CVE-2015-6942

Cross-site scripting XSS vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment...

Threat Outbreak Alert RuleID30280: Email Messages Distributing Malicious Software on August 22, 2017

Medium Alert ID: 54913 First Published: 2017 August 22 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30280 may contain the following files: Name |...

GLSA-201708-02 : TNEF: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201708-02 TNEF: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TNEF. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a specially...

WordPress Attachment Manager Plugin <= 2.1.1 - Arbitrary File Upload Vulnerability

WordPress Attachment Manager Plugin Arbitrary File Upload Vulnerability is prone to a Arbitrary File Upload Vulnerability. In the function handeactions, it's missing an additional check for "page" and "wamaddicon" GET variables. Solution Update the plugin...

Threat Outbreak Alert RuleID29930: Email Messages Distributing Malicious Software on August 7, 2017

Medium Alert ID: 54752 First Published: 2017 August 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29930 may contain the following files: Name | Si...

Security Updates for Outlook (July 2017)

The Microsoft Office or Outlook application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Microsoft Office due to improper handling of user-supplied input. An...

HawkEye Credential Theft Malware Distributed in Recent Phishing Campaign

A wide variety of threat actors began distributing HawkEye malware through high-volume email campaigns after it became available for purchase via a public-facing website. The actors behind the phishing campaigns typically used email themes based on current events and media reports that would piqu...

HawkEye Credential Theft Malware Distributed in Recent Phishing Campaign

A wide variety of threat actors began distributing HawkEye malware through high-volume email campaigns after it became available for purchase via a public-facing website. The actors behind the phishing campaigns typically used email themes based on current events and media reports that would piqu...

Threat Outbreak Alert RuleID29868: Email Messages Distributing Malicious Software on July 21, 2017

Medium Alert ID: 54541 First Published: 2017 July 21 13:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29868 may contain the following files: Name | Siz...

CVE-2016-7509

Cross-site scripting XSS vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket...

CVE-2016-7509

Cross-site scripting XSS vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket...

jolana.cz XSS vulnerability

Vulnerable URL: http://www.jolana.cz/wp-content/plugins/attachment-images/image.php?path=http://www.jolana.cz/images/0220.jpg=Studio+bass=%22/%3E%3CsvG/onLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017 Vulnerability type:| XSS...

Watch Out for Malware If You're Interested in North Korean Missile Program

If you hold an interest in the North Korean Missile Program and are one of those curious to know capabilities of the recently tested North Korean long-range missile than you could be a target of a new malware campaign. North Korea claims to have conducted the first test of an intercontinental...

Cisco AsyncOS for Email Security Appliance Attachment MIME Header Handling Filter Bypass (cisco-sa-20170607-esa1)

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by a security bypass vulnerability in the email message scanning functionality due to improper validation of emails with attachments and a modified Multipurpose Internet...

CVE-2017-1176

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299...

websweeper.com XSS vulnerability

Vulnerable URL: http://www.websweeper.com/liner/tank-liner/quote-attachment.php?shape=1"...

attach.farmersinsurance.com XSS vulnerability

Vulnerable URL: https://attach.farmersinsurance.com/icalphp/farmersattachment.php?remainingSizeKB=1"...

Authentication flaw

The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality residen...

CVE-2017-6324

The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality residen...

Mail.ru: XSS bypass Script execute,Read any file,execute any javascript code--UXSS

Mail attachment XSS bypass vulnerability--UXSS Vulnerability impact： Mail.Ru Mail for iOS MyMail for iOS explain: Mail app supports HTML attachments, however，Cannot execute javascript. for example alert/xss/ These statements can not be executed in the html attachments...LOL However, the addition ...