Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A security vulnerability exists in Trend Micro IWSVA version 6.5. The vulnerability can be...

Trend Micro InterScan Web Security Virtual Appliance Remote Code Execution Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A remote command execution vulnerability exists in Trend Micro IWSVA version 6.5. The...

Trend Micro InterScan Web Security Virtual Appliance Information Disclosure Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A sensitive information disclosure vulnerability exists in Trend Micro IWSVA version 6.5...

Threat Outbreak Alert RuleID27865: Email Messages Distributing Malicious Software on February 16, 2017

Medium Alert ID: 52675 First Published: 2017 February 16 14:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27865 may contain the following files: Name |...

Threat Outbreak Alert RuleID27862: Email Messages Distributing Malicious Software on February 16, 2017

Medium Alert ID: 52674 First Published: 2017 February 16 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27862 may contain the following files: Name |...

Threat Outbreak Alert RuleID27673: Email Messages Distributing Malicious Software on February 16, 2017

Medium Alert ID: 52673 First Published: 2017 February 16 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27673 may contain the following files: Name |...

Threat Outbreak Alert RuleID27852: Email Messages Distributing Malicious Software on February 16, 2017

Medium Alert ID: 52672 First Published: 2017 February 16 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27852 may contain the following files: Name |...

Threat Outbreak Alert RuleID27827: Email Messages Distributing Malicious Software on February 16, 2017

Medium Alert ID: 52671 First Published: 2017 February 16 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27827 may contain the following files: Name |...

Trend Micro InterScan Web Security Virtual Appliance 6.5 Multiple Vulnerabilities

Trend Micro has released a new build of Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5. This build resolves vulnerabilities in the product that could potentially allow a remote attacker to execute artibtrary code on vulnerable installations. SPDX-FileCopyrightText: 2017 Greenbone ...

Threat Outbreak Alert RuleID27867: Email Messages Distributing Malicious Software on February 15, 2017

Medium Alert ID: 52670 First Published: 2017 February 15 15:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27867 may contain the following files: Name |...

Threat Outbreak Alert RuleID27818: Email Messages Distributing Malicious Software on February 15, 2017

Medium Alert ID: 52667 First Published: 2017 February 15 14:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27818 may contain the following files: Name |...

CVE-2017-5990

PhreeBooksERP (pre-2017-02-13) both ShippingMethods/ups/label_mgr/js_include.php and ShippingMethods/yrc/label_mgr/js_include.php suffer from insufficient filtration of user-supplied data in the form GET parameter. This allows an attacker to trigger arbitrary HTML/JavaScript in a victim’s browser...

Joomla! Component JoomBlog 1.3.1 - SQL Injection

Joomla! Component JoomBlog 1.3.1 - SQL Injection Exploit Title: Joomla! Component JoomBlog v1.3.1 - SQL Injection Google Dork: inurl:index.php?option=comjoomblog Date: 15.02.2017 Vendor Homepage: http://joomplace.com/ Software Buy:...

Trendmicro InterScan Privilege Escalation Vulnerability

Vulnerability Details Affected Vendor: Trendmicro Affected Product: InterScan Web Security Virtual Appliance Affected Version: OS Version 3.5.1321.el6.x8664; Application Version 6.5-SP2BuildLinux1548 Platform: Embedded Linux CWE Classification: CWE-269: Improper Privilege Management Impact:...

Threat Outbreak Alert RuleID27760: Email Messages Distributing Malicious Software on February 14, 2017

Medium Alert ID: 52655 First Published: 2017 February 14 21:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27760 may contain the following files: Name |...

PortSwigger Web Security: Email Spoofing

There is an Email Spoofing Vulnerability. Steps to reproduce: 1 Go to http://emkei.cz/ 2 Fill "From Email" field to [email protected] or any other portswigger email. 3 Fill the victim's address your address to "TO" field and fill in other details as you wish. You will receive email from...

Threat Outbreak Alert RuleID27817: Email Messages Distributing Malicious Software on February 14, 2017

Medium Alert ID: 52657 First Published: 2017 February 14 14:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27817 may contain the following files: Name |...

Threat Outbreak Alert RuleID27813: Email Messages Distributing Malicious Software on February 14, 2017

Medium Alert ID: 52656 First Published: 2017 February 14 14:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27813 may contain the following files: Name |...

Joomla JE K2 Multiple Form Story 1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE K2 Multiple Form Story v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjek2storymultipleform Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

CVE-2017-5157

An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code...