Threat Outbreak Alert RuleID28872: Email Messages Distributing Malicious Software on April 25, 2017

Medium Alert ID: 53552 First Published: 2017 April 25 12:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28872 may contain the following files: Name | Si...

Microsoft Windows PDF Library CVE-2016-0058 Buffer Overflow Vulnerability

Description Microsoft Windows PDF library is prone to a buffer-overflow vulnerability because it fails to adequately bounds check user-supplied data before copying it to an insufficiently sized memory buffer.. An attacker can leverage this issue to execute arbitrary code in the context of the...

xpshop网店系统sql注入再来一处

简要描述： 应该还有几个就收工了，其实还有一些，不过感觉好累不想弄了。再挖多几个就收工了！ 详细说明： 漏洞位置xpshop.webui.IspOrderReturnBy： protected void PageLoadobject sender, EventArgs e base.Response.AddHeader"Pragma", "No-Cache"; base.Response.Buffer = true; base.Response.ExpiresAbsolute = DateTime.Now.AddSeconds-1.0; base.Response.Expires = 0...

Microsoft Internet Explorer CVE-2015-1706 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Tiny HTTP Server <= 1.1.9 Path Traversal Vulnerability - Active Check

Tiny HTTP server is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert RuleID12716: Email Messages Distributing Malicious Software on December 5, 2014

Medium Alert ID: 36670 First Published: 2014 December 8 16:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12716 may contain the following files: Name |...

Microsoft Internet Explorer CVE-2014-6341 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Threat Outbreak Alert RuleID10451: Email Messages Distributing Malicious Software on June 26, 2014

Medium Alert ID: 34753 First Published: 2014 June 26 13:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10451 may contain the following files: Name | Siz...

Trojita Email保存信息泄漏漏洞

CVE ID:CVE-2014-2567 Trojita是一款QT IMAP Email客户端。 当保存email到发送或草稿文件夹时应用程序不安全处理IMAP通信，允许可通过中间人攻击的攻击者获取通信内容信息。 0 Trojita 0.x Trojita 0.4.1已经修复该漏洞，建议用户下载更新： http://trojita.flaska.net/...

MySQLDumper 1.24.4 - 'menu.php' PHP Remote Code Execution

source: https://www.securityfocus.com/bid/53310/info MySQLDumper is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary PHP code within the context of the...

New Bug in Internet Explorer Used in Targeted Attacks

There’s a new flaw in all of the current versions of Internet Explorer that is being used in some targeted attacks right now. Microsoft has confirmed the bug and said it is working on a fix, but has no timeline for the patch release yet. The company did not rule out an emergency out-of-band patch...

Yahoo! Music Jukebox AddImage函数ActiveX远程栈溢出漏洞

BUGTRAQ ID: 27590 CVECAN ID: CVE-2008-0623 Yahoo! Music Jukebox是一款音乐编辑、管理、刻录软件。 Yahoo! Music Jukebox的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Yahoo! Music Jukebox所安装的YMP DataGrid ActiveX控件（datagrid.dll）没有正确地处理传送给AddImage方式的输入参数，如果用户受骗访问了恶意站点并向该参数传送了超长字符串的话，就可能触发栈溢出，导致执行任意指令。 Yahoo! Music Jukebox...