Threat Outbreak Alert: Fake Picture Sharing Email Messages on October 17, 2013

Medium Alert ID: 31327 First Published: 2013 October 17 18:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a personal photo for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Court Application Document Email Messages on October 16, 2013

Medium Alert ID: 31317 First Published: 2013 October 17 14:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a court application for the recipient. The text in the email message attempts to convince the...

Woltlab Burning Board Regenbogenwiese 2007 Addon - SQL Injection

Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by DieKrabbe Version: 1.5 Tested on: Windows 8/Backtrack !/usr/bin/ruby...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 14, 2013

Medium Alert ID: 31260 First Published: 2013 October 15 15:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body. However, the .rar attachment contains a malicious .exe file that, when executed, attempts to infect the...

Imperva SecureSphere Web Application Firewall MX 9.5.6 - Blind SQL Injection

Blind SQL Injection to Imperva SecureSphere Web Application Firewall MX ======================================================================= ADVISORY INFORMATION Title: Blind SQL Injection on Imperva SecureSphere Web Application Firewall MX Discovery date: 09/04/2013 Release date: 09/10/2013...

Imperva SecureSphere Web Application Firewall MX 9.5.6 - Blind SQL Injection

The management console of Imperva WAF allows an authenticated user having the only privilege to view lookup dataset, to perform a privilege escalation, and extract through a blind sql injection, the MD5 hash of Administrator's account on the console. Blind SQL Injection to Imperva SecureSphere We...

Imperva SecureSphere Web Application Firewall MX 9.5.6 - Blind SQL Injection

Imperva SecureSphere Web Application Firewall MX 9.5.6 - Blind SQL Injection Blind SQL Injection to Imperva SecureSphere Web Application Firewall MX ======================================================================= ADVISORY INFORMATION Title: Blind SQL Injection on Imperva SecureSphere Web...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 9, 2013

Medium Alert ID: 31190 First Published: 2013 October 9 20:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment relating to an invoice for the recipient. The email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Portuguese Personal Picture Notification Email Messages on October 5, 2013

Medium Alert ID: 31128 First Published: 2013 October 7 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain personal images for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Bank Deposit Notification Email Messages on October 3, 2013

Medium Alert ID: 31121 First Published: 2013 October 4 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank deposit for the recipient. The text in the email message attempts to convince the...

destoon b2b system all version SQL injection vulnerability analyses reference exp-vulnerability warning-the black bar safety net

在 include/global.func.php in stripsql function to pass the incoming value for the filter, but we can bypass this limit, to achieve the full version of the injected function stripsql$string $search =...

Threat Outbreak Alert: Fake Court Document Email Messages on October 1, 2013

Medium Alert ID: 31072 First Published: 2013 October 1 14:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a copy of a judicial declaration for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Document Filing Notification Email Messages on October 1, 2013

Medium Alert ID: 31071 First Published: 2013 October 1 14:52 GMT Last Updated: 2013 October 2 18:28 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a document notification regarding annual returns for the recipient. The...

Threat Outbreak Alert: Fake Bank Payment Notice Email Messages on September 30, 2013

Medium Alert ID: 31026 First Published: 2013 September 30 19:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the message body attempts to persuade the recipient to op...

Threat Outbreak Alert: Email Messages with Malicious Attachments on September 26, 2013

Medium Alert ID: 31003 First Published: 2013 September 28 06:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment. The email attempts to convince the recipient to open the attachment. However, the attachment...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on June 5, 2014

Medium Alert ID: 31005 First Published: 2013 September 28 05:39 GMT Last Updated: 2014 June 6 12:40 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Xerox Scan Attachment Email Messages on September 26, 2013

Medium Alert ID: 31001 First Published: 2013 September 26 20:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document from a Xerox WorkCentre Pro device. The text in the email message attempts to convince th...

Threat Outbreak Alert: Fake Package Delivery Invoice Notification Email Messages on September 25, 2013

Medium Alert ID: 30984 First Published: 2013 September 26 19:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery invoice notification for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Fax Document Delivery Email Messages on September 23, 2013

Medium Alert ID: 30957 First Published: 2013 September 24 13:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax document delivery notification for the recipient. The text in the email message attempts to convince t...

[Syhunt Sandcat Browser v4.1] A Penetration-oriented browser (extented to Web Application Assessment)

Sandcat Browser 4 brings unique features that are useful for pen-testers and web developers. Sandcat is built on top of Chromium, the same engine that powers the Google Chrome browser, and uses the Lua programming language to provide extensions and scripting support. Features Live HTTP Headers —...