Code injection

The WS-Security implementation in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly...

CVE-2013-4053

CVE-2013-4053 refers to IBM WebSphere Application Server WS-Security with XML Digital Signature using a trust store, where improper certificate verification could let a remote attacker gain privileged access. Affected products/versions include WebSphere Application Server 8.5, 8.0, 7.0, and 6.1 (...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on September 19, 2013

Medium Alert ID: 30920 First Published: 2013 September 20 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the...

IBM WebSphere Application Server 6.1 < Fix Pack 47 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 47 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - A remote attacker can bypass authentication because of improper user validation on Linux, Solaris, and HP-UX platforms that us...

Threat Outbreak Alert: Fake Invoice Statement Attachment Email Messages on September 19, 2013

Medium Alert ID: 30888 First Published: 2013 September 19 18:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an invoice statement for the recipient. The text in the email message attempts to convin...

Threat Outbreak Alert: Malicious Attachment Email Messages on September 16, 2013

Medium Alert ID: 30835 First Published: 2013 September 17 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Processed Payment Notification Email Messages on September 9, 2013

Medium Alert ID: 30705 First Published: 2013 September 9 18:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment processing notification for the recipient. The text in the email message attempts to convince the...

Java: XML signature spoofing

A flaw was found in the way Apache Santuario XML Security for Java validated XML signatures. Santuario allowed a signature to specify an arbitrary canonicalization algorithm, which would be applied to the SignedInfo XML fragment. A remote attacker could exploit this to spoof an XML signature via ...

Threat Outbreak Alert: Fake Product List Attachment Email Messages on September 7, 2013

Medium Alert ID: 30688 First Published: 2013 September 9 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product list attachment for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Account Deposit Notification Email Messages on September 9, 2013

Medium Alert ID: 30691 First Published: 2013 September 9 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account deposit notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Bank Deposit Notification Email Messages on September 5, 2013

Medium Alert ID: 30680 First Published: 2013 September 6 19:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank deposit notification. The email message attempts to convince the recipient to open the attachment to...

Threat Outbreak Alert: Fake Invoice Notification Email Messages on September 4, 2013

Medium Alert ID: 30649 First Published: 2013 September 4 18:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Product Information Request Notification Email Messages on September 3, 2013

Medium Alert ID: 30643 First Published: 2013 September 4 14:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a product information request notification for the recipient. The text in the email message attempts to...

MGASA-2013-0270 Updated roundcubemail package fixes security vulnerability

XSS vulnerabilities when saving HTML signatures and when editing a message "as new" or draft in roundcubemail before 0.9.3 CVE-2013-5645...

Updated roundcubemail package fixes security vulnerability

XSS vulnerabilities when saving HTML signatures and when editing a message "as new" or draft in roundcubemail before 0.9.3 CVE-2013-5645...

Threat Outbreak Alert: Fake Product List Confirmation Email Messages on August 29, 2013

Medium Alert ID: 30634 First Published: 2013 September 3 18:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a list of products for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Purchase Order Request Email Messages on September 2, 2013

Medium Alert ID: 30630 First Published: 2013 September 3 17:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Purchase Order Request Email Messages on August 29, 2013

Medium Alert ID: 30543 First Published: 2013 August 29 16:51 GMT Last Updated: 2013 August 29 19:05 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the message body...

Threat Outbreak Alert: Fake Shipping Information Email Messages on August 29, 2013

Medium Alert ID: 30544 First Published: 2013 August 29 15:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed package delivery notification from DHL Global for the recipient. The text in the message body attempts...

Threat Outbreak Alert: Fake Product Purchase Order Email Messages on August 28, 2013

Medium Alert ID: 30530 First Published: 2013 August 29 11:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order for the recipient. The text in the email message attempts to convince the recipient to...