Information disclosure

The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service...

CVE-2013-7149

CVE-2013-7149 describes a SQL injection in Revive Adserver’s XML-RPC delivery script (www/delivery/axmlrpc.php) via the what parameter, affecting Revive Adserver <= 3.0.1 and OpenX Source

CVE-2013-7149

SQL injection vulnerability in www/delivery/axmlrpc.php aka the XML-RPC delivery invocation script in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method...

VulnCheck KEV: CVE-2013-7149

SQL injection vulnerability in www/delivery/axmlrpc.php aka the XML-RPC delivery invocation script in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method...

Cutwail Spam Botnet Feels Effect of Blackhole Takedown

The arrest of alleged hacker Paunch and the subsequent dismantling of the Blackhole Exploit Kit operation has cybercrime groups scrambling to find another automated means of delivering exploits. In the meantime, some are settling for old-school tactics that include infected email attachments and ...

Breach incident

News Breach incident Share December 11th, 2013 At Opera, we strive to be open, and we want to continue this tradition, by sharing with you what happens here. High profile companies like Opera are under continuous attack by hackers trying to break into their systems, and we want to tell you about ...

Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on December 9, 2013

Medium Alert ID: 32095 First Published: 2013 December 9 20:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery failure notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Bank Document Delivery Email Messages on December 4, 2013

Medium Alert ID: 32006 First Published: 2013 December 4 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank document delivery notification for the recipient. The text in the email message...

Preparing for Managed Security Services

Wade Woolwine Presents at MIRcon® 2013 As a complement to my MIRcon® 2013 presentation titled "Getting the Best Bang for the Buck with Managed Security Providers" and to address some questions I received from the audience, I have prepared a quick summary of my presentation. Many businesses consid...

Threat Outbreak Alert: Fake Invoice Delivery Email Messages on November 27, 2013

Medium Alert ID: 31922 First Published: 2013 November 27 15:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the recipie...

Privacy, Human Rights Groups Form New Anti-Surveillance Coalition

A large group of privacy and digital rights organizations has put together a new effort to urge politicians to curtail the mass surveillance operations that have been exposed in the last few months. The new coalition has developed a set of 13 principles for governments to follow in their...

CVE-2013-4354

The API before 2.1 in OpenStack Image Registry and Delivery Service Glance makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image...

Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on May 6, 2015

Medium Alert ID: 31863 First Published: 2013 November 21 20:35 GMT Last Updated: 2015 May 7 12:18 GMT Version: 80 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The te...

Threat Outbreak Alert: Fake Package Delivery Failure Notice Email Messages on November 20, 2013

Medium Alert ID: 31832 First Published: 2013 November 20 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim to contain a package delivery failure notification. The text in the e-mail message instructs the recipient to open the...

Threat Outbreak Alert: Fake Package Delivery Failure Email Messages on November 18, 2013

Medium Alert ID: 31785 First Published: 2013 November 15 21:26 GMT Last Updated: 2013 November 18 22:42 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed package delivery notification for the...

Threat Outbreak Alert: Fake Package Delivery Information Email Messages on November 7, 2013

Medium Alert ID: 31684 First Published: 2013 November 8 17:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain package delivery information for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Fax Delivery Email Messages on November 7, 2013

Medium Alert ID: 31674 First Published: 2013 November 7 19:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax delivery notification for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on November 5, 2013

Medium Alert ID: 31637 First Published: 2013 November 5 19:25 GMT Last Updated: 2013 November 6 15:52 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The...

Threat Outbreak Alert: Fake Fax Delivery Notification Email Messages on October 30, 2013

Medium Alert ID: 31555 First Published: 2013 October 30 19:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax notification for the recipient. The text in the email message attempts to convince the recipient to open...

CVE-2013-4428

CVE-2013-4428 affects the OpenStack Image Registry and Delivery Service (Glance) in the Folsom/Grizzly line before 2013.1.4 and Havana before 2013.2. The issue is a flaw in the download_image policy enforcement for cached system images: after an image is cached by an authorized download, any auth...