Threat Outbreak Alert: Email Messages with Malicious Attachments on October 18, 2013

Medium Alert ID: 31363 First Published: 2013 October 18 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body and document attached for the recipient. However, the .zip attachment contains a malicious .exe file that,...

Threat Outbreak Alert: Fake Account Debit Notification Email Messages on October 17, 2013

Medium Alert ID: 31329 First Published: 2013 October 17 15:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account debit notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Invoice Email Messages on October 14, 2013

Medium Alert ID: 31246 First Published: 2013 October 14 19:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment invoice for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Multimedia Message Email Messages on October 8, 2013

Medium Alert ID: 31171 First Published: 2013 October 8 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a multimedia message for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 1, 2013

Medium Alert ID: 31084 First Published: 2013 October 1 19:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain documents for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Online Purchase Confirmation Email Messages on September 29, 2013

Medium Alert ID: 31024 First Published: 2013 September 30 19:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain an online transaction confirmation for the recipient. The text in the message body attempts ...

Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

Threat Outbreak Alert: Fake Voice Messages Delivery Email Messages on September 25, 2013

Medium Alert ID: 30992 First Published: 2013 September 26 13:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a voice message for the recipient. The email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Wire Transfer Failure Notification Email Messages on September 24, 2013

Medium Alert ID: 30968 First Published: 2013 September 24 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a failed wire transfer notification from Wells Fargo for the recipient. The message attempts to convince th...

Unrestricted file upload

The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging 1 publisher or 2 administrator privileges...

CVE-2013-5221

The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging 1 publisher or 2 administrator privileges...

CVE-2013-5221

The CVE-2013-5221 issue affects Esri ArcGIS for Server (versions 10.1–10.2) via the mobile-upload feature. Remote authenticated users who have publisher or administrator privileges can upload executable (.exe) files, representing an unrestricted file upload risk. The reported impact is limited to...

Mandriva Linux Security Advisory : wordpress (MDVSA-2013:239)

Updated wordpress and php-phpmailer packages fix security vulnerabilities : wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

Threat Outbreak Alert: Fake Picture Delivery Email Messages on June 4, 2014

Medium Alert ID: 30864 First Published: 2013 September 18 18:37 GMT Last Updated: 2014 June 5 12:52 GMT Version: 9 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo message for the recipient. The text in the email message attempt...

[Binrev] Automate Reversing Windows Binaries for Pentesters

What you can do with this? Static analysis: you can do a basic manual code review for decompiled sources to discover hidden communication channels, search for hard-coded passwords, or SQL injection vulnerabilities. Import decompiled projects to an IDE to reconstruct and modify the original source...

UBUNTU-CVE-2013-5739

The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe files, which might make it easier for remote authenticated users to conduct cross-site scripting XSS attacks via a crafted file, related to the getallowedmimetypes function in wp-includes/functions.php...

Cross site scripting

The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe files, which might make it easier for remote authenticated users to conduct cross-site scripting XSS attacks via a crafted file, related to the getallowedmimetypes function in wp-includes/functions.php...