Outbreak Alert RuleID12531: Email Messages Distributing Malicious Software on November 23, 2014

Medium Alert ID: 36512 First Published: 2014 November 24 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12531 may contain the following files: Name |...

PageAdmin多处设计缺陷可getshell

简要描述： rt 详细说明： text3 = now.AddSecondsdoublerandom.Next3600, 86164.ToString"yyyyMMddHHmmss"; masterlogin.imMAPgbr7QUplCu6n3ehttpCookie.Add"Valicate", masterlogin.sxW4jRbFsutFEAxed8Smd, text3; 管理员登陆成功，SetCookie 登陆时间+（3600，86164）之间随机的秒数，进行GetMd5运算。 public string GetMd5string s MD5 mD = new...

WordPress <= 4.0.0 - Multiple Vulnerabilities #2

Because of multiple vulnerabilities in WordPress 4.0.0 and previous versions, the attackers can obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash. Related records:...

Threat Outbreak Alert RuleID12492: Email Messages Distributing Malicious Software on November 19, 2014

Medium Alert ID: 36468 First Published: 2014 November 19 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12492 may contain the following files: Name |...

Threat Outbreak Alert RuleID12489: Email Messages Distributing Malicious Software on November 19, 2014

Medium Alert ID: 36466 First Published: 2014 November 19 16:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12489 may contain the following files: Name |...

Threat Outbreak Alert RuleID12483: Email Messages Distributing Malicious Software on November 18, 2014

Medium Alert ID: 36461 First Published: 2014 November 18 19:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12483 may contain the following files: Name |...

Threat Outbreak Alert RuleID12461: Email Messages Distributing Malicious Software on November 18, 2014

Medium Alert ID: 36459 First Published: 2014 November 18 19:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12461 may contain the following files: Name |...

Threat Outbreak Alert RuleID12469: Email Messages Distributing Malicious Software on November 17, 2014

Medium Alert ID: 36448 First Published: 2014 November 18 16:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12469 may contain the following files: Name |...

Threat Outbreak Alert RuleID12464: Email Messages Distributing Malicious Software on November 17, 2014

Medium Alert ID: 36440 First Published: 2014 November 17 18:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12464 may contain the following files: Name |...

Threat Outbreak Alert RuleID12428: Email Messages Distributing Malicious Software on November 17, 2014

Medium Alert ID: 36426 First Published: 2014 November 17 15:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12428 may contain the following files: Name |...

Threat Outbreak Alert RuleID12397: Email Messages Distributing Malicious Software on November 13, 2014

Medium Alert ID: 36407 First Published: 2014 November 13 19:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12397 may contain the following files: Name |...

Threat Outbreak Alert RuleID12407: Email Messages Distributing Malicious Software on November 13, 2014

Medium Alert ID: 36411 First Published: 2014 November 13 16:29 GMT Last Updated: 2014 November 14 15:17 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1240...

Threat Outbreak Alert RuleID12382: Email Messages Distributing Malicious Software on November 12, 2014

Medium Alert ID: 36394 First Published: 2014 November 12 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12382 may contain the following files: Name |...

Threat Outbreak Alert RuleID12357: Email Messages Distributing Malicious Software on November 11, 2014

Medium Alert ID: 36383 First Published: 2014 November 11 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12357 may contain the following files: Name |...

Threat Outbreak Alert RuleID12342: Email Messages Distributing Malicious Software on November 10, 2014

Medium Alert ID: 36375 First Published: 2014 November 10 18:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12342 may contain the following files: Name |...

Threat Outbreak Alert RuleID12297: Email Messages Distributing Malicious Software on November 6, 2014

Medium Alert ID: 36349 First Published: 2014 November 6 18:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12297 may contain the following files: Name |...

Threat Outbreak Alert RuleID12286: Email Messages Distributing Malicious Software on November 6, 2014

Medium Alert ID: 36345 First Published: 2014 November 6 15:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12286 may contain the following files: Name |...