Threat Outbreak Alert: Email Messages with Malicious Attachments on March 3, 2014

Medium Alert ID: 33155 First Published: 2014 March 3 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment for...

POSH多个安全漏洞

Bugtraq ID:65818 POSH是一个基于PHP的WEB应用。 POSH存在多个安全漏洞，包括多个跨站脚本，任意URL重定向和设计漏洞，允许攻击者利用漏洞获取敏感信息或劫持用户会话，及获取用户名和密码MD5摘要信息。 0 POSH = 3.2.1 目前没有详细解决方案提供： http://sourceforge.net/projects/posh/...

Threat Outbreak Alert: Fake Price List Request Email Messages on February 26, 2014

Medium Alert ID: 33090 First Published: 2014 February 27 20:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a request for a new price list for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Bill Payment Notification Email Messages on April 22, 2014

Medium Alert ID: 33025 First Published: 2014 February 25 20:37 GMT Last Updated: 2014 April 24 13:31 GMT Version: 2 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain bill payment notification for the recipient. The text i...

Threat Outbreak Alert: Fake Payment Details Notification Email Messages on February 20, 2014.

Medium Alert ID: 32958 First Published: 2014 February 21 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment details for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Image Notification Email Messages on February 18, 2014

Medium Alert ID: 32918 First Published: 2014 February 19 20:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain images for the recipient. The text in the e-mail message attempts to convince the recipie...

kernel

New kernel packages are available for Slackware 14.1 64-bit to fix a security issue. Here are the details from the Slackware64 14.1 ChangeLog: patches/packages/linux-3.10.17-2/: These are new kernels that fix CVE-2014-0038, a bug that can allow local users to gain a root shell. Be sure to reinsta...

Threat Outbreak Alert: Fake Payment Details Notification Email Messages on February 18, 2014.

Medium Alert ID: 32921 First Published: 2014 February 19 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment details for the recipient. The text in the email message attempts to convince the recipient to open t...

ecshop找回密码功能存在安全隐患

简要描述： 可能随时都能重置用户密码问题 详细说明： user.php 740行 / 修改会员密码 / elseif $action == 'acteditpassword' includeonceROOTPATH . 'includes/libpassport.php'; $oldpassword = isset$POST'oldpassword' ? trim$POST'oldpassword' : null; $newpassword = isset$POST'newpassword' ? trim$POST'newpassword' : ''; $userid =...

Threat Outbreak Alert: Fake Invoice Email Messages on February 13, 2014

Medium Alert ID: 32862 First Published: 2014 February 13 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Fax Message Notification Email Messages on February 13, 2014

Medium Alert ID: 32865 First Published: 2014 February 13 20:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message notification for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Refund Form Notification Email Messages on February 11, 2014.

Medium Alert ID: 32820 First Published: 2014 February 13 17:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a refund form for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Invoice Email Messages on February 12, 2014

Medium Alert ID: 32846 First Published: 2014 February 12 19:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Payment Deposit Attachment Email Messages on February 11, 2014

Medium Alert ID: 32822 First Published: 2014 February 12 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a deposit attachment for the recipient. The text in the email message attempts to convinc...

[Rootkit Hunter] Scanning tool to ensure you for about 99.9%* you're clean of nasty tools

Rootkit scanner is scanning tool to ensure you for about 99.9% you're clean of nasty tools. This tool scans for rootkits, backdoors and local exploits by running tests like: - MD5 hash compare - Look for default files used by rootkits - Wrong file permissions for binaries - Look for suspected...

Threat Outbreak Alert: Email Messages with Malicious Attachments on February 7, 2014

Medium Alert ID: 32778 First Published: 2014 February 7 18:43 GMT Last Updated: 2014 February 10 14:37 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convin...

Threat Outbreak Alert: Fake Payment Details Email Messages on February 6, 2014

Medium Alert ID: 32771 First Published: 2014 February 7 17:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment details for the recipient. The text in the email message attempts to convince the recipient to open an...

Microsoft February Patch Tuesday : Two critical and Three Important Security Updates

Today Microsoft has released Security Bulletin Advanced Notification for February 2014 Patch Tuesday. The notification dictates five bulletins out of which two have critical Remote Code Execution and rest are important in aspect to severity of security flaw. A Remote Code Execution vulnerability...

February 2014 Microsoft Patch Tuesday Security Bulletins

February’s Microsoft Patch Tuesday promises to be a relatively straightforward set of bulletins, but more noteworthy is that it’s the same day Microsoft officially deprecates the MD5 hash algorithm. Announced last August, Microsoft will officially restrict the use of digital certificates with MD5...

Threat Outbreak Alert: Fake Malicious Attachment Notification Email Messages on February 4, 2014.

Medium Alert ID: 32724 First Published: 2014 February 5 13:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the...