Cross site scripting

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an...

CVE-2013-7385

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an...

CVE-2013-7385

Technical details about this CVE are not publicly available in the provided Connected documents. Monitor for updates.

Threat Outbreak Alert: Fake Email Messages Distributing Malicious Software on May 17, 2014

Medium Alert ID: 34264 First Published: 2014 May 19 13:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain malicious software for the recipient. The text in the email message attempts to convince the recipient to open the attachme...

Threat Outbreak Alert: Fake Bank Account Transfer Notification Email Messages on May 15, 2014

Medium Alert ID: 34255 First Published: 2014 May 16 13:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank payment transfer notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on May 15, 2014

Medium Alert ID: 34238 First Published: 2014 May 16 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank account deposit notification for the recipient. The text in the email message attempts ...

Threat Outbreak Alert: Fake Parking Charge Payment Notice Email Messages on May 15, 2014

Medium Alert ID: 34243 First Published: 2014 May 15 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a parking violation payment notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 14, 2014

Medium Alert ID: 34225 First Published: 2014 May 15 13:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a document for the recipient. The email message attempts to convince the recipient to open the attachment to confirm the...

Threat Outbreak Alert: Email Messages with Malicious Attachment on May 14, 2014

Medium Alert ID: 34230 First Published: 2014 May 14 16:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The email message attempts to convince the recipient to open the attachment for details...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 14, 2014

Medium Alert ID: 34221 First Published: 2014 May 14 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the attachment an...

Srun3000 /download.php 任意文件下载漏洞

深澜Srun3000 一处未经验证的任意下载漏洞下载路径可以用绝对路径，也可以用相对路径 影响版本 : 版本号小于等于 srun3000 3.00rc14.17.5 的更高的版本还未测试测过url:8081/download.php 116行，未经验证允许文件下载造成任意文件下载漏洞。用户只需提交目标文件名和 加盐过的 MD5 值就可以进行下载。 ?php$key="ijfri&8%4";$file=$GET"file";if$GET'k' != md5$file.$keyexit;iffileexists$file $thisbasefile =...

Threat Outbreak Alert: Email Messages with Link to Malicious File on May 5, 2014

Medium Alert ID: 34108 First Published: 2014 May 5 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a link to a file for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Shipment Tracking Information Email Messages on April 30, 2014

Medium Alert ID: 34010 First Published: 2014 April 30 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipment tracking information for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Email Messages with Malicious Links on April 29, 2014

Medium Alert ID: 33985 First Published: 2014 April 29 21:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a link for the recipient. The email message attempts to convince the recipient to open the link for details. However, the...

Threat Outbreak Alert: Fake Malicious Attachment Email Messages on April 28, 2014

Medium Alert ID: 33978 First Published: 2014 April 29 18:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body and an attachment for the recipient. However, the .rar attachment contains a malicious .scr file that, when...

oclHashcat v1.20 - Worlds fastest password cracker

oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on April 28, 2014

Medium Alert ID: 33963 First Published: 2014 April 28 15:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipient...

Mail.ru: SQL injection [дырка в движке форума]

URL: http://kv.mail.ru/forum/search.php?do=process POST DATA:...

Threat Outbreak Alert: Fake Invoice Notification Email Messages on April 24, 2014.

Medium Alert ID: 33942 First Published: 2014 April 25 13:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to convince t...

Threat Outbreak Alert: Fake Purchase Invoice Email Messages on April 24, 2014

Medium Alert ID: 33928 First Published: 2014 April 24 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase invoice for the recipient. The text in the email message instructs the recipient to open a .zip...