Threat Outbreak Alert RuleID10682: Email Messages Distributing Malicious Software on July 15, 2014

Medium Alert ID: 34937 First Published: 2014 July 15 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10682 may contain the following files: Name | Siz...

Oracle Releases July 2014 Security Advisory

Oracle has released its Critical Patch Update for July 2014 to address 113 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 29 for Oracle Fusion Middleware 7 for Oracle Hyperion 1 for Oracle Enterprise Manager Grid Control 5...

Oracle Critical Patch Update - July 2014

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are generally cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

July 2014 Security Bulletin Webcast and Q&A

Today we published the July 2014 Security Bulletin webcast questions and answers page along with the webcast replay. We answered eight questions on air, with the majority focusing on the update for Internet Explorer. The transcript also includes a question we did not have time to answer on the ai...

CVE-2014-9094

creationtimestamp| type| source ---|---|--- 2014-07-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39250 2018-07-30 08:48:29+00:00| seen| MISP/5b5ece74-a5c8-40cd-87d6-d789950d210f...

tracking.au.pwc.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-46491 Description| Value ---|--- Affected Website:| tracking.au.pwc.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Threat Outbreak Alert RuleID10551: Email Messages Distributing Malicious Software on July 28, 2014

Medium Alert ID: 34887 First Published: 2014 July 9 13:16 GMT Last Updated: 2014 July 29 12:21 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10551 and...

CVE-2014-4944

creationtimestamp| type| source ---|---|--- 2014-07-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39240...

Assessing risk for the July 2014 security updates

Today we released six security bulletins addressing 29 unique CVE’s. Two bulletins have a maximum severity rating of Critical, three have maximum severity Important, and one is Moderate. We hope that the table below helps you prioritize the deployment of the updates appropriately for your...

MS14-041: Description of the security update for DirectShow: July 8, 2014

None None...

MS14-040: Description of the security update for an ancillary function driver on systems that do not have the 2919355 update installed: July 8, 2014

None None...

Microsoft Security Advisory: Registry update to improve credentials protection and management for Windows-based systems that have the 2919355 update installed: July 8, 2014

None None...

MS14-041: Description of the security update for DirectShow systems that do not have the 2919355 update installed: July 8, 2014

None None...

Threat Outbreak Alert RuleID10558: Email Messages Distributing Malicious Software on July 6, 2014

Medium Alert ID: 34854 First Published: 2014 July 7 12:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10558 may contain the following files: Name | Size...

Symbiose Webos Cross Site Scripting / Path Disclosure

Exploit Title: Symbiose Webos - XSS / FPD Date: 04 July 2014 Exploit Author: G4eL Download: http://symbiose.fr.cr/ Demo: http://webos.symbiose.fr.cr/ Tested on: Ubuntu http://domain/usr/?path=/usr/&type=1alert123 Results : Fatal error: Class 'lib\ctrl\rawDataCall\1alert123Controller' not found in...

Advance Notification Service for the July 2014 Security Bulletin Release

Today, we provide advance notification for the release of six Security Bulletins. Two of these are rated Critical, three are rated as Important, and one is rated Moderate in severity. These Updates are for Microsoft Windows and Internet Explorer. This month we will also premier the new format for...

scielo.org.pe XSS vulnerability

Open Bug Bounty ID: OBB-46065 Description| Value ---|--- Affected Website:| scielo.org.pe Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Media Jukebox 8.0.400 Buffer Overflow Exploit (SEH)

No description provided by source. $Id: mediajukebox.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Joomla MyHome Component (com_myhome) Blind SQL Injection Vulnerability

No description provided by source. Name : Joomla commyhome BSQLi Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL :http://www.unisoft.me/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to...

ImperialBB <= 2.3.5 - Remote File Upload Exploit

No description provided by source. Title : ImperialBB = 2.3.5 Remote File Upload Vulnerability Date : 5th July 2008 Found by : PHPLizardo - http://phplizardo.2gb.fr Greetz : Gu1ll4um3r0m41n Howto : 1. Go to your User Control Panel 2. Upload any file you want 3. Tamper the request and change the...