CVE-2013-6011: Improper Input Validation

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

PT-2013-5920

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 10.0 through 10.0-76.6 Description The issue allows remote attackers to cause a denial of service, resulting in the crash of nsconfigd and subsequent appliance reboot, via a crafted...

Threat Outbreak Alert: Fake Package Delivery Invoice Notification Email Messages on September 25, 2013

Medium Alert ID: 30984 First Published: 2013 September 26 19:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery invoice notification for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on September 26, 2013

Medium Alert ID: 30937 First Published: 2013 September 23 15:14 GMT Last Updated: 2013 September 26 13:36 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a failed package delivery notification for the recipient. The...

Threat Outbreak Alert: Fake Document Delivery Email Messages on September 18, 2013

Medium Alert ID: 30884 First Published: 2013 September 19 15:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an update on materials for the recipient. The email message attempts to persuade the recipient to open the link for...

Threat Outbreak Alert: Fake FedEx Delivery Failure Notification Email Messages on September 16, 2013

Medium Alert ID: 30831 First Published: 2013 September 17 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a parcel delivery failure notification for the recipient. The text in the email message attempts to convince...

Cisco Application Control Engine (ACE) Version

Cisco Application Control Engine ACE software is installed on the remote Cisco IOS or ACE device. It is a load-balancing and application-delivery solution for Cisco Catalyst 6500 Series switches and Cisco 7600 Series routers, and it is also available as an appliance. TRUSTED...

Threat Outbreak Alert: Fake Fax Delivery Notification Email Messages on September 11, 2013

Medium Alert ID: 30762 First Published: 2013 September 13 01:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax delivery notification for the recipient. The text in the email message attempts to convince the...

Many Flash, Java Users Running Older, Vulnerable Versions

It’s long been known that Java and Flash are favored targets of attackers, thanks to their huge install bases and numerous security issues. And the users who are targeted by these attacks aren’t doing themselves any favors either, as new research shows that 19 percent of business users are runnin...

openx 2.8.10 /lib/max/Delivery/common.php 后门漏洞

No description provided by source...

CVE-2013-5698: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allows remote authenticated users to inject arbitrary web script or HTML via a delivery=view action, aka Bug ID 26373, ...

PT-2013-5734

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite and Server versions prior to 6.22.0 rev16 Open-Xchange AppSuite and Server versions 6.22.1 prior to rev19 Open-Xchange AppSuite and Server versions 7.0.1 prior to rev7 Open-Xchange AppSuite and Server versions 7.0.2 prior...

Threat Outbreak Alert: Fake Package Delivery Notification Email Messages on September 3, 2013

Medium Alert ID: 30645 First Published: 2013 September 4 18:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery notification from UPS for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Package Delivery Notification Email Messages on September 2, 2013

Medium Alert ID: 30622 First Published: 2013 September 3 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a package delivery notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on August 30, 2013

Medium Alert ID: 30612 First Published: 2013 August 30 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a delivery failure notification for the recipient. The text in the email message attempts to convince the...

Google - (Pin via Postal Delivery) Information Disclosure

Document Title: =============== Google - Pin via Postal Delivery Information Disclosure References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1046 View: http://www.youtube.com/watch?v=nnAAdX9a3eU Release Date: ============= 2013-08-14 Vulnerability Laboratory ID VL-ID:...

Google - (Pin via Postal Delivery) Information Disclosure

Document Title: =============== Google - Pin via Postal Delivery Information Disclosure References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1046 View: http://www.youtube.com/watch?v=nnAAdX9a3eU Release Date: ============= 2013-08-14 Vulnerability Laboratory ID VL-ID:...

Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products

Multiple Cisco content network and video delivery products contain a vulnerability when they are configured to run in central management mode. This vulnerability could allow an authenticated but unprivileged, remote attacker to execute arbitrary code on the affected system and on the devices...

Powershell Payload Web Delivery Vulnerability

This Metasploit module quickly fires up a web server that serves the payload in powershell. The provided command will start powershell and then download and execute the payload. The IEX command can also be extracted to execute directly from powershell. The main purpose of this module is to quickl...

Powershell Payload Web Delivery

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Powershell Payload Web Delivery',...