Threat Outbreak Alert RuleID17959: Email Messages Distributing Malicious Software on September 12, 2015

Medium Alert ID: 40984 First Published: 2015 September 14 13:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17959 may contain the following files: Name ...

Threat Outbreak Alert RuleID17838: Email Messages Distributing Malicious Software on August 2, 2016

Medium Alert ID: 40911 First Published: 2015 September 9 16:05 GMT Last Updated: 2016 August 3 12:52 GMT Version: 27 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17838...

PayPal Inc - SecApproval & 2FA Auth Bypass Vulnerability

Document Title: =============== PayPal Inc - SecApproval & 2FA Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1486 Video: http://www.vulnerability-lab.com/getcontent.php?id=1485 Watch Video:...

Threat Outbreak Alert RuleID17672: Email Messages Distributing Malicious Software on August 31, 2015

Medium Alert ID: 40746 First Published: 2015 August 31 20:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17672 may contain the following files: Name |...

Threat Outbreak Alert RuleID17656: Email Messages Distributing Malicious Software on August 29, 2015

Medium Alert ID: 40731 First Published: 2015 August 31 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17656 may contain the following files: Name |...

PayPal Stored Cross Site Scripting

Document Title: =============== PayPal Bug Bounty 119 - Stored Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1588 Video: http://www.vulnerability-lab.com/getcontent.php?id=1587 Vulnerability Magazine:...

Mail.ru: Content spoofing в http://my.mail.ru/cgi-bin/app/paymentm

Text injection into http://my.mail.ru/cgi-bin/app/paymentm could assist phishing attack. Under current practice, text injection reports are only accepted as an exeption, for vectors with high potential for phishing attacks in-the-wild...

Web.com Data Breach

Update Florida-based web hosting company Web.com on Tuesday announced that it had suffered a data breach and payment card and personal information belonging to 93,000 customers was accessed. The company did not say in a statement or press release whether the stolen data was encrypted, nor how it...

Threat Outbreak Alert RuleID17411: Email Messages Distributing Malicious Software on August 19, 2015

Medium Alert ID: 40577 First Published: 2015 August 19 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17411 may contain the following files: Name |...

CVE-2015-5504

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5504

CVE-2015-5504 describes an SQL injection in the Novalnet Payment Module Ubercart for Drupal. The vulnerability stems from failing to sanitize a database query via user-controlled input, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected products: Novalne...

CVE-2015-5504

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Threat Outbreak Alert RuleID17159: Email Messages Distributing Malicious Software on February 22, 2016

Medium Alert ID: 40352 First Published: 2015 August 10 14:24 GMT Last Updated: 2016 February 22 20:36 GMT Version: 8 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17159...

Researchers Unveil Square Reader Mobile POS Hacks

It wasn’t long ago when hacking a point-of-sale system meant deploying a RAM scraper at a retailer, sitting back and watching the credit card numbers roll in. Now that POS has gone mobile with vendors such as Square, Intuit, Revel and others using hardware fobs connected to smartphones and tablet...

Commerce Commonwealth (CBA) - Moderately Critical - Insufficient Verification of API Data - SA-CONTRIB-2015-136

This module enables you to pay for items on Drupal Commerce, using Commerce Commonwealth payment gateway. The module doesn't sufficiently validate the payment under certain specific scenarios. A malicious user can modify the urls used in gateway interaction with Commbank to make a failed payment...

ok.ru: Покупка песни дешевле, чем она стоит.

Итак, часть песен в приложении можно купить. Нажимая на кнопку купить, происходит запрос к серверу обрезано, для удобства: GET /isDownloaded;jsessionid=DZSUq1yTUMNFNcYk5-mZ10DGJbUCoNYFHRUcNNwINHoSrDkkkf4gInosiPimoqGaysNvWs7GV7fnOMGgfsbCA.hHaqWq9PyS8b9PmEoYfcA?tid=90920917758231 В ответ получаем:...

The net exposure of the Bank to pay the loopholes in the suspected SMS CAPTCHA by hackers hijacking-vulnerability warning-the black bar safety net

Recently, the media exposed the Bank to pay the presence of vulnerabilities. The criminals forcibly opened the depositors of the Bank only with the SMS verification code to transactions of the“e payment”service, with illegally intercepting SMS verification code, easily removed the card money. !...

Threat Outbreak Alert RuleID16617: Email Messages Distributing Malicious Software on July 13, 2015

Medium Alert ID: 39895 First Published: 2015 July 13 17:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16617 may contain the following files: Name | Siz...

Two Dozen Zoos Potentially Hit by Data Breach

Anyone who’s visited one of two dozen zoos across America over the last several months may want to check their credit and debit card statements. A third party operator of concessions and retail services at zoos from Hawaii to Florida acknowledged this week that it was hit by a data breach earlier...