Threat Outbreak Alert RuleID20659: Email Messages Distributing Malicious Software on January 23, 2016

Medium Alert ID: 43174 First Published: 2016 January 25 13:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20659 may contain the following files: Name |...

Cross site scripting

Cross-site scripting XSS vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via the nr parameter to the default URI...

CVE-2008-3505

PolyPager 1.0 rc2 and earlier is affected by a Cross‑site Scripting (XSS) vulnerability. The issue arises in the default URI where an attacker can inject arbitrary web script or HTML through the nr parameter. This is documented in CVE-2008-3505/ NVD as an XSS with a base score of 4.3 (Medium) and...

Xitami Web Server 2.5c2 - LRWP Processing Format String (PoC)

/ PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug Advisory is available at: http://www.bratax.be/advisories/b013.html multiple vulnerabilities! check it out! @author: bratax @url: http://www.bratax.be/ @email: [email protected] Thanks to BuzzDee for learning me how to us...

CVE-2005-4243

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via the 1 popupid parameter in popups.edit.php; 2 so, 3 sb, and 4 nr parameters in customer.tickets.view.php; 5 subrackingid parameter in subscribers.tracking.edit.php; 6 delete...

[SECURITY] New version of apcd released

Package: apcd Vulnerability type: symlink attack Debian-specific: no The apcd package as shipped in Debian GNU/Linux 2.1 is vulnerable to a symlink attack. If the apcd process gets a SIGUSR1 signal it will dump its status to /tmp/upsstat. However this file is not opened safely, which makes it a...