XSS when attaching a file to an issue

Hi, I found a persistent XSS vulnerability when attaching a file to an issue. The steps to reproduce are the following : - Attach a file to an issue. Its name must contain "alert'XSS'". I used a python script to do that. - Browse to the issue and open the ALL tab under activity. A popup should...

XSS when attaching a file to an issue

Hi, I found a persistent XSS vulnerability when attaching a file to an issue. The steps to reproduce are the following : - Attach a file to an issue. Its name must contain "alert'XSS'". I used a python script to do that. - Browse to the issue and open the ALL tab under activity. A popup should...

XSS when attaching a file to an issue

Hi, I found a persistent XSS vulnerability when attaching a file to an issue. The steps to reproduce are the following : - Attach a file to an issue. Its name must contain "alert'XSS'". I used a python script to do that. - Browse to the issue and open the ALL tab under activity. A popup should...

Threat Outbreak Alert: Fake Purchase Invoice Email Messages on December 4, 2013

Medium Alert ID: 32014 First Published: 2013 December 4 22:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase invoice for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Tax Document Email Messages on December 4, 2013

Medium Alert ID: 32016 First Published: 2013 December 4 22:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax document for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake RV Application Notification Email Messages on December 4, 2013

Medium Alert ID: 32017 First Published: 2013 December 4 22:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an application notification for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Loan Information Email Messages on December 3, 2013

Medium Alert ID: 32009 First Published: 2013 December 4 16:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain loan information for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Email Messages with Malicious Attachments on December 4, 2013

Medium Alert ID: 32007 First Published: 2013 December 4 16:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on November 26, 2013

Medium Alert ID: 31919 First Published: 2013 December 3 20:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment. The email message attempts to convince the recipient to open the attachment.The .zip attachment...

Threat Outbreak Alert: Fake Purchase Order Request Email Messages on December 3, 2013

Medium Alert ID: 31996 First Published: 2013 December 3 19:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to persuade the recipient t...

Threat Outbreak Alert: Fake Product Inquiry Email Messages on December 26, 2013

Medium Alert ID: 31995 First Published: 2013 December 3 16:57 GMT Last Updated: 2014 January 7 15:21 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product inquiry for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Payment processing Notification Email Messages on December 2, 2013

Medium Alert ID: 31991 First Published: 2013 December 3 16:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment processing notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Financial Document Email Messages on December 3, 2013

Medium Alert ID: 31994 First Published: 2013 December 3 14:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Package Detainment Notification Email Messages on December 2, 2013

Medium Alert ID: 31960 First Published: 2013 December 3 00:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package detainment notification from UK Customs and Border Protection for the recipient. The text in the ema...

Threat Outbreak Alert: Fake Scanned Document Email Messages on January 2, 2014

Medium Alert ID: 31959 First Published: 2013 December 3 00:34 GMT Last Updated: 2014 January 7 15:15 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Package Tracking Information Email Messages on January 10, 2014

Medium Alert ID: 31958 First Published: 2013 December 3 00:33 GMT Last Updated: 2014 January 13 14:08 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping notification from FedEx for the recipient. The text in the...

Threat Outbreak Alert: Fake Product Order Information Email Messages on December 1, 2013

Medium Alert ID: 31956 First Published: 2013 December 3 00:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product order information for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Product Document Supply Email Messages on December 1, 2013

Medium Alert ID: 31955 First Published: 2013 December 3 00:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain important documents for the recipient. The text in the email message attempts to convince the recipient open t...

Threat Outbreak Alert: Fake Voice Comment Notification Email Messages on November 29, 2013

Medium Alert ID: 31945 First Published: 2013 December 2 23:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a voice comment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Quotation Notification Email Messages on November 28, 2013

Medium Alert ID: 31940 First Published: 2013 December 2 23:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation notification for the recipient. The text in the email message attempts to convince the...