Threat Outbreak Alert: Fake Account Money Transaction Notification Email Messages on May 7, 2014

Medium Alert ID: 34152 First Published: 2014 May 8 15:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation towards an invoice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Financial Transaction Notification Email Messages on September 7, 2014

Medium Alert ID: 33856 First Published: 2014 April 18 20:03 GMT Last Updated: 2014 September 9 13:22 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a financial transaction notification for the recipient. The text in th...

Threat Outbreak Alert: Fake ACH Transaction Error Report Email Messages on April 2, 2014

Medium Alert ID: 33631 First Published: 2014 April 3 15:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an ACH transaction error report for the recipient. The text in the email message attempts to convince the recipie...

Squid Proxy DNS Response Spoofing (CVE-2005-1519; CVE-2007-3898)

There exists a vulnerability in Squid Web Proxy Cache in the processing of DNS lookups. The flaw is caused by predictable transaction identifiers in DNS requests generated by Squid. A remote attacker may leverage this vulnerability to use spoofed DNS responses to poison the DNS cache on the targe...

Bitcoin Transaction Malleability Flaw Resolved

The so-called transaction malleability software issue blamed for the dissolution of Bitcoin exchange Mt. Gox has been patched. Also, the Bitcoin-QT reference client was also rebranded to Bitcoin Core, in order to clear confusion users might have had between the Bitcoin network and software. Bitco...

Threat Outbreak Alert: Fake Payment Transaction Notification Email Messages on March 18, 2014

Medium Alert ID: 33384 First Published: 2014 March 18 18:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transaction notification for the recipient. The text in the email message attempts to convince the...

Microsoft Disclosed User Content in 10% of U.S. Law Enforcement Requests

Microsoft supplied user content in response to 10.8 percent of the law enforcement requests it received from United States agencies in the second half of 2013. The company got more than 5,600 requests from U.S. agencies in the last six months of the year, and in the vast majority of those–68...

Threat Outbreak Alert: Fake Bank Account Fraud Notification Email Messages on March 3, 2014

Medium Alert ID: 33156 First Published: 2014 March 3 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account fraudulent transaction notice for the recipient. The text in the email message attempts to convinc...

SAP Internet Transaction Server wgate.dll service Parameter XSS - Ver2 (CVE-2003-0749)

A cross-site scripting vulnerability has been reported in SAP Internet Transaction Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

SAP Internet Transaction Server Directory Traversal - Ver2 (CVE-2003-0748)

A directory traversal vulnerability has been reported in wgate.dll for SAP Internet Transaction Server ITS. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

php cloud talent system UC API not initialized injection vulnerability-vulnerability warning-the black bar safety net

Detailed description: api/alipaydual/notifyurl.php requireonce"alipay.config.php"; requireonce"lib/alipaynotify.class.php"; requireoncedirnamedirnamedirnameFILE."/ data/db.config.php"; requireoncedirnamedirnamedirnameFILE."/ include/mysql.class.php"; $db = new mysql$dbconfig'dbhost',...

Threat Outbreak Alert: Fake Account Transfer Notification Email Messages on February 19, 2014

Medium Alert ID: 32926 First Published: 2014 February 19 20:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account transaction notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Wire Transaction Notification Email Messages on February 18, 2014.

Medium Alert ID: 32920 First Published: 2014 February 19 16:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a wire transaction notification for the recipient. The text in the email message attempts to convince the...

CVE-2014-0830

Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname...

CVE-2014-0831

Cross-site request forgery CSRF vulnerability in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data...

CVE-2014-0833

The OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data...

Design/Logic Flaw

The OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step...

Directory traversal

Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value...