CVE-2013-2269

The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in...

CVE-2013-5725

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL...

[CVE-2013-5725] - Byword for iOS Data Destruction Vulnerability

Affected Vendor: http://metaclassy.com/ - Affected Software: Byword for iOS - Affected Version: 2.x prior to 2.1 - Issue Type: Lack of validation/user confirmation leading to destruction of data - Release Date: 29 Sept 2013 - Discovered by: Guillaume Ross - CVE Identifier: CVE-2013-5725 - Issue...

Cross site scripting

Cross-site scripting XSS vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form...

Threat Outbreak Alert: Fake Shipping Confirmation Email Messages on September 10, 2013

Medium Alert ID: 30661 First Published: 2013 September 5 15:15 GMT Last Updated: 2013 September 11 15:01 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping confirmation notification for the recipient. The text in...

Threat Outbreak Alert: Fake Payment Notification Email Messages on August 29, 2013

Medium Alert ID: 30603 First Published: 2013 August 29 19:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notification for the recipient. The text in the message body attempts to persuade the...

Threat Outbreak Alert: Fake Account Information Request Email Messages on August 29, 2013

Medium Alert ID: 30545 First Published: 2013 August 29 15:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an identity confirmation notification from PayPal for the recipient. The text in the message body attempts to...

Threat Outbreak Alert: Fake Confirmation of Payment Information Email Messages on August 20, 2013

Medium Alert ID: 30476 First Published: 2013 August 21 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a request for the confirmation of payment details. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Confirmation Notification Email Messages on August 13, 2013

Medium Alert ID: 30402 First Published: 2013 August 13 20:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notification for the recipient. The text in the email message attempts to convince the...

Easy Blog by JM LLC - Multiple Vulnerabilities

Easy Blog by JM LLC - Multiple Vulnerabilities Dear Offensive Security, I have discovered some vulnerabilities in Easy Blog, developed by JM LLC. Best regards, Sp3ctrecore ADVISORY ============================================== Easy Blog by JM LLC - Multiple Vulnerabilities...

Threat Outbreak Alert: Fake Bank Deposit Confirmation Email Messages on July 4, 2013

Medium Alert ID: 29949 First Published: 2013 July 5 13:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank deposit attachment for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Bank Transfer Payment Email Messages on June 28, 2013

Medium Alert ID: 29850 First Published: 2013 July 1 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer payment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Bank Deposit Confirmation Email Messages on September 11, 2013

Medium Alert ID: 29759 First Published: 2013 June 24 20:55 GMT Last Updated: 2013 September 12 15:16 GMT Version: 4 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank deposit confirmation notice for the recipien...

Novell iManager Multiple Vulnerabilities

The host is running Novell iManager and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbnovellimanagermultvuln.nasl 6079 2017-05-08 09:03:33Z teissa $ Novell iManager Multiple Vulnerabilities Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone Networks...

OPC UA Write Response Command

...

Syrian Hackers Hijack AP Twitter Tweet Obama Injured by Bomb

Twitter is facing increased pressure to beef up authentication for users after the hijacking of another high-profile account yesterday caused some temporary tremors on the stock market. The social network has reportedly been testing two-factor authentication internally; Twitter lags behind Google...

Wanda supplier system SQL injection vulnerability-vulnerability warning-the black bar safety net

Brief description: Wanda a sub-Stationsql injection. Sensitive information disclosure. Detailed description: Wanda scm system login boxsql injection. http://www.vans-china.cn/LoginUser?USERNO=%27&PWD=%2 7 5 0 0 error. User name just to lose, suggesting the absence of the user;USERNO=%2 7 and 1=1...

CVE-2013-0970

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...

CVE-2013-0970

Apple Mac OS X through 10.8.2 is vulnerable in Messages to bypassing the FaceTime call-confirmation prompt when a specially crafted FaceTime: URL is processed; CVE-2013-0970. Affected component is the Messages/FaceTime URL handling. Impact is bypass of user confirmation to initiate FaceTime calls...

CVE-2013-0970

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...