Threat Outbreak Alert RuleID8337KVR: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 37998 First Published: 2015 March 23 15:36 GMT Last Updated: 2016 January 28 13:48 GMT Version: 26 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID8337KVR...

ipa security, bug fix, and enhancement update

4.1.0-18.0.1 - Replace login-screen-logo.png 20362818 - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png 4.1.0-18 - Fix ipa-pwd-extop global configuration caching 1187342 - group-detach does not add correct...

UBUNTU-CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

Multiple Cross-Site Scripting Vulnerabilities in Exponent CMS

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A cross-site scripting...

CVE-2014-8690

Multiple cross-site scripting XSS vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x before 2.2.3 patch 9, and 2.3.x before 2.3.1 patch 4 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, the 2 src parameter in a none action to index.php, or the 3 "First...

CVE-2014-8690

Multiple cross-site scripting XSS vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x before 2.2.3 patch 9, and 2.3.x before 2.3.1 patch 4 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, the 2 src parameter in a none action to index.php, or the 3 "First...

Traidnt Up 3.0 SQL injection Exploit

Exploit for php platform in category web applications '; else echo ' http://site.com/path/: user: &n...

PT-2015-4274

Name of the Vulnerable Software and Affected Versions SoftBB version 0.1.3 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the post parameter in the redir last post list.php file...

PT-2015-4273

Name of the Vulnerable Software and Affected Versions SoftBB version 0.1.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the post parameter in the redir last post list.php file. Recommendations For SoftBB version 0.1.3, consider restricting...

Softbb.net SoftBB 'redir_last_post_list.php' SQL Injection Vulnerability

Softbb.net SoftBB is a WEB based application. Softbb.net SoftBB 'redirlastpostlist.php' suffers from a SQL injection vulnerability that allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

PT-2015-3653

Name of the Vulnerable Software and Affected Versions Stark CRM version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including first name, last name, notes, insu name, price, and status. This can be achieved by accessing certain...

PT-2014-5651

Name of the Vulnerable Software and Affected Versions TomatoCart version 1.1.8.6.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the First Name and Last Name fields in a new address book contact. This can be achieved by injecting malicious SQL code...

CVE-2014-3978: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands via the First Name and Last Name fields in a new address book contact...

chromium: multiple security fixes in Chrome 38.0.2125.101

The SessionService::GetLastSession function in browser/sessions/sessionservice.cc in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via vectors that leverage "type confusion" for callback processing...

CVE-2014-4383

The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header...

PT-2014-5850

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue allows man-in-the-middle attackers to spoof a device's update status. This is achieved via a crafted Last-Modified HTTP response header. Recommendations For Apple...

CVE-2014-4383: Improper Input Validation

The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header...

PT-2014-6474

Name of the Vulnerable Software and Affected Versions Fat Free CRM versions prior to 0.13.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the username, first name, or last name in a create or edit user action. This is due to multiple cross-site scripting...

DEBIAN-CVE-2014-5045

The mountpointlast function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service memory consumption or use-after-free ...