Stack overflow

Stack-based buffer overflow in the pharfixfilepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling...

Threat Outbreak Alert RuleID20194: Email Messages Distributing Malicious Software on December 20, 2015

Medium Alert ID: 42798 First Published: 2015 December 21 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20194 may contain the following files: Name |...

The EPS Awakens

On September 8, FireEye published details about an attack exploiting zero day vulnerabilities in Microsoft Office CVE-2015-2545 and Windows CVE-2015-2546. The attack was particularly notable because it leveraged PostScript to drive memory corruption in a way that had never been seen before. The...

Threat Outbreak Alert RuleID20067: Email Messages Distributing Malicious Software on December 12, 2015

Medium Alert ID: 42656 First Published: 2015 December 14 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20067 and RuleID20067KVR may contain the...

Threat Outbreak Alert RuleID20063: Email Messages Distributing Malicious Software on December 13, 2015

Medium Alert ID: 42650 First Published: 2015 December 14 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20063 may contain the following files: Name |...

Microsoft Outlook Embedded OLE Object (MS15-131: CVE-2015-6172)

A sandbox bypass vulnerability, known as BadWinMail, exists in Microsoft Outlook. The vulnerability is due to the support provided by Outlook for two file formats that are being parsed automatically by Outlook which does not run under a sandbox and has medium integrity level. A remote attacker ca...

SimpleBB 4.2 Shell Upload

SimpleBB 4.2 + All ver upload Vulnerability ========================================== Author : indoushka Vondor : http://themeforest.net/item/simple-bulletin-board/58838?ref=themac Dork : SBB V4.2 ========================= 1 register in forum 2 Creat a new topic 3 Attachment a php file to downol...

Multiple Vulnerabilities in e-cology, Panmicro's Collaborative Application Management Platform

Collaborative management application platform e-cology is a set of collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management and...

Threat Outbreak Alert RuleID19830: Email Messages Distributing Malicious Software on December 10, 2015

Medium Alert ID: 42465 First Published: 2015 December 3 13:19 GMT Last Updated: 2015 December 11 13:30 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19830...

Threat Outbreak Alert RuleID19771: Email Messages Distributing Malicious Software on December 1, 2015

Medium Alert ID: 42422 First Published: 2015 December 1 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19771 may contain the following files: Name |...

Threat Outbreak Alert RuleID19637: Email Messages Distributing Malicious Software on November 29, 2015

Medium Alert ID: 42303 First Published: 2015 November 30 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19637 may contain the following files: Name |...

Threat Outbreak Alert RuleID19654: Email Messages Distributing Malicious Software on November 29, 2015

Medium Alert ID: 42298 First Published: 2015 November 30 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19654 may contain the following files: Name |...

Samsung Android 5. 0 device WifiCredService remote code execution-vulnerability warning-the black bar safety net

The vulnerability is in a few months ago is Google Project Zero and the Quarkslab team found, has only recently been disclosed. The vulnerability only requires the user to browse a website or download a mail attachment or by the basic will not have any rights of a third party malicious programs c...

PT-2015-6840 · Red Hat +1 · Libreport +2

Name of the Vulnerable Software and Affected Versions: libreport versions 2.0.7 through 2.6.3 Description: The issue allows remote attackers to obtain sensitive information via unspecified vectors related to the backtrace, cmdline, environ, open fds, maps, smaps, hostname, remote, ks.cfg, or...

Threat Outbreak Alert RuleID19462: Email Messages Distributing Malicious Software on November 18, 2015

Medium Alert ID: 42154 First Published: 2015 November 18 21:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19462 may contain the following files: Name |...

Threat Outbreak Alert RuleID19365: Email Messages Distributing Malicious Software on November 12, 2015

Medium Alert ID: 42067 First Published: 2015 November 13 15:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19365 may contain the following files: Name |...

Threat Outbreak Alert RuleID19310: Email Messages Distributing Malicious Software on November 10, 2015

Medium Alert ID: 42029 First Published: 2015 November 10 23:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19310 may contain the following files: Name |...

Cisco Email Security Appliance Email Scanner Denial of Service Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an ESA device to become unavailable due to a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2015-07403)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. Cisco AsyncOS message filters are configured with a variety of rules that incorrectly process malformed fields. a remote attacker can construct attachments to special messag...

Design/Logic Flaw

Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance ESA devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and...