CVE-2014-2325

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the 1 state parameter to objects/who/index.htm or 2 User email address to quarantine/spam/manage.htm...

CVE-2014-2325

Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the 1 state parameter to objects/who/index.htm or 2 User email address to quarantine/spam/manage.htm...

CVE-2013-3386

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

Code injection

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3386

CVE-2013-3386 affects Cisco IronPort AsyncOS ISQ in Cisco Email Security Appliance (ESA) and Content Security Management Appliance (CMA). The vulnerability allows a remote attacker to cause a denial of service (service crash/hang) by generating a high rate of TCP connection attempts. Affected ver...

Multiple Vulnerabilities in Cisco Email Security Appliance

Cisco IronPort AsyncOS Software for Cisco Email Security Appliance is affected by the following vulnerabilities: Web Framework Authenticated Command Injection Vulnerability IronPort Spam Quarantine Denial of Service Vulnerability Management GUI Denial of Service Vulnerability Successful...

Chinese search engine Baidu launches free Antivirus Suite

Chinese search engine Baidu has just launched a security product called Baidu Antivirus 2013. Described as a ultra light weight, easy to use, extremely fast anti-virus program that promises to protect your system from malware, viruses, spyware, adware and other malicious programs. Most interestin...

Incapsula introduces 'Backdoor Protect' feature in Cloud-based Website Security

Incapsula announced this week that they’re offering an intriguing Backdoor Protection feature for sites using their cloud-based website security and performance services. What’s a Backdoor? A backdoor is a malicious function that enables hackers to remotely operate a site or server, even after...

FixMeStick PRO : Best remote malware remediation product

This week Corey and Marty over at FixMeStick shared the specs of their recently released FixMeStick PRO with me. This Pro is the best remote malware remediation product we've seen. It retails for $299.99 per year, or $209.99 for the first 50 'The Hacker News' readers use coupon code 'THNFIX' for...

FixMeStick PRO : Best remote malware remediation product

This week Corey and Marty over at FixMeStick shared the specs of their recently released FixMeStick PRO with me. This Pro is the best remote malware remediation product we've seen. It retails for $299.99 per year, or $209.99 for the first 50 'The Hacker News' readers use coupon code 'THNFIX' for...

CVE-2012-3713

Apple Safari before 6.0.1 does not properly handle the Quarantine attribute of HTML documents, which allows user-assisted remote attackers to read arbitrary files by leveraging the presence of a downloaded document...

Design/Logic Flaw

Apple Safari before 6.0.1 does not properly handle the Quarantine attribute of HTML documents, which allows user-assisted remote attackers to read arbitrary files by leveraging the presence of a downloaded document...

CVE-2012-3713

CVE-2012-3713 — Safari local file disclosure . Affected: Apple Safari before 6.0.1 on macOS. Root cause: Safari’s handling of the Quarantine attribute for downloaded HTML documents could fail to trigger safe mode, enabling a local file’s content to be read via a user-opened downloaded document. I...

CVE-2012-3713

Apple Safari before 6.0.1 does not properly handle the Quarantine attribute of HTML documents, which allows user-assisted remote attackers to read arbitrary files by leveraging the presence of a downloaded document...

Apple Safari Arbitrary Code Execution

No description provided by source. CVE: CVE-2011-3230 Found By: Aaron Sigel of vtty.com There's not a ton to say about this bug aside from "Yikes"! I think the PoC speaks for itself. This allows you to send any "file:" url to LaunchServices, which will run binaries, launch applications, or open...

CA Total Defense Suite - reGenerateReports Stored procedure SQL Injection (Metasploit)

$Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001)

This host is missing an important security update according to Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-001.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.6 Multiple Vulnerabilities 2011-001 Authors: Antu Sanadi Copyright:...

Mac OS X v10.6.7 Multiple Vulnerabilities (2011-003)

This host is missing an important security update according to Mac OS X 10.6.7 Update/Mac OS X Security Update 2011-003. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-003.nasl 7024 2017-08-30 11:51:43Z teissa $ Mac OS X v10.6.7 Multiple Vulnerabilities 2011-003 Authors: Antu Sanadi Copyright:...

Mac OS X v10.6.7 Multiple Vulnerabilities (2011-003)

This host is missing an important security update according to Mac OS X 10.6.7 Update/Mac OS X Security Update 2011-003. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mac OS X Multiple Vulnerabilities (Security Update 2011-003)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2011-003 applied. This security update contains fixes for the following issues : - A definition for OSX.MacDefender.A has been added to the malware check within File Quarantine. - The system will now check...