Threat Outbreak Alert: Email Messages with Malicious Attachment on May 27, 2014

Medium Alert ID: 34370 First Published: 2014 May 27 19:20 GMT Last Updated: 2014 May 29 12:59 GMT Version: 2 Summary Cisco Security has detected significant activity related to German-language spam email messages that contain an attachment for the recipient. The email message attempts to convince...

Threat Outbreak Alert: Fake Scanned Document Attachment Email Messages on May 27, 2014

Medium Alert ID: 34369 First Published: 2014 May 27 19:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Fax Message Response Notification Email Messages on May 27, 2014

Medium Alert ID: 34368 First Published: 2014 May 27 19:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message response for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Registration Application Notification Email Messages on May 27, 2014

Medium Alert ID: 34367 First Published: 2014 May 27 19:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a registration application for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake New Purchase Order Confirmation Email Messages on May 27, 2014

Medium Alert ID: 34366 First Published: 2014 May 27 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a new purchase order for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Prize Winner Announcement Email Messages on May 27, 2014

Medium Alert ID: 34364 First Published: 2014 May 27 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to Romanian-language spam email messages that claim to contain a prize for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on May 27, 2014

Medium Alert ID: 34363 First Published: 2014 May 27 19:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a money transfer notice for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on May 27, 2014

Medium Alert ID: 34362 First Published: 2014 May 27 19:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a money transfer notice for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 27, 2014

Medium Alert ID: 34361 First Published: 2014 May 27 17:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order request for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on May 27, 2014

Medium Alert ID: 34360 First Published: 2014 May 27 16:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Email Messages Distributing Malicious Code on May 27, 2014

Medium Alert ID: 34359 First Published: 2014 May 27 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages related to bank fraud. The email message attempts to persuade the recipient to open the attachment for details. However, the .zip...

CVE-2013-2090

The Creme Fraiche Ruby gem (pre-0.6.1) is vulnerable to OS command injection via unsanitized file names in email attachments, enabling remote execution of arbitrary commands. Root cause: set_meta_data processes attachment filenames without proper validation, allowing shell metacharacters to pass ...

CVE-2013-2090

The setmetadata function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an email attachment. NOTE: some of these details are obtained from third party information...

Information disclosure

The setmetadata function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an email attachment. NOTE: some of these details are obtained from third party information...

Threat Outbreak Alert: Email Messages with Malicious Attachment on May 27, 2014

Medium Alert ID: 34357 First Published: 2014 May 27 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invitation for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Invoice Payment Notice Email Messages on May 27, 2014

Medium Alert ID: 34355 First Published: 2014 May 27 13:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment slip notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Bank Account Transfer Notification Email Messages on May 27, 2014

Medium Alert ID: 34352 First Published: 2014 May 27 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account transfer notification for the recipient. The email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Order Invoice Shipping Information Email Messages on May 27, 2014

Medium Alert ID: 34351 First Published: 2014 May 27 13:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping information invoice for the recipient. The email message attempts to convince the recipient to open the...

CVE-2014-0824

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140321-1336 and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB 7....

Coremail邮件系统存储型XSS之二

简要描述： 设计错误导致可执行恶意JavaScript代码并窃取用户cookies 详细说明： 将特制的swf文件作为附件发送给受害者（这里可以选择在过节的时候下手，比如将文件名改称新年贺卡.swf）： swf文件的AS代码如下（将就着看吧，东拼西凑整出来的）： package import flash.external.ExternalInterface; import flash.display.Sprite; import flash.display.Sprite; import flash.events.Event; import flash.net.URLLoader;...