Schneider Electric SCADA Expert ClearSCADA < 2014 R1.1 and Schneider Electric ClearSCADA < 2010 R3.2 Multiple Vulnerabilities

Binary data 8391.prm...

Threat Outbreak Alert RuleID11998: Email Messages Distributing Malicious Software on October 16, 2014

Medium Alert ID: 36116 First Published: 2014 October 16 15:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11998 may contain the following files: Name |...

Threat Outbreak Alert RuleID12000: Email Messages Distributing Malicious Software on October 16, 2014

Medium Alert ID: 36115 First Published: 2014 October 16 15:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12000 may contain the following files: Name |...

Threat Outbreak Alert RuleID11993: Email Messages Distributing Malicious Software on October 15, 2014

Medium Alert ID: 36113 First Published: 2014 October 16 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11993 may contain the following files: Name |...

Threat Outbreak Alert RuleID11975: Email Messages Distributing Malicious Software on October 15, 2014

Medium Alert ID: 36088 First Published: 2014 October 15 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11975 may contain the following files: Name |...

Threat Outbreak Alert RuleID11969: Email Messages Distributing Malicious Software on October 15, 2014

Medium Alert ID: 36086 First Published: 2014 October 15 15:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11969 and RuleID11969KVR may contain the...

KesionCMS cookie泄露用户名和密码和存储xss

简要描述： KesionCMS cookie泄露用户名和密码和存储xss 详细说明： 我注册一个，如图： 这里看到了没有直接就是用户名和密码 而且这个密码居然是简单的MD5加密了一下 到这里还没有完，那么我们怎么样去搞到这个cookie，而且是大批量的，这里就要用到xss 我们找到一个频繁触发的地方，我们到问答系统那边找到一个存储xss 我们查看一下这个问题： 漏洞证明：...

[The ManageOwnage Series, part II]: User credential disclosure in ManageEngine DeviceExpert

Hi, You can read the usernames and MD5 hashed passwords of all the users in the Device Expert application by sending an unauthenticated request. I am releasing this as a 0 day as ManageEngine have responded that they do not consider this a priority and won't fix it in the near future unless a...

Threat Outbreak Alert RuleID11912: Email Messages Distributing Malicious Software on October 10, 2014

Medium Alert ID: 36038 First Published: 2014 October 10 16:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11912 may contain the following files: Name |...

Threat Outbreak Alert RuleID11898: Email Messages Distributing Malicious Software on October 9, 2014

Medium Alert ID: 36026 First Published: 2014 October 9 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11898 may contain the following files: Name |...

Threat Outbreak Alert RuleID11893: Email Messages Distributing Malicious Software on October 8, 2014

Medium Alert ID: 36013 First Published: 2014 October 9 11:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11893 may contain the following files: Name |...

Threat Outbreak Alert RuleID8337: Email Messages Distributing Malicious Software on December 11, 2014.

Medium Alert ID: 35945 First Published: 2014 October 6 14:56 GMT Last Updated: 2014 December 12 13:40 GMT Version: 44 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID8337K...

Apache Subversion 1.0.x - 1.7.17 / 1.8.x < 1.8.10 Multiple Vulnerabilities

The version of Subversion Server installed on the remote host is version 1.x.x prior to 1.7.18 or 1.8.x prior to 1.8.10. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the Serf RA layer. This flaw causes wildcards for HTTPS connections to be improperly evaluated,...

Threat Outbreak Alert RuleID11833: Email Messages Distributing Malicious Software on October 3, 2014

Medium Alert ID: 35936 First Published: 2014 October 3 14:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11833 may contain the following files: Name |...

Threat Outbreak Alert RuleID11793: Email Messages Distributing Malicious Software on October 1, 2014

Medium Alert ID: 35919 First Published: 2014 October 2 16:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11793 may contain the following files: Name |...

Threat Outbreak Alert RuleID11811: Email Messages Distributing Malicious Software on October 1, 2014

Medium Alert ID: 35921 First Published: 2014 October 2 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11811 may contain the following files: Name |...

Threat Outbreak Alert RuleID11778: Email Messages Distributing Malicious Software on September 30, 2014

Medium Alert ID: 35884 First Published: 2014 October 1 11:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11778 may contain the following files: Name |...

PHPSHE SQL注入

简要描述： 默认配置验证绕过 详细说明： /include/plugin/payway/ebank/Receive.php中 ebankmd5 默认为空 ，可以生成sign绕过 include'../../../../common.php'; $cachepayway = cache::get'payway'; $payway = unserialize$cachepayway'ebank''paywayconfig'; $key = $payway'ebankmd5'; //默认为空 $void =trim$POST'void'; $vpmode =trim$POST'vpmode';...

Threat Outbreak Alert RuleID8337KVR: Email Messages Distributing Malicious Software on September 26, 2016

Medium Alert ID: 35872 First Published: 2014 September 30 12:53 GMT Last Updated: 2016 September 27 13:50 GMT Version: 15 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat...

nss security update

CentOS Errata and Security Advisory CESA-2014:1246 Updated nss and nspr packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Commo...