Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 4, 2014

Medium Alert ID: 33656 First Published: 2014 April 4 19:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notice for the recipient. The text in the email message attempts to convince the recipient...

[CVE-2013-6835] - iOS 7.0.6 Safari/Facetime-Audio Privacy issue

Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being established, revealing the user's identity phone number or email address - Release Date: March 10, 2014 -...

Threat Outbreak Alert: Fake Account Payment Confirmation Email Messages on March 27, 2014

Medium Alert ID: 33537 First Published: 2014 March 27 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account payment confirmation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Account Confirmation Notification Email Messages on March 25, 2014

Medium Alert ID: 33499 First Published: 2014 March 25 17:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain an account confirmation notice for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Internet Banking Security Upgrade Notice Email Messages on March 18, 2014

Medium Alert ID: 33398 First Published: 2014 March 18 19:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain a new security program for the recipient. The text in the email message attempts to convince th...

HackerOne: Adding an user email address to the list before confirming.

I know many of the penetration tester's email address.And many of them will be interested to join on hackerone. Well lets think of a scenario. I used some other penetration tester's email address to create an account on hackerone.And I choosed the username to be "somethingerotic" I know that user...

Apple TV Touch Password Disclosure Vulnerability

Apple TV had an issue where it was logging a user's Apple ID and password via debug output in logs. - Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being...

Apple Facetime Information Disclosure

Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being established, revealing the user's identity phone number or email address - Release Date: March 10, 2014 -...

Threat Outbreak Alert: Fake Payment Confirmation Notice Email Messages on March 10, 2014

Medium Alert ID: 33254 First Published: 2014 March 10 20:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a proof of payment notification for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Tax Refund Notice Email Messages on March 6, 2014

Medium Alert ID: 33231 First Published: 2014 March 6 19:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax refund notice for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Airline Ticket Order Confirmation Email Messages on February 24, 2014

Medium Alert ID: 33028 First Published: 2014 February 25 19:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an airline ticket confirmation for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on February 18, 2014

Medium Alert ID: 32907 First Published: 2014 February 18 21:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Payment Confirmation Notification Email Messages on February 17, 2014

Medium Alert ID: 32897 First Published: 2014 February 18 15:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a payment confirmation notification for the recipient. The text in the email message...

phpmywind最新版本注入漏洞第二弹

简要描述： 继续之前的代码审计，发现其他地方还有类似的问题存在，都是没有对变量进行适当的过滤就直接拼接到sql语句里面执行，导致任意sql指令的执行。 详细说明： 漏洞位于member.php 689行处： $r = $dosql-GetOne"SELECT checkinfo FROM @goodsorder WHERE username='$cuname' AND id=$id"; id参数未做任何过滤直接放到sql语句里面执行。 利用分析：...

ecshop找回密码功能存在安全隐患

简要描述： 可能随时都能重置用户密码问题 详细说明： user.php 740行 / 修改会员密码 / elseif $action == 'acteditpassword' includeonceROOTPATH . 'includes/libpassport.php'; $oldpassword = isset$POST'oldpassword' ? trim$POST'oldpassword' : null; $newpassword = isset$POST'newpassword' ? trim$POST'newpassword' : ''; $userid =...

Threat Outbreak Alert: Fake Order Confirmation Email Messages on February 12, 2014

Medium Alert ID: 32828 First Published: 2014 February 12 16:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order confirmation notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Confirmation Notification Email Messages on February 10, 2014

Medium Alert ID: 32799 First Published: 2014 February 11 15:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation request for the recipient. The text in the email message attempts to convince the...

Facebook Page Name Change after 200+ likes

Facebook Page Name change Exploits the restriction by facebook for not to change the page name after 200 likes so here we are with a working Vulnerability to change the Page name Please do comment after or before buying our exploit for confirmation of the working of exploit This is private exploi...

Threat Outbreak Alert: Fake Invoice Payment Confirmation Email Messages on January 24, 2014

Medium Alert ID: 32566 First Published: 2014 January 24 20:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Invoice Payment Confirmation Email Messages on January 6, 2014

Medium Alert ID: 32329 First Published: 2014 January 6 21:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice confirmation notification for the recipient. The text in the email message attempts to convince the...