Cross site scripting

An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...

CVE-2018-14397

An issue was discovered in Creme CRM 1.6.12. The organization creation page is affected by 9 stored cross-site scripting vulnerabilities involving the name, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...

Automotive theft affects shipping security

Cars and ships – there’s not that much in common with two areas that we carry out a lot of research in to. One uses CAN for safety critical controls, the other uses serial and +/- 10V. Yet, security of the two sectors is linked through vehicle theft and fraud: Most modern vehicles have telematic...

COSCO incident. Phishing frenzy and exploding goods?

If you haven’t seen the coverage, COSCO the world’s 4th largest shipping line has had a ransomware outbreak. Sounds terribly familiar, doesn’t it. One wonders why on earth they didn’t carry out a thorough review after the Maersk incident, so as to be rather better prepared. Phishing time Breaches...

Podcast: Breaking Down the COSCO Ransomware Attack

Last week, shipping giant COSCO China Ocean Shipping Company announced it was hit with a ransomware attack that crippled its U.S. operations. The company’s phone and email for its U.S. branch were down for five days, and have now been restored. Threatpost talks to Matt Tyrer with Commvault about...

Threat Outbreak Alert RuleID33085: Email Messages Distributing Malicious Software on July 3, 2018

Medium Alert ID: 58337 First Published: 2018 July 3 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33085 may contain the following files: Name | Size...

Shipping System CMS SQL Injection Vulnerability

Shipping System CMS is a shipping management system. Shipping System CMS suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to execute arbitrary SQL statements...

Threat Outbreak Alert RuleID32913: Email Messages Distributing Malicious Software on June 7, 2018

Medium Alert ID: 58067 First Published: 2018 June 7 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32913 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32665: Email Messages Distributing Malicious Software on May 02, 2018

Medium Alert ID: 57705 First Published: 2018 May 2 18:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32665 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID32566: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57585 First Published: 2018 April 26 19:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32566 may contain the following files: Name | Si...

Gold Galleon Hacking Group Plunders Shipping Industry

SAN FRANCISCO – Researchers have identified the hacking group behind several widescale business email compromise BEC attacks gouging the maritime shipping industry millions of dollars since last year. Attackers are taking advantage of the industry’s lax security and the use of outdated computers,...

Joomla Jtag Minicart 4.1.0 SQL Injection

Title: Joomla Jtag Minicart 4.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: https://joomlatag.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/jtag-minicart/ Product: 'Joomla Jtag Minicart 4.1.0' Developer: JoomlaTag Last updated: Jun 06 2016 Compatibility...

Threat Outbreak Alert RuleID31428: Email Messages Distributing Malicious Software on November 24, 2017

Medium Alert ID: 56042 First Published: 2017 November 27 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31428 may contain the following files: Name |...

Threat Outbreak Alert RuleID30010: Email Messages Distributing Malicious Software on July 28, 2017

Medium Alert ID: 54619 First Published: 2017 July 28 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30010 may contain the following files: Name | Siz...

PaulShop - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PaulShop CMS = 2017-03-25 Sql Injection Date: 10-06-2017 Exploit Author: Se0pHpHack3r Vendor Homepage: https://codecanyon.net/item/paulshop-cms-with-shopping-cart-system/18070714 Version: 2017-03-25 1. Description SQL Injection ...

PaulShop - SQL Injection

PaulShop - SQL Injection Exploit Title: PaulShop CMS = 2017-03-25 Sql Injection Date: 10-06-2017 Exploit Author: Se0pHpHack3r Vendor Homepage: https://codecanyon.net/item/paulshop-cms-with-shopping-cart-system/18070714 Version: 2017-03-25 1. Description SQL Injection on Shipping Cost page in Cart...

PaulShop CMS 2017-03-25 SQL Injection

Exploit Title: PaulShop CMS = 2017-03-25 Sql Injection Date: 10-06-2017 Exploit Author: Se0pHpHack3r Vendor Homepage: https://codecanyon.net/item/paulshop-cms-with-shopping-cart-system/18070714 Version: 2017-03-25 1. Description SQL Injection on Shipping Cost page in Cart, with "country" & "weigh...

PaulShop - SQL Injection

Exploit Title: PaulShop CMS = 2017-03-25 Sql Injection Date: 10-06-2017 Exploit Author: Se0pHpHack3r Vendor Homepage: https://codecanyon.net/item/paulshop-cms-with-shopping-cart-system/18070714 Version: 2017-03-25 1. Description SQL Injection on Shipping Cost page in Cart, with "country" & "weigh...

Easter Holiday Phishing Scams and Malware Campaigns

As the Easter holiday approaches, US-CERT reminds users to stay aware of holiday scams and cyber campaigns, which may include: unsolicited shipping notifications that may actually be scams by attackers to solicit personal information phishing scams, electronic greeting cards that may contain...

Threat Outbreak Alert RuleID28479: Email Messages Distributing Malicious Software on March 27, 2017

Medium Alert ID: 53173 First Published: 2017 March 27 13:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28479 may contain the following files: Name | Si...