Oracle WebCenter Sites Multiple Vulnerabilities (October 2012 CPU)

The remote Oracle WebCenter Sites install is missing patches from the October 2012 CPU. As a result, it may be affected by multiple vulnerabilities : - A cross-site request forgery vulnerability exists that can be triggered by tricking a victim into clicking an image link on a specially crafted...

Oracle Access Manager (October 2013 CPU)

The version of Oracle Access Manager installed on the remote host is affected by an unspecified flaw in the Authentication Engine subcomponent. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid72214;...

ASUS RT-N56U Remote Root

!/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jacob Holcomb/Gimppy - Security Analyst @ ISE Contact: Twitt...

CloudFlare's Red October Crypto app with two-man rule style Encryption and Decryption

It is always important to secure our system against outside threats i.e. Hackers, but it also required to protect against insider threats. The potential of damage from an Insider threat can be estimated from the example of Edward Snowden who had worked at the NSA, and had authorized access to...

CloudFlare's Red October Crypto app with two-man rule style Encryption and Decryption

None...

Threat Outbreak Alert: Fake October Reports Attachment Email Messages on November 25, 2013

Medium Alert ID: 31946 First Published: 2013 December 2 16:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain reports for the month of October for the recipient. The text in the email message attempts to convince the...

Oracle WebCenter Content Server Subcomponent Remote Issue (October 2013 CPU)

The version of Oracle WebCenter Content installed on the remote host is potentially affected by an unspecified remote security vulnerability in the Content Server component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

mysql: unspecified DoS related to Optimizer (CPU October 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer...

Stuxnet also infected the internal network of a Russian nuclear plant

We have a lot of information on Stuxnet virus, a powerful malware that for the first time has shown to governments the capabilities and efficiency of a cyber weapon. Eugene Kaspersky, CEO of Kasperky security firm revealed that Stuxnet had badly infected the internal network of a Russian nuclear...

Mozilla Suite: Update to October 2013 release (important)

MozillaFirefox was updated to Firefox 25.0. MozillaThunderbird was updated to Thunderbird 24.1.0. Mozilla XULRunner was updated to 17.0.10esr. Mozilla NSPR was updated to 4.10.1. Changes in MozillaFirefox: requires NSS 3.15.2 or above MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592...

Finland's Ministry of Foreign Affairs networks hit by sophisticated Malware attack

Finnish commercial broadcaster MTV3 reports that the Finnish Ministry of Foreign Affair networks has been targeted in a four-year-long cyber espionage operation. Finland's foreign minister said, "I can confirm there has been a severe and large hacking in the ministry's data network," A large scal...

CVE-2013-3617

creationtimestamp| type| source ---|---|--- 2013-10-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38818 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/openbravoxxe.rb 2025-02-06 03:13:41+00:00| seen|...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 28, 2013

Medium Alert ID: 31513 First Published: 2013 October 29 15:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain attachments for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Multimedia Message Delivery Email Messages on October 28, 2013

Medium Alert ID: 31509 First Published: 2013 October 28 15:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a multimedia message for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Financial Account Statement Email Messages on October 23, 2013

Medium Alert ID: 31481 First Published: 2013 October 24 17:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account statement for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Payment Receipt Notification Email Messages on October 21, 2013

Medium Alert ID: 31392 First Published: 2013 October 21 18:40 GMT Last Updated: 2013 October 22 18:41 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The text in the email messag...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 18, 2013

Medium Alert ID: 31371 First Published: 2013 October 21 14:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with blank message body and files attached for the recipient. The .rar attachment contains a malicious .exe file that, when executed...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 21, 2013

Medium Alert ID: 31388 First Published: 2013 October 21 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with blank message body and files attached for the recipient. The .zip attachment contains a malicious .exe file that, when executed...

Threat Outbreak Alert: Fake Product Order Request Email Messages on October 20, 2013

Medium Alert ID: 31382 First Published: 2013 October 21 13:56 GMT Last Updated: 2013 October 21 15:24 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order request for the recipient. The text in the email messa...

Design/Logic Flaw

The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldatapassword, htmldataconfirmpassword, and htmldataemail parameters, as exploited in the wild in October 2013...