Threat Outbreak Alert: Fake Product Order Delivery Information Email Messages on February 16, 2014

Medium Alert ID: 32882 First Published: 2014 February 17 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product order details for the recipient. The text in the email message attempts to convince the recipient to...

CVE-2014-1948: Undefined Security Weakness

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

PT-2014-4378

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions 2013.2 through 2013.2.1 OpenStack Image Registry and Delivery Service Glance Icehouse before icehouse-2 Description The issue allows local users to obtain sensitive information by...

Threat Outbreak Alert: Fake Delivery Failure Notification Email Messages on February 10, 2014

Medium Alert ID: 32807 First Published: 2014 February 11 16:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a delivery failure notification for the recipient. The text in the email message attempts to...

Fedora Update for rubygem-actionmailer FEDORA-2014-0970

Check for the Version of rubygem-actionmailer OpenVAS Vulnerability Test Fedora Update for rubygem-actionmailer FEDORA-2014-0970 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Threat Outbreak Alert: Fake Product Purchase Order Email Messages on January 20, 2014

Medium Alert ID: 32499 First Published: 2014 January 21 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order delivery notification for the recipient. The text in the email message attempts to convince th...

Updated openssl package fixes security vulnerabilities

Updated openssl packages fix security vulnerabilities: The DTLS retransmission implementation in OpenSSL through 1.0.1e does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context by...

OpenSSL 1.0.1 < 1.0.1f Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.1f. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.1f advisory. - The ssl3takemac function in ssl/s3both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service NUL...

Information disclosure

The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service...

CVE-2013-7149

SQL injection vulnerability in www/delivery/axmlrpc.php aka the XML-RPC delivery invocation script in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method...

CVE-2013-7149

A critical SQL injection vulnerability exists in the Revive Adserver (versions prior to 3.0.2 ) and OpenX Source (versions 2.8.11 and earlier, including potentially phpAdsNew 2.0.x ). The root cause is that the www/delivery/axmlrpc.php script (XML-RPC delivery invocation) fails to properly saniti...

VulnCheck KEV: CVE-2013-7149

SQL injection vulnerability in www/delivery/axmlrpc.php aka the XML-RPC delivery invocation script in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method...

Cutwail Spam Botnet Feels Effect of Blackhole Takedown

The arrest of alleged hacker Paunch and the subsequent dismantling of the Blackhole Exploit Kit operation has cybercrime groups scrambling to find another automated means of delivering exploits. In the meantime, some are settling for old-school tactics that include infected email attachments and ...

Breach incident

News Breach incident Share December 11th, 2013 At Opera, we strive to be open, and we want to continue this tradition, by sharing with you what happens here. High profile companies like Opera are under continuous attack by hackers trying to break into their systems, and we want to tell you about ...

Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on December 9, 2013

Medium Alert ID: 32095 First Published: 2013 December 9 20:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery failure notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Bank Document Delivery Email Messages on December 4, 2013

Medium Alert ID: 32006 First Published: 2013 December 4 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank document delivery notification for the recipient. The text in the email message...

Preparing for Managed Security Services

Wade Woolwine Presents at MIRcon® 2013 As a complement to my MIRcon® 2013 presentation titled "Getting the Best Bang for the Buck with Managed Security Providers" and to address some questions I received from the audience, I have prepared a quick summary of my presentation. Many businesses consid...

Threat Outbreak Alert: Fake Invoice Delivery Email Messages on November 27, 2013

Medium Alert ID: 31922 First Published: 2013 November 27 15:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the recipie...

Privacy, Human Rights Groups Form New Anti-Surveillance Coalition

A large group of privacy and digital rights organizations has put together a new effort to urge politicians to curtail the mass surveillance operations that have been exposed in the last few months. The new coalition has developed a set of 13 principles for governments to follow in their...

CVE-2013-4354

The API before 2.1 in OpenStack Image Registry and Delivery Service Glance makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image...