Hishop商城分销系统信息泄露漏洞

No description provided by source...

CVE-2015-6417

Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via 1 the GUI or 2 a crafted HTTP request, aka Bug ID CSCuv87025...

Design/Logic Flaw

Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via 1 the GUI or 2 a crafted HTTP request, aka Bug ID CSCuv87025...

Threat Outbreak Alert RuleID20047: Email Messages Distributing Malicious Software on December 11, 2015

Medium Alert ID: 42638 First Published: 2015 December 11 14:44 GMT Last Updated: 2015 December 14 13:35 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID2004...

Threat Outbreak Alert RuleID20033: Email Messages Distributing Malicious Software on December 11, 2015

Medium Alert ID: 42630 First Published: 2015 December 11 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20033 may contain the following files: Name |...

Threat Outbreak Alert RuleID19275: Email Messages Distributing Malicious Software on December 11, 2015

Medium Alert ID: 42625 First Published: 2015 December 11 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19275 may contain the following files: Name |...

Threat Outbreak Alert RuleID20029: Email Messages Distributing Malicious Software on December 10, 2015

Medium Alert ID: 42620 First Published: 2015 December 10 21:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20029 may contain the following files: Name |...

Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=550 The attached file crashes in CmdExtract::UnstoreFile because the signed int64 DestUnpSize is truncated to an unsigned 32bit integer. Perhaps CmdExtract::ExtractCurrentFile should sanity check Arc.FileHead.UnpSize earl...

Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption

Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=550 The attached file crashes in CmdExtract::UnstoreFile because the signed int64 DestUnpSize is truncated to an unsigned 32bit integer. Perhaps...

Cisco Videoscape Distribution Suite Service Manager Unauthorized Access Vulnerability

A vulnerability in the role-based access control RBAC for certain users of the Cisco Videoscape Distribution Suite Service Manager VDS-SM could allow an authenticated, remote attacker read and write access to an internal database that contains sensitive information. The vulnerability is due to la...

[SECURITY] [DSA 3414-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3414-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2015 https://www.debian.org/security/faq -...

Threat Outbreak Alert RuleID20000: Email Messages Distributing Malicious Software on December 9, 2015

Medium Alert ID: 42598 First Published: 2015 December 9 20:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20000 may contain the following files: Name |...

Threat Outbreak Alert RuleID19979: Email Messages Distributing Malicious Software on December 8, 2015

Medium Alert ID: 42570 First Published: 2015 December 8 17:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19979 may contain the following files: Name |...

NSIS DLL Hijack

Hi @ll, executable uninstallers ° created with Nullsoft Scriptable Install System NSIS, see ; for some of its victims see are vulnerable: 1. They load and execute a rogue/bogus/malicious ShFolder.dll '² and other DLLs like SetupAPI.dll or UXTheme.dll too eventually found in the directory they are...

Threat Outbreak Alert RuleID19903: Email Messages Distributing Malicious Software on December 5, 2015

Medium Alert ID: 42542 First Published: 2015 December 7 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19903 may contain the following files: Name |...

Threat Outbreak Alert RuleID19909: Email Messages Distributing Malicious Software on December 4, 2015

Medium Alert ID: 42520 First Published: 2015 December 4 15:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19909 may contain the following files: Name |...

Threat Outbreak Alert RuleID19911: Email Messages Distributing Malicious Software on December 4, 2015

Medium Alert ID: 42522 First Published: 2015 December 4 15:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19911 may contain the following files: Name |...

Threat Outbreak Alert RuleID19862: Email Messages Distributing Malicious Software on December 4, 2015

Medium Alert ID: 42505 First Published: 2015 December 4 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19862 may contain the following files: Name |...

Threat Outbreak Alert RuleID19901: Email Messages Distributing Malicious Software on December 4, 2015

Medium Alert ID: 42503 First Published: 2015 December 4 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19901 may contain the following files: Name |...

Threat Outbreak Alert RuleID19900: Email Messages Distributing Malicious Software on December 4, 2015

Medium Alert ID: 42502 First Published: 2015 December 4 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19900 may contain the following files: Name |...