Cisco Application Control Engine (ACE) Version

Cisco Application Control Engine ACE software is installed on the remote Cisco IOS or ACE device. It is a load-balancing and application-delivery solution for Cisco Catalyst 6500 Series switches and Cisco 7600 Series routers, and it is also available as an appliance. TRUSTED...

Threat Outbreak Alert: Fake Fax Delivery Notification Email Messages on September 11, 2013

Medium Alert ID: 30762 First Published: 2013 September 13 01:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax delivery notification for the recipient. The text in the email message attempts to convince the...

Many Flash, Java Users Running Older, Vulnerable Versions

It’s long been known that Java and Flash are favored targets of attackers, thanks to their huge install bases and numerous security issues. And the users who are targeted by these attacks aren’t doing themselves any favors either, as new research shows that 19 percent of business users are runnin...

openx 2.8.10 /lib/max/Delivery/common.php 后门漏洞

No description provided by source...

Threat Outbreak Alert: Fake Package Delivery Notification Email Messages on September 3, 2013

Medium Alert ID: 30645 First Published: 2013 September 4 18:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery notification from UPS for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Package Delivery Notification Email Messages on September 2, 2013

Medium Alert ID: 30622 First Published: 2013 September 3 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a package delivery notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on August 30, 2013

Medium Alert ID: 30612 First Published: 2013 August 30 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a delivery failure notification for the recipient. The text in the email message attempts to convince the...

Google - (Pin via Postal Delivery) Information Disclosure

Document Title: =============== Google - Pin via Postal Delivery Information Disclosure References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1046 View: http://www.youtube.com/watch?v=nnAAdX9a3eU Release Date: ============= 2013-08-14 Vulnerability Laboratory ID VL-ID:...

Google - (Pin via Postal Delivery) Information Disclosure

Document Title: =============== Google - Pin via Postal Delivery Information Disclosure References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1046 View: http://www.youtube.com/watch?v=nnAAdX9a3eU Release Date: ============= 2013-08-14 Vulnerability Laboratory ID VL-ID:...

Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products

Multiple Cisco content network and video delivery products contain a vulnerability when they are configured to run in central management mode. This vulnerability could allow an authenticated but unprivileged, remote attacker to execute arbitrary code on the affected system and on the devices...

Powershell Payload Web Delivery Vulnerability

This Metasploit module quickly fires up a web server that serves the payload in powershell. The provided command will start powershell and then download and execute the payload. The IEX command can also be extracted to execute directly from powershell. The main purpose of this module is to quickl...

Powershell Payload Web Delivery

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Powershell Payload Web Delivery',...

Threat Outbreak Alert: Fake Shipment Delivery Failure Notification Email Messages on July 22, 2013

Medium Alert ID: 30166 First Published: 2013 July 22 16:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipment delivery failure notification from FedEx for the recipient. The text in the email message attempts to...

Script Web Delivery

This module quickly fires up a web server that serves a payload. The module will provide a command to be run on the target machine based on the selected target. The provided command will download and execute a payload using either a specified scripting language interpreter or "squiblydoo" via...

Threat Outbreak Alert: Fake FedEx Parcel Delivery Failure Notification Email Messages on July 10, 2013.

Medium Alert ID: 30033 First Published: 2013 July 11 12:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a FedEx parcel delivery failure notification for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Bank Delivery Notice Email Messages on June 19, 2013

Medium Alert ID: 29737 First Published: 2013 June 20 19:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a proof of deposit notification message for the recipient. The email message instructs the...

Threat Outbreak Alert: Fake Product Delivery Notification Email Messages on June 11, 2013

Medium Alert ID: 29639 First Published: 2013 June 11 18:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a product delivery notification for the recipient. The text in the email message attempts to...

[SET v5.1] The Social-Engineer Toolkit codename “Name of the Doctor”

The Social-Engineer Toolkit SET version 5.1 codename “ Name of the Doctor ” has been released. This version adds a complete rewrite of the MSSQL Bruter as well as a new attack vector utilizing the PSExec functionality within Metasploit. The MSSQL Bruter now incorporates UDP port 1434 quick...

Exim / Dovecot Command Execution

Advisory: Exim with Dovecot: Typical Misconfiguration Leads to Remote Command Execution During a penetration test a typical misconfiguration was found in the way Dovecot is used as a local delivery agent by Exim. A common use case for the Dovecot IMAP and POP3 server is the use of Dovecot as a...

Scheduled automatic dashboard delivery fails

Challenge In certaing scenarios, scheduled dashboard delivery in Veeam ONE Reporter fails and reports the 'Dashboard Capturing Failed' error in the reporting task session log. Cause This issue is usually related to the configured permissions of the Veeam ONE Service account, which makes the...