6721 matches found
CVE-2017-15205
In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user...
Threat Outbreak Alert RuleID30902: Email Messages Distributing Malicious Software on October 10, 2017
Medium Alert ID: 55562 First Published: 2017 October 10 11:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30902 may contain the following files: Name |...
CVE-2017-15209
Summary: CVE-2017-15209 affects Kanboard prior to 1.0.47. An authenticated user can remove attachments from another user’s private project by altering form data. Impact (as stated): authenticated user can remove attachments in a private project of another user. Technical details (from connected d...
CVE-2017-15205
In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user...
CVE-2017-15205
In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user...
CVE-2017-15209
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user...
Mail.ru: touch.mail.ru/messages - Stored XSS
XSS in touch.mail.ru image preview feature via crafted attachment filename...
Threat Outbreak Alert RuleID30808: Email Messages Distributing Malicious Software on September 29, 2017
Medium Alert ID: 55429 First Published: 2017 September 29 19:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30808 may contain the following files: Name ...
Banking Trojan Attempts To Steal Brazillion$
This post was authored by Warren Mercer, Paul Rascagneres and Vanja SvajcerIntroductionBanking trojans are among some of the biggest threats to everyday users as they directly impact the user in terms of financial loss. Talos recently observed a new campaign specific to South America, namely...
Threat Outbreak Alert RuleID30750: Email Messages Distributing Malicious Software on September 27, 2017
Medium Alert ID: 55393 First Published: 2017 September 27 17:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30750 may contain the following files: Name ...
Kaspersky: Keys
Check the attachment...
Malicious Embedded Executable Downloader
Many campaigns are known to use mail attachments containing double zipped files. A remote attacker could convince users to manually trigger their execution. This would allow the malicious code to run and infect the target system...
Remote code execution
Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to...
Cisco Email Security Appliance Malformed EML Attachment Bypass Vulnerability (cisco-sa-20170906-esa)
According to its self-reported version, the Cisco Email Security Appliance ESA is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...
Cisco Email Security Appliance Malformed EML Attachment Bypass Vulnerability
A vulnerability in the malware detection functionality within Advanced Malware Protection AMP of Cisco AsyncOS Software for Cisco Email Security Appliances ESAs could allow an unauthenticated, remote attacker to cause an email attachment containing malware to be delivered to the end user. The...
CVE-2017-14146
CVE-2017-14146 affects HelpDEZk 1.1.1 and enables remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it from the helpdezk\app\uploads\helpdezk\attachments\ directory. The available sources confirm this file-upload vulnerability and PHP code...
CVE-2017-14146
HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\app\uploads\helpdezk\attachments\ directory...
Reflected Cross-Site Scripting Vulnerability in ZYCHCMS V06 admin_Attachment.asp Page
ZYCHCMS is an enterprise website management system. A reflective cross-site scripting vulnerability exists in the /admin/adminAttachment.asp page in ZYCHCMS version V06. An attacker can construct XSS statements to pop-up boxes and obtain sensitive information such as user cookies...