Threat Outbreak Alert RuleID32874: Email Messages Distributing Malicious Software on June 5, 2018

Medium Alert ID: 58014 First Published: 2018 June 5 19:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32874 may contain the following files: Name | Size...

Sql injection

ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker could extract users' password hashes, whi...

CVE-2016-9488

ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker could extract users' password hashes, whi...

Threat Outbreak Alert RuleID32865: Email Messages Distributing Malicious Software on June 1, 2018

Medium Alert ID: 57997 First Published: 2018 June 1 18:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32865 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32860: Email Messages Distributing Malicious Software on June 1, 2018

Medium Alert ID: 57995 First Published: 2018 June 1 18:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32860 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32858: Email Messages Distributing Malicious Software on May 31, 2018

Medium Alert ID: 57988 First Published: 2018 May 31 15:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32858 may contain the following files: Name | Size...

MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass Vulnerabilities

Exploit for php platform in category web applications Vendor: Appnitro Product webpage: https://www.machform.com/ Full-Disclose: https://metalamin.github.io/MachForm-not-0-day-EN/ Fix: https://www.machform.com/blog-machform-423-security-release/ Author: Amine Taouirsa Twitter: @metalamin Google...

Threat Outbreak Alert RuleID32838: Email Messages Distributing Malicious Software on May 25, 2018

Medium Alert ID: 57967 First Published: 2018 May 25 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32838 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32835: Email Messages Distributing Malicious Software on May 24, 2018

Medium Alert ID: 57962 First Published: 2018 May 24 20:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32835 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32821: Email Messages Distributing Malicious Software on May 23, 2018

Medium Alert ID: 57947 First Published: 2018 May 23 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32821 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32812: Email Messages Distributing Malicious Software on May 23, 2018

Medium Alert ID: 57941 First Published: 2018 May 23 16:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32812 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32807: Email Messages Distributing Malicious Software on May 18, 2018

Medium Alert ID: 57920 First Published: 2018 May 18 15:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32807 may contain the following files: Name | Size...

CVE-2018-11209

An issue was discovered in Z-BlogPHP 2.0.0. zbsystem/cmd.php?act=verify relies on MD5 for the password parameter, which might make it easier for attackers to bypass intended access restrictions via a dictionary or rainbow-table attack. NOTE: the vendor declined to accept this as a valid issue...

CVE-2018-11209

Z-BlogPHP 2.0.0 is affected by a vulnerability in zb_system/cmd.php?act=verify that uses MD5 for the password parameter. The underlying issue is a weak hash allowing potential bypass of access restrictions via dictionary or rainbow-table attacks. Affected component: zb_system/cmd.php (act=verify)...

Threat Outbreak Alert RuleID32796: Email Messages Distributing Malicious Software on May 16, 2018

Medium Alert ID: 57907 First Published: 2018 May 16 14:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32796 may contain the following files: Name | Size...

CVE-2018-11209: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in Z-BlogPHP 2.0.0. zbsystem/cmd.php?act=verify relies on MD5 for the password parameter, which might make it easier for attackers to bypass intended access restrictions via a dictionary or rainbow-table attack. NOTE: the vendor declined to accept this as a valid issue...

Exim SMTP listener base64d function one-character buffer overflow

Added: 05/16/2018 CVE: CVE-2018-6789 BID: 103049 Background Exim is a mail transfer agent used on Unix-like operating systems. Problem Exim 5.90 and earlier are vulnerable to a one-character buffer overflow in the base64d function in the SMTP listener. Resolution Upgrade to Exim 4.90.1 or higher,...

Threat Outbreak Alert RuleID32784: Email Messages Distributing Malicious Software on May 15, 2018

Medium Alert ID: 57897 First Published: 2018 May 15 19:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32784 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32786: Email Messages Distributing Malicious Software on May 15, 2018

Medium Alert ID: 57896 First Published: 2018 May 15 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32786 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32783: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57894 First Published: 2018 May 15 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32783 may contain the following files: Name | Size...