Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

Threat Outbreak Alert: Fake Voice Messages Delivery Email Messages on September 25, 2013

Medium Alert ID: 30992 First Published: 2013 September 26 13:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a voice message for the recipient. The email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Wire Transfer Failure Notification Email Messages on September 24, 2013

Medium Alert ID: 30968 First Published: 2013 September 24 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a failed wire transfer notification from Wells Fargo for the recipient. The message attempts to convince th...

Unrestricted file upload

The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging 1 publisher or 2 administrator privileges...

CVE-2013-5221

The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging 1 publisher or 2 administrator privileges...

CVE-2013-5221

The CVE-2013-5221 issue affects Esri ArcGIS for Server (versions 10.1–10.2) via the mobile-upload feature. Remote authenticated users who have publisher or administrator privileges can upload executable (.exe) files, representing an unrestricted file upload risk. The reported impact is limited to...

Mandriva Linux Security Advisory : wordpress (MDVSA-2013:239)

Updated wordpress and php-phpmailer packages fix security vulnerabilities : wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

Threat Outbreak Alert: Fake Picture Delivery Email Messages on June 4, 2014

Medium Alert ID: 30864 First Published: 2013 September 18 18:37 GMT Last Updated: 2014 June 5 12:52 GMT Version: 9 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo message for the recipient. The text in the email message attempt...

[Binrev] Automate Reversing Windows Binaries for Pentesters

What you can do with this? Static analysis: you can do a basic manual code review for decompiled sources to discover hidden communication channels, search for hard-coded passwords, or SQL injection vulnerabilities. Import decompiled projects to an IDE to reconstruct and modify the original source...

Cross site scripting

The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe files, which might make it easier for remote authenticated users to conduct cross-site scripting XSS attacks via a crafted file, related to the getallowedmimetypes function in wp-includes/functions.php...

UBUNTU-CVE-2013-5739

The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe files, which might make it easier for remote authenticated users to conduct cross-site scripting XSS attacks via a crafted file, related to the getallowedmimetypes function in wp-includes/functions.php...

Threat Outbreak Alert: Fake Product List Attachment Email Messages on September 7, 2013

Medium Alert ID: 30688 First Published: 2013 September 9 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product list attachment for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Xerox Scanned Attachment Email Messages on September 4, 2013

Medium Alert ID: 30653 First Published: 2013 September 4 19:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document from a Xerox WorkCentre device. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake UPS Parcel Notification Email Messages on August 21, 2013

Medium Alert ID: 30330 First Published: 2013 August 6 20:28 GMT Last Updated: 2013 August 21 13:47 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a UPS parcel notification for the recipient. The text in the email messag...

Threat Outbreak Alert: Fake Privacy Policy Protections Agreement Email Messages on July 30, 2013

Medium Alert ID: 30256 First Published: 2013 July 30 14:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a new security policy agreement for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Payroll Document Delivery Email Messages on July 18, 2013

Medium Alert ID: 30144 First Published: 2013 July 19 13:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payroll document attachment for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Purchase Order Notification Email Messages on July 15, 2013

Medium Alert ID: 30092 First Published: 2013 July 15 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order notification for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Document Sharing Email Messages on July 3, 2013

Medium Alert ID: 29948 First Published: 2013 July 5 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain documents for the recipient. The text in the email message attempts to convince the recipient ...