Threat Outbreak Alert RuleID11552: Email Messages Distributing Malicious Software on September 15, 2014

Medium Alert ID: 35719 First Published: 2014 September 15 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11552 may contain the following files: Name ...

Threat Outbreak Alert RuleID11556: Email Messages Distributing Malicious Software on September 15, 2014

Medium Alert ID: 35715 First Published: 2014 September 15 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11556 may contain the following files: Name ...

Threat Outbreak Alert RuleID11530: Email Messages Distributing Malicious Software on September 14, 2014

Medium Alert ID: 35701 First Published: 2014 September 15 14:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11530 may contain the following files: Name ...

Threat Outbreak Alert RuleID11553: Email Messages Distributing Malicious Software on September 15, 2014

Medium Alert ID: 35713 First Published: 2014 September 15 13:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11553 may contain the following files: Name ...

PHPSHE关键位置CSRF+后台注入 可获取管理员帐号密码

简要描述： PHPSHE关键位置CSRF+后台注入 可获取管理员帐号，密码。 没找到，别的有什么好利用的。。唉 详细说明： Csrf 先看了一下incude/function/global.func.php这个文件 里面有防护csrf和添加token的函数，个人感觉不错。 不过貌似就写好了函数一次也没用过。 管理员添加的页面中 http://localhost/admin.php?mod=admin&act=add 我们来添加一个管理员 抓包 Post了如上数据 infoadminname=wooyun&adminpw=wooyun&pesubmit=提+交 我们来构造下 None 效果...

Threat Outbreak Alert RuleID11528: Email Messages Distributing Malicious Software on September 12, 2014

Medium Alert ID: 35700 First Published: 2014 September 12 19:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11528 may contain the following files: Name ...

Threat Outbreak Alert RuleID11511: Email Messages Distributing Malicious Software on September 11, 2014

Medium Alert ID: 35677 First Published: 2014 September 11 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11511 may contain the following files: Name ...

Threat Outbreak Alert RuleID11505: Email Messages Distributing Malicious Software on September 10, 2014

Medium Alert ID: 35671 First Published: 2014 September 11 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11505 may contain the following files: Name ...

SOL15578 - MD5 Message-Digest Algorithm vulnerability CVE-2004-2761

Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. To mitigate this...

Threat Outbreak Alert RuleID11493: Email Messages Distributing Malicious Software on September 10, 2014

Medium Alert ID: 35668 First Published: 2014 September 10 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11493 may contain the following files: Name ...

Threat Outbreak Alert RuleID11497: Email Messages Distributing Malicious Software on September 10, 2014

Medium Alert ID: 35667 First Published: 2014 September 10 14:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11497 may contain the following files: Name ...

Threat Outbreak Alert RuleID11456: Email Messages Distributing Malicious Software on September 8, 2014

Medium Alert ID: 35652 First Published: 2014 September 9 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11456 may contain the following files: Name |...

Threat Outbreak Alert RuleID11446: Email Messages Distributing Malicious Software on September 8, 2014

Medium Alert ID: 35632 First Published: 2014 September 9 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11446 may contain the following files: Name |...

Google 'Sunsetting' Weak SHA-1 Crypto Algorithm

Google announced Friday it will begin the process of phasing out the obsolete SHA-1 cryptographic hash algorithm with the upcoming release of version 39 of the company’s Chrome browser in November. After the November release, Chrome will no longer fully trust sites whose certificate chains trust...

Threat Outbreak Alert RuleID11421: Email Messages Distributing Malicious Software on September 4, 2014

Medium Alert ID: 35617 First Published: 2014 September 5 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11421 may contain the following files: Name |...

帝国CMS（全版） 验证码可无视！可导致验证码无效（验证码识别都是渣渣）

简要描述： 帝国CMS 验证码可无视！可导致验证码无效（验证码识别都是渣渣） 详细说明： 看帝国 获取验证码的代码 //显示验证码 function ShowKey$v $vname=ecmsReturnKeyVarname$v; $key=strtolowerdomakepassword4; ecmsSetShowKey$vname,$key; .................. ecmsReturnKeyVarname 是返回保存验证码的cookie的名称 比如本列打开的页面上注册页面的验证码 url 是...

PostgreSQL Login Utility

This module attempts to authenticate against a PostgreSQL instance using username and password combinations indicated by the USERFILE, PASSFILE, and USERPASSFILE options. Note that passwords may be either plaintext or MD5 formatted hashes. This module requires Metasploit:...

Threat Outbreak Alert RuleID11399: Email Messages Distributing Malicious Software on September 4, 2014

Medium Alert ID: 35600 First Published: 2014 September 4 11:28 GMT Last Updated: 2014 September 5 11:46 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1139...

ManageEngine DeviceExpert 5.9 - User Credential Disclosure

No description provided by source. User credential disclosure in ManageEngine DeviceExpert 5.9 Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Background on the affected product: "DeviceExpert is a...

Threat Outbreak Alert RuleID11371: Email Messages Distributing Malicious Software on September 2, 2014

Medium Alert ID: 35550 First Published: 2014 September 3 21:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11371 may contain the following files: Name |...