Threat Outbreak Alert: Fake Resume Delivery Email Messages on October 24, 2013

Medium Alert ID: 31486 First Published: 2013 October 24 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a resume for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on October 23, 2013

Medium Alert ID: 31480 First Published: 2013 October 24 14:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the email message attempts to convince the recipien...

CVE-2013-1734

Cross-site request forgery CSRF vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that commit an attachment change via a...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that commit an attachment change via a...

CVE-2013-1734

Cross-site request forgery CSRF vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that commit an attachment change via a...

Missing access controls in loadattachmentversions action

The loadattachmentsversions action is accessible to any user of Confluence and returns version history information for an attachment. No access controls appear to be implemented for this action and any user of Confluence can obtain version history for any attachment, including those on pages in...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on October 23, 2013

Medium Alert ID: 31475 First Published: 2013 October 23 20:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a money transfer notification for the recipient. The email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Xerox Scanned Attachment Email Messages on October 23, 2013

Medium Alert ID: 31476 First Published: 2013 October 23 20:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document from a Xerox WorkCentre device for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on October 23, 2013

Medium Alert ID: 31477 First Published: 2013 October 23 19:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Email Messages with Malicious File Attachments on October 23, 2013

Medium Alert ID: 31440 First Published: 2013 October 23 16:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment f...

Threat Outbreak Alert: Fake Account Information Documentation Email Messages on October 21, 2013

Medium Alert ID: 31429 First Published: 2013 October 23 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain account information for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Product Purchase Order Email Messages on November 8, 2013

Medium Alert ID: 31431 First Published: 2013 October 23 14:01 GMT Last Updated: 2013 November 8 21:16 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order notification for the recipient. The text in the email...

Threat Outbreak Alert: Fake Account Transfer Notice Email Messages on October 23, 2013

Medium Alert ID: 31432 First Published: 2013 October 23 13:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transaction notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 23, 2013

Medium Alert ID: 31433 First Published: 2013 October 23 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment...

Threat Outbreak Alert: Fake Bank Transfer Notice Email Messages on October 22, 2013

Medium Alert ID: 31428 First Published: 2013 October 23 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank wire transfer from HSBC. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Picture Sharing Email Messages on October 23, 2013

Medium Alert ID: 31437 First Published: 2013 October 23 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a picture for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Scanned Documents Notification Email Messages on October 21, 2013

Medium Alert ID: 31396 First Published: 2013 October 22 20:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain scanned documents for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on October 21, 2013

Medium Alert ID: 31398 First Published: 2013 October 22 20:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain money transfer details for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Business Document Email Messages on October 22, 2013

Medium Alert ID: 31399 First Published: 2013 October 22 20:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain business documents for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Wire Transfer Notification Email Messages on October 22, 2013

Medium Alert ID: 31413 First Published: 2013 October 22 19:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a wire transfer notification for the recipient. The text in the email message attempts to convince the recipie...