CentOS Update for libvirt CESA-2013:0127 centos5

Check for the Version of libvirt OpenVAS Vulnerability Test CentOS Update for libvirt CESA-2013:0127 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Threat Outbreak Alert: Fake Personal Picture Sharing Email Messages on September 4, 2013

Low Alert ID: 27717 First Published: 2013 January 2 15:05 GMT Last Updated: 2013 September 5 14:46 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian language spam email messages that claim to contain personal pictures for the recipient. The text in the ema...

Memory Corruption in QuickTime Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Apple QuickTime software version 7.7.2 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...

phpcms 9.1.12 phpcms-modules-attachment-attachment.php sql注入

No description provided by source...

Threat Outbreak Alert: Fake Product Order Email Messages on March 22, 2015.

Low Alert ID: 27634 First Published: 2012 December 13 15:21 GMT Last Updated: 2015 March 23 12:45 GMT Version: 52 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quote attachment for the recipient. The text in the email...

Gameover Zeus Variant Sends Malicious Email Via Cutwail Botnet

The crew responsible for operating the Gameover variant of the infamous Zeus banking trojan is soliciting the enormous Cutwail botnet’s spamming capacity as an engine to fire off millions of malicious emails that seemingly originate from a number of recognizable U.S. banks. The fraudulent emails...

FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. VID 2b841f88-2e8d-11e2-ad21-20cf30e32f6d OpenVAS Vulnerability Test $ Description: Auto generated from VID 2b841f88-2e8d-11e2-ad21-20cf30e32f6d Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Oracle AutoVue DXF Parsing Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Oracle Autovue software versions 20.1.1 and 20.2. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Oracle...

CVE-2012-4197

Bugzilla/Attachment.pm in attachment.cgi in Bugzilla 2.x and 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 allows remote attackers to read attachment descriptions from private bugs via an obsolete=1 insert action...

CVE-2012-4197

Bugzilla/Attachment.pm in attachment.cgi in Bugzilla 2.x and 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 allows remote attackers to read attachment descriptions from private bugs via an obsolete=1 insert action...

PHPCMS V9 getwebshell exploit-vulnerability warning-the black bar safety net

Without any permission, directly to get WEBSHELL on. ... and Actually. in. There is a condition limit, and have PHP parse the vulnerability of the host to pass to kill。。。。 Vulnerability file: phpcms\modules\attachment\attachments.php Vulnerability function: cropupload if...

File Attachment persistent XSS

There is a persistent XSS vulnerability in the attachment download functionality of Confluence. By uploading a malicious executable file type like SVG scalable vector graphics with embedded JavaScript, it’s possible for an attacker to execute arbitrary code under the context of the logged in user...

File Attachment persistent XSS

There is a persistent XSS vulnerability in the attachment download functionality of Confluence. By uploading a malicious executable file type like SVG scalable vector graphics with embedded JavaScript, it’s possible for an attacker to execute arbitrary code under the context of the logged in user...

Threat Outbreak Alert: Fake Delta E-Ticket Attachment Email Messages on March 29, 2016.

Medium Alert ID: 27100 First Published: 2012 October 3 15:13 GMT Last Updated: 2016 March 29 19:23 GMT Version: 44 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an e-ticket notification for the recipient. The text in the email messag...

Threat Outbreak Alert: Fake Invoice Statement Attachment Email Messages on April 15, 2014

Medium Alert ID: 27077 First Published: 2012 October 1 21:39 GMT Last Updated: 2014 April 16 11:23 GMT Version: 78 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice statement for the recipient. The text in the email message...

Accidental XSRF and DoS consumption-of-space issue

We experienced an unusual growth of our nonspaced attachments that appears to be a DoS vunerability both in an accidental way with a workaround and intentional not easily worked around. This is under Confluence 4.0, but appears to probably apply to 4.3.1 as well. It appears the growing nonspaced...

CVE-2012-3731

Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

Out-of-bounds

The iCalendar component in gwwww1.dll in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted date-time string in a .ics attachment...

Vulnerabilities in SumatraPDF Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of multiple vulnerabilities affecting SumatraPDF Reader software version 2.0.1 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor...

Memory Corruption in Google SketchUp Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Google SketchUp software version 8.0.11752.0 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...