Threat Outbreak Alert RuleID11605: Email Messages Distributing Malicious Software on September 18, 2014

Medium Alert ID: 35766 First Published: 2014 September 18 13:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11605 may contain the following files: Name ...

CVE-2014-5413

Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm...

Code injection

Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm...

CVE-2014-5413 Schneider Electric SCADA Expert ClearSCADA Cryptographic Issues

Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm...

CVE-2014-5413

CVE-2014-5413 affects Schneider Electric StruxureWare SCADA Expert ClearSCADA (2010 R3 through 2014 R1). The root issue is weak cryptographic controls: the self-signed web certificate uses MD5, enabling potential cryptographic spoofing of servers. Additionally, ICS-CERT describes a cross-site scr...

Threat Outbreak Alert RuleID11603: Email Messages Distributing Malicious Software on September 17, 2014

Medium Alert ID: 35750 First Published: 2014 September 17 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11603 may contain the following files: Name ...

Threat Outbreak Alert RuleID11586: Email Messages Distributing Malicious Software on September 17, 2014

Medium Alert ID: 35736 First Published: 2014 September 16 15:48 GMT Last Updated: 2014 September 17 15:09 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat...

Threat Outbreak Alert RuleID11583: Email Messages Distributing Malicious Software on September 16, 2014

Medium Alert ID: 35733 First Published: 2014 September 16 15:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11583 may contain the following files: Name ...

Moderate: Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update

Updated nss and nspr packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

RHEL 5 : nss and nspr (RHSA-2014:1246)

Updated nss and nspr packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Threat Outbreak Alert RuleID11552: Email Messages Distributing Malicious Software on September 15, 2014

Medium Alert ID: 35719 First Published: 2014 September 15 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11552 may contain the following files: Name ...

Threat Outbreak Alert RuleID11556: Email Messages Distributing Malicious Software on September 15, 2014

Medium Alert ID: 35715 First Published: 2014 September 15 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11556 may contain the following files: Name ...

Threat Outbreak Alert RuleID11530: Email Messages Distributing Malicious Software on September 14, 2014

Medium Alert ID: 35701 First Published: 2014 September 15 14:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11530 may contain the following files: Name ...

Threat Outbreak Alert RuleID11553: Email Messages Distributing Malicious Software on September 15, 2014

Medium Alert ID: 35713 First Published: 2014 September 15 13:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11553 may contain the following files: Name ...

PHPSHE关键位置CSRF+后台注入 可获取管理员帐号密码

简要描述： PHPSHE关键位置CSRF+后台注入 可获取管理员帐号，密码。 没找到，别的有什么好利用的。。唉 详细说明： Csrf 先看了一下incude/function/global.func.php这个文件 里面有防护csrf和添加token的函数，个人感觉不错。 不过貌似就写好了函数一次也没用过。 管理员添加的页面中 http://localhost/admin.php?mod=admin&act=add 我们来添加一个管理员 抓包 Post了如上数据 infoadminname=wooyun&adminpw=wooyun&pesubmit=提+交 我们来构造下 None 效果...

Threat Outbreak Alert RuleID11528: Email Messages Distributing Malicious Software on September 12, 2014

Medium Alert ID: 35700 First Published: 2014 September 12 19:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11528 may contain the following files: Name ...

Threat Outbreak Alert RuleID11511: Email Messages Distributing Malicious Software on September 11, 2014

Medium Alert ID: 35677 First Published: 2014 September 11 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11511 may contain the following files: Name ...

Threat Outbreak Alert RuleID11505: Email Messages Distributing Malicious Software on September 10, 2014

Medium Alert ID: 35671 First Published: 2014 September 11 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11505 may contain the following files: Name ...

SOL15578 - MD5 Message-Digest Algorithm vulnerability CVE-2004-2761

Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. To mitigate this...

Threat Outbreak Alert RuleID11493: Email Messages Distributing Malicious Software on September 10, 2014

Medium Alert ID: 35668 First Published: 2014 September 10 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11493 may contain the following files: Name ...