CVE-2013-2114

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

Threat Outbreak Alert: Email Messages with Malicious Attachments on November 14, 2013

Medium Alert ID: 31768 First Published: 2013 November 14 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to persuade the recipient to open the attachment ...

OSX Screen Capture

This module takes screenshots of target desktop and automatically downloads them. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OSX Screen Capture', 'Description' = %q This module takes...

[SECURITY] [DSA 2796-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...

Threat Outbreak Alert: Fake Regulation Document Delivery Email Messages on November 6, 2013

Medium Alert ID: 31667 First Published: 2013 November 7 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a regulations document for the recipient. The text in the email message attempts to convince the recipient to...

NetGear router through command injection to obtain ROOT privileges[EXP]-vulnerability warning-the black bar safety net

! NetGear router through command injection to obtain ROOT privileges\EXP\ - ScriptALeRT - Minghacker /Article/UploadPic/2013-11/201311614443412.jpg Abroad a large cattle study found that the NetGear router wndr3700v4 firmware authenticate the existence of the vulnerability. Once the Web interface...

Threat Outbreak Alert: Fake Account Payment Notice Email Messages on November 3, 2013

Medium Alert ID: 31609 First Published: 2013 November 4 20:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince the recipient to ope...

Double Executable File Extension Arbitrary File Execution

Certain malicious executable files can be hidden using double extension filenames...

Threat Outbreak Alert: Fake Fax Delivery Notification Email Messages on October 30, 2013

Medium Alert ID: 31555 First Published: 2013 October 30 19:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax notification for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Wire Transfer Notification Email Messages on October 29, 2013

Medium Alert ID: 31533 First Published: 2013 October 29 19:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a wire transfer notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Purchase Order Attachment Email Messages on October 29, 2013

Medium Alert ID: 31531 First Published: 2013 October 29 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a copy of a purchase order for the recipient. The text in the email message attempts to convince the recipient...

CVE-2013-4465

The CVE-2013-4465 issue affects Simple Machines Forum (SMF) prior to versions 2.0.6 and 2.1, where the avatar upload functionality permits an unrestricted file upload. The root cause is that an uploaded file with an executable extension can be stored and later retrieved via a direct request to a ...

Threat Outbreak Alert: Email Messages with Malicious Attachments on December 24, 2013

Medium Alert ID: 31483 First Published: 2013 October 24 17:34 GMT Last Updated: 2013 December 24 16:39 GMT Version: 14 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message...

ARRIS DG860A - NVRAM Backup Password Disclosure

ARRIS DG860A - NVRAM Backup Password Disclosure ! /usr/bin/env ruby ARRIS DG860A NVRAM Backup 'Compressor/Decompressor', it really does xor? Gleaned from scmix executable in firmware dump. Backup file is world readable without authentication and contains password information in plain text...

Threat Outbreak Alert: Fake Bank Swift Payment Notification Email Messages on October 8, 2013

Medium Alert ID: 31173 First Published: 2013 October 9 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a bank payment information for the recipient. The text in the email message attempts to convince the recipient...

Apache OpenJPA code execution

User-controlled data it stored in local executable file...

Unrestricted file upload

Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/wpdb/...

Threat Outbreak Alert: Fake Purchase Order Invoice Request Email Messages on September 29, 2013

Medium Alert ID: 31021 First Published: 2013 September 30 14:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on June 5, 2014

Medium Alert ID: 31005 First Published: 2013 September 28 05:39 GMT Last Updated: 2014 June 6 12:40 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Portuguese Product Price Inquiry Email Messages on September 25, 2013

Medium Alert ID: 30975 First Published: 2013 September 25 15:40 GMT Version: 1 Summary Cisco Security has detected significant activity related Portuguese-language spam email messages that claim to contain a product price inquiry notification for the recipient. The text in the email message...