Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on May 15, 2014

Medium Alert ID: 34238 First Published: 2014 May 16 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank account deposit notification for the recipient. The text in the email message attempts ...

Threat Outbreak Alert: Fake Parking Charge Payment Notice Email Messages on May 15, 2014

Medium Alert ID: 34243 First Published: 2014 May 15 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a parking violation payment notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 14, 2014

Medium Alert ID: 34225 First Published: 2014 May 15 13:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a document for the recipient. The email message attempts to convince the recipient to open the attachment to confirm the...

Threat Outbreak Alert: Email Messages with Malicious Attachment on May 14, 2014

Medium Alert ID: 34230 First Published: 2014 May 14 16:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The email message attempts to convince the recipient to open the attachment for details...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 14, 2014

Medium Alert ID: 34221 First Published: 2014 May 14 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the attachment an...

Srun3000 /download.php 任意文件下载漏洞

深澜Srun3000 一处未经验证的任意下载漏洞下载路径可以用绝对路径，也可以用相对路径 影响版本 : 版本号小于等于 srun3000 3.00rc14.17.5 的更高的版本还未测试测过url:8081/download.php 116行，未经验证允许文件下载造成任意文件下载漏洞。用户只需提交目标文件名和 加盐过的 MD5 值就可以进行下载。 ?php$key="ijfri&8%4";$file=$GET"file";if$GET'k' != md5$file.$keyexit;iffileexists$file $thisbasefile =...

Threat Outbreak Alert: Email Messages with Link to Malicious File on May 5, 2014

Medium Alert ID: 34108 First Published: 2014 May 5 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a link to a file for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Shipment Tracking Information Email Messages on April 30, 2014

Medium Alert ID: 34010 First Published: 2014 April 30 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipment tracking information for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Email Messages with Malicious Links on April 29, 2014

Medium Alert ID: 33985 First Published: 2014 April 29 21:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a link for the recipient. The email message attempts to convince the recipient to open the link for details. However, the...

Threat Outbreak Alert: Fake Malicious Attachment Email Messages on April 28, 2014

Medium Alert ID: 33978 First Published: 2014 April 29 18:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body and an attachment for the recipient. However, the .rar attachment contains a malicious .scr file that, when...

oclHashcat v1.20 - Worlds fastest password cracker

oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on April 28, 2014

Medium Alert ID: 33963 First Published: 2014 April 28 15:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipient...

Mail.ru: SQL injection [дырка в движке форума]

URL: http://kv.mail.ru/forum/search.php?do=process POST DATA:...

Threat Outbreak Alert: Fake Invoice Notification Email Messages on April 24, 2014.

Medium Alert ID: 33942 First Published: 2014 April 25 13:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to convince t...

Threat Outbreak Alert: Fake Purchase Invoice Email Messages on April 24, 2014

Medium Alert ID: 33928 First Published: 2014 April 24 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase invoice for the recipient. The text in the email message instructs the recipient to open a .zip...

Hash Kracker v2.5 - All-in-one Hash Password Recovery Software

Hash Kracker is the free all-in-one tool to recover the hash password for multiple hash types. Currently it supports password recovery from following popular Hash types MD5 SHA1 SHA256 SHA384 SHA512 It uses dictionary based cracking method which makes the cracking operation simple and easier...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 22, 2014

Medium Alert ID: 33885 First Published: 2014 April 22 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notification for the recipient. The text in the email message attempts to convince the...

Parallels Plesk Panel 12.x Key Disclosure

While auditing the source code for Parallels Plesk Panel 12.x on Linux I noticed the following feature that leads to leakage of the '/etc/psa/private/secretkey'-file in md5 format to non-authenticated users. Parallels responded that the 16byte 'secretkey' should provide sufficient entropy for thi...

Threat Outbreak Alert: Email Messages with Malicious Attachment on April 21, 2014

Medium Alert ID: 33882 First Published: 2014 April 21 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The email message attempts to convince the recipient to open the attachment for details...

Routers TCP 32764 Backdoor Vulnerability Secretly Re-Activated Again

At the beginning of this year, we reported about the secret backdoor ‘TCP 32764’ discovered in several routers including, Linksys, Netgear, Cisco and Diamond that allowed an attacker to send commands to the vulnerable routers at TCP port 32764 from a command-line shell without being authenticated...