ThreatList: Microsoft IIS Sees Triple-Digit Spike in Cyberattack Volume

Internet Information Services IIS, an extensible web server originally created by Microsoft for use with the Windows NT family, saw a whopping 782x increase in cyberattacks during the second quarter, according to analysis. According to eSentire’s latest threat report based on data gathered from...

paypal/invoice-sdk-php cross-site scripting vulnerability

paypal/invoice-sdk-php is a PHP-based Paypal payment software development kit . A cross-site scripting vulnerability exists in the samples/permissions.php file in paypal/invoice-sdk-php. A remote attacker can exploit this vulnerability to execute code with the help of the 'permToken' parameter...

Threat Outbreak Alert RuleID33318: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58704 First Published: 2018 August 15 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33318 may contain the following files: Name |...

Cross-site Scripting (XSS)

paypal/invoice-sdk-php is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of permToken and allows arbitrary scripts to be rendered in samples/permissions.php...

CVE-2017-6213

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

Remote code execution

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

CVE-2017-6213

paypal/invoice-sdk-php is affected by a reflected XSS vulnerability in samples/permissions.php through the permToken parameter, which can lead to code execution. The affected component is the PHP-based PayPal invoice SDK; the underlying issue is lack of input sanitization on permToken. Public det...

CVE-2017-6213

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

CVE-2017-6213: Improper Neutralization of Input During Web Page Generation

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

Kronos Banking Trojan Surfaces After Years of Silence

The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying code and are actively targeting victims in Germany, Japan and Poland. The latest variant has incorporated a new command-and-control feature designed to work with the Tor...

Threat Outbreak Alert RuleID33048: Email Messages Distributing Malicious Software on June 25, 2018

Medium Alert ID: 58288 First Published: 2018 June 25 19:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33048 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32812: Email Messages Distributing Malicious Software on May 23, 2018

Medium Alert ID: 57941 First Published: 2018 May 23 16:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32812 may contain the following files: Name | Size...

EasyService Billing 1.0 SQL Injection / Cross Site Scripting

------------------- Exploit 1 of 2: Exploit Title: EasyService Billing 1.0 - 'template.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage:...

Stored Cross-Site Scripting Vulnerability at Order Invoice in Cloud EC E-commerce System

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system order invoice at the existence of stored cross-site scripting vulnerabilities. An...

Shopy Point of Sale 1.0 - CSV Injection

Shopy Point of Sale 1.0 - CSV Injection Exploit Title: Shopy Point of Sale v1.0 - CSV Injection Date: 2018-04-23 Exploit Author: 8bitsec CVE: CVE-2018-10258 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/shopy-point-of-sales/21730225 Version: 1.0 Tested on: Ka...

Threat Outbreak Alert RuleID32535: Email Messages Distributing Malicious Software on April 20, 2018

Medium Alert ID: 57553 First Published: 2018 April 20 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32535 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32493: Email Messages Distributing Malicious Software on April 18, 2018

Medium Alert ID: 57521 First Published: 2018 April 18 17:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32493 may contain the following files: Name | Si...

Hancitor: fileless attack with a DLL copy trick

This article was authored by David Sánchez, Mickaël Roger, and Jérôme Segura During the past few years, malicious spam campaigns have proven to be one of the most efficient infection vectors, in part due to a combination of social engineering and a regular number of Office vulnerabilities. The...

Threat Outbreak Alert RuleID32149: Email Messages Distributing Malicious Software on February 27, 2018

Medium Alert ID: 56948 First Published: 2018 February 27 16:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32149 may contain the following files: Name |...

Threat Outbreak Alert RuleID32120: Email Messages Distributing Malicious Software on February 23, 2018

Medium Alert ID: 56926 First Published: 2018 February 23 17:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32120 may contain the following files: Name |...