CVE-2013-7081

The old Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors...

Design/Logic Flaw

The old Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors...

CVE-2013-7081

The old Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors...

UBUNTU-CVE-2013-7081

The old Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors...

Threat Outbreak Alert: Fake Product Purchase Details Email Messages on December 22, 2013

Medium Alert ID: 32260 First Published: 2013 December 23 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain product purchase details for the recipient. The text in the email message attempts to convin...

[SECURITY] Fedora 20 Update: gnupg-1.4.16-2.fc20

GnuPG GNU Privacy Guard is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with...

Threat Outbreak Alert: Fake Personal Photos Email Messages on December 19, 2013

Medium Alert ID: 32248 First Published: 2013 December 20 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain personal photographs for the recipient. The text in the email message attempts to convince t...

Threat Outbreak Alert: Fake Product Inquiry Email Messages on December 18, 2013

Medium Alert ID: 32240 First Published: 2013 December 19 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product inquiry for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Voice Message Notification Email Messages on December 18, 2013

Medium Alert ID: 32215 First Published: 2013 December 18 16:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on December 17, 2013

Medium Alert ID: 32192 First Published: 2013 December 17 17:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a photograph for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on December 16, 2013

Medium Alert ID: 32183 First Published: 2013 December 17 00:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to a photo for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Bank Account Security Information Email Messages on December 11, 2013

Medium Alert ID: 32137 First Published: 2013 December 13 05:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain online banking safety information for the recipient. The text in the email message attempts t...

Threat Outbreak Alert: Fake Continuing Education Credits Notification Email Messages on December 12, 2013

Medium Alert ID: 32143 First Published: 2013 December 12 20:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain continuing education credit information for dental consultants for the recipient. The text in...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on December 10, 2013

Medium Alert ID: 32118 First Published: 2013 December 11 16:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The text in the email message attempts to convince the recipient t...

MS KB2871690: Update to Revoke Non-compliant UEFI Modules

The remote host is missing Microsoft KB2871690, an update that revokes the digital signatures of nine third-party UEFI modules. This update prevents the modules from being loaded on systems where UEFI Secure Boot is enabled. C Tenable Network Security, Inc. include"compat.inc"; if description...

Threat Outbreak Alert: Fake Software Offer Email Messages on December 9, 2013

Medium Alert ID: 32100 First Published: 2013 December 10 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a software offer notification for the recipient. The text in the email message attempts to convince the...

PT-2013-1328

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the WinVerifyTrust function in Windows, which is associated with the improper verification of PE file digests during Authenticode signature checking. This can allow a...

Threat Outbreak Alert: Fake Payment Notice Email Messages on December 6, 2013

Medium Alert ID: 32069 First Published: 2013 December 9 20:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a payment notice for the recipient. The text in the e-mail message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on December 9, 2013

Medium Alert ID: 32092 First Published: 2013 December 9 19:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to persuade the recipient to open the attachment...

Threat Outbreak Alert: Fake Invoice Notification Email Messages on December 9, 2013

Medium Alert ID: 32090 First Published: 2013 December 9 17:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to convince...