CVE-2013-4479

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

CVE-2013-4478

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

CVE-2013-4479

CVE-2013-4479 affects the Sup email client: vulnerable component is lib/sup/message_chunks.rb. Exposed in versions before 0.13.2.1 and 0.14.x before 0.14.1.1, allowing remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment. Impact is rem...

Threat Outbreak Alert: Fake Account Statement Information Email Messages on December 5, 2013

Medium Alert ID: 32055 First Published: 2013 December 6 20:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account statement for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Product Catalog Email Messages on March 26, 2014

Medium Alert ID: 32054 First Published: 2013 December 6 19:01 GMT Last Updated: 2014 March 27 12:56 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product catalogue for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Payment Request Email Messages on December 5, 2013

Medium Alert ID: 32056 First Published: 2013 December 6 18:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain a payment request notification for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake File Attachment Notification Email Messages on December 5, 2013

Medium Alert ID: 32062 First Published: 2013 December 6 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a file for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Mortgage Update Information Email Messages on December 6, 2013

Medium Alert ID: 32063 First Published: 2013 December 6 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain mortgage details for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Document Attachment Email Messages on December 4, 2013

Medium Alert ID: 32046 First Published: 2013 December 5 19:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain document for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on December 4, 2013

Medium Alert ID: 32050 First Published: 2013 December 5 19:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message attempts to convince the recipient to...

XSS when attaching a file to an issue

Hi, I found a persistent XSS vulnerability when attaching a file to an issue. The steps to reproduce are the following : - Attach a file to an issue. Its name must contain "alert'XSS'". I used a python script to do that. - Browse to the issue and open the ALL tab under activity. A popup should...

XSS when attaching a file to an issue

Hi, I found a persistent XSS vulnerability when attaching a file to an issue. The steps to reproduce are the following : - Attach a file to an issue. Its name must contain "alert'XSS'". I used a python script to do that. - Browse to the issue and open the ALL tab under activity. A popup should...

XSS when attaching a file to an issue

Hi, I found a persistent XSS vulnerability when attaching a file to an issue. The steps to reproduce are the following : - Attach a file to an issue. Its name must contain "alert'XSS'". I used a python script to do that. - Browse to the issue and open the ALL tab under activity. A popup should...

Threat Outbreak Alert: Fake Purchase Invoice Email Messages on December 4, 2013

Medium Alert ID: 32014 First Published: 2013 December 4 22:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase invoice for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Tax Document Email Messages on December 4, 2013

Medium Alert ID: 32016 First Published: 2013 December 4 22:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax document for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake RV Application Notification Email Messages on December 4, 2013

Medium Alert ID: 32017 First Published: 2013 December 4 22:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an application notification for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Loan Information Email Messages on December 3, 2013

Medium Alert ID: 32009 First Published: 2013 December 4 16:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain loan information for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Email Messages with Malicious Attachments on December 4, 2013

Medium Alert ID: 32007 First Published: 2013 December 4 16:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on November 26, 2013

Medium Alert ID: 31919 First Published: 2013 December 3 20:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment. The email message attempts to convince the recipient to open the attachment.The .zip attachment...

Threat Outbreak Alert: Fake Purchase Order Request Email Messages on December 3, 2013

Medium Alert ID: 31996 First Published: 2013 December 3 19:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to persuade the recipient t...