Threat Outbreak Alert: Fake Information Sharing Notification Email Messages on November 10, 2013

Medium Alert ID: 31699 First Published: 2013 November 11 20:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain information for the recipient. The text in the e-mail message attempts to convince the recipient to follow a...

Pydio / AjaXplorer 5.0.3 Shell Upload

Vulnerability in Pydio/AjaXplorer = 5.0.3 ============ Background: Pydio allows you to instantly turn any server into a powerful file sharing platform. Formerly known as AjaXplorer ============ Description of vulnerability There is an unrestricted upload capability, in one of the plugins that is...

China: 'We are ready for International cooperation to deal with cyber security Challenges'

Yesterday at Stanford University in the United States, Cyber Security Experts and Leaders from more than 40 countries gathered to talk about the cyberspace security problems and cooperation among countries. The need for international cooperation in cybersecurity is evident, due to the nature of...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on November 2, 2013

Medium Alert ID: 31600 First Published: 2013 November 4 22:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain personal photos for the recipient. The text in the email message attempts to convince the recipient to open th...

CVE-2013-2701

Cross-site request forgery CSRF vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors...

CVE-2013-2701

The CVE concerns the WordPress plugin Social Sharing Toolkit version 2.1.1, where a Cross-Site Request Forgery (CSRF) vulnerability allows remote attackers to hijack administrator sessions and perform plugin-setting changes. The root cause is CSRF in the plugin’s handling of requests that mutate ...

Threat Outbreak Alert: Fake Online Picture Sharing Email Messages on October 30, 2013

Medium Alert ID: 31569 First Published: 2013 October 31 14:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain personal pictures for the recipient. The text in the email message attempts to convince the recipient to open...

CVE-2013-6280

Cross-site scripting XSS vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6280

Cross-site scripting XSS vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6280

CVE-2013-6280 describes an XSS vulnerability in the WordPress plugin Social Sharing Toolkit prior to version 2.1.2. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, with impact described as enabling partial integrity compromise and no confidentialit...

WordPress Social Sharing Toolkit Plugin <= 2.1.1 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via unspecified vectors. Solution Update the plugin...

CVE-2013-5135

CVE-2013-5135 targets Apple Mac OS X prior to 10.9 and Apple Remote Desktop prior to 3.5.4. The issue is a format string vulnerability in Screen Sharing Server that permits remote code execution via format string specifiers in a VNC username. Impact is remote execution of arbitrary code with netw...

CVE-2013-5135

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username...

Threat Outbreak Alert: Fake Picture Sharing Email Messages on October 23, 2013

Medium Alert ID: 31437 First Published: 2013 October 23 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a picture for the recipient. The text in the email message attempts to convince the recipient to open the...

Mac OS X 10.x < 10.9 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.x that is prior to version 10.9. The newer version contains multiple security-related fixes for the following components : - Application Firewall - App Sandbox - Bluetooth - CFNetwork - CFNetwork SSL - Console - CoreGraphics - curl - dyld -...

Experian Sells Data to Identity theives

The credit bureau Experian appears to have sold an unknown amount of highly sensitive personal information to a Vietnamese national who maintained an online identity theft service, according to a long-running investigative report published by Krebs on Security reporter Brian Krebs. Experian, whic...

Threat Outbreak Alert: Fake Image Sharing Email Messages on October 17, 2013

Medium Alert ID: 31217 First Published: 2013 October 11 18:33 GMT Last Updated: 2013 October 17 18:43 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an image for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on October 11, 2013

Medium Alert ID: 31223 First Published: 2013 October 11 18:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to convince the recipient t...