Threat Outbreak Alert: Email Messages with Malicious Attachments on October 21, 2013

Medium Alert ID: 31388 First Published: 2013 October 21 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with blank message body and files attached for the recipient. The .zip attachment contains a malicious .exe file that, when executed...

Threat Outbreak Alert: Fake Product Order Request Email Messages on October 20, 2013

Medium Alert ID: 31382 First Published: 2013 October 21 13:56 GMT Last Updated: 2013 October 21 15:24 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order request for the recipient. The text in the email messa...

Design/Logic Flaw

The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldatapassword, htmldataconfirmpassword, and htmldataemail parameters, as exploited in the wild in October 2013...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 18, 2013

Medium Alert ID: 31363 First Published: 2013 October 18 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body and document attached for the recipient. However, the .zip attachment contains a malicious .exe file that,...

Oracle Java SE Multiple Vulnerabilities (October 2013 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 7 Update 45, 6 Update 65, or 5 Update 55. It is, therefore, potentially affected by security issues in the following components : - 2D - AWT - BEANS - CORBA - Deployment - JAX-WS - JAXP -...

Oracle E-Business (October 2013 CPU)

The version of Oracle E-Business installed on the remote host is missing the October 2013 Critical Patch Update CPU. It is, therefore, affected by an information disclosure issue in the 'Techstack' component . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Oracle Java SE Multiple Vulnerabilities (October 2013 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 7 Update 45, 6 Update 65, or 5 Update 55. It is, therefore, potentially affected by security issues in the following components : - 2D - AWT - BEANS - CORBA - Deployment - JAX-WS - JAXP -...

Oracle GlassFish Server Multiple Vulnerabilities (October 2013 CPU)

The version of GlassFish Server running on the remote host is affected by multiple vulnerabilities in the following components : - Java Server Faces - Metro C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70482; scriptversion"1.12"; scriptcvsdate"Date: 2018/11/15...

Oracle Database Multiple Vulnerabilities (October 2013 CPU) (BEAST)

The remote Oracle database server is missing the October 2013 Critical Patch Update CPU. It is, therefore, affected by multiple security vulnerabilities in the following components : - Core RDBMS - Oracle Security service - XML Parser %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free

This Metasploit module exploits a vulnerability found in Microsoft Internet Explorer. It was originally found being exploited in the wild targeting Japanese and Korean IE8 users on Windows XP, around the same time frame as CVE-2013-3893, except this was kept out of the public eye by multiple...

Oracle Critical Patch Update - October 2013

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

CVE-2013-3827

creationtimestamp| type| source ---|---|--- 2013-10-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38802 2021-08-26 22:56:33+00:00| seen| https://t.me/ctinow/39049 2025-07-08 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hom652w...

Oracle Releases October 2013 Security Advisory

Oracle has released its Critical Patch Update for October 2013 to address 127 vulnerabilities across multiple products. This update contains the following security fixes: 2 for Oracle Database Server 17 for Oracle Fusion Middleware 4 for Oracle Enterprise Manager Grid Control 1 for Oracle...

Threat Outbreak Alert: Fake Order Document Attachment Email Messages on October 13, 2013

Medium Alert ID: 31240 First Published: 2013 October 14 19:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order form shipment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Purchase Invoice Email Messages on October 14, 2013

Medium Alert ID: 31244 First Published: 2013 October 14 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam Italian-language email messages that claim to contain an invoice notification for the recipient. The text in the e-mail message attempts to convinc...

October 2013 Security Bulletin Webcast, Q&A, and Slide Deck

Today we’re publishing the October 2013 Security Bulletin Webcast Questions & Answers page. We fielded 11 questions during the webcast, with specific bulletin questions focusing primarily on the SharePoint MS13-084 and Kernel-Mode Drivers MS13-081 bulletins. There was one additional question that...

CVE-2013-6826

creationtimestamp| type| source ---|---|--- 2013-10-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38824...

Memory corruption

Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JavaScript code that uses the onpropertychange event handler, as exploit...

CVE-2013-1743

creationtimestamp| type| source ---|---|--- 2013-10-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38807...

MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free

This module exploits a vulnerability found in Microsoft Internet Explorer. It was originally found being exploited in the wild targeting Japanese and Korean IE8 users on Windows XP, around the same time frame as CVE-2013-3893, except this was kept out of the public eye by multiple research...