Somebody Offered Money to Raspberry Pi Foundation for Pre-Installing Malware

The Raspberry Pi is now gaining attention from malware distributors who want the popular mini-computers to deliver with pre-install malware. The Raspberry Pi Foundation has made a shocking revelation that the charitable foundation has been offered money to install malware onto the Raspberry Pi...

activeyou.co.uk XSS vulnerability

Vulnerable URL: http://www.activeyou.co.uk/offers/marbella/?cid=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Threat Outbreak Alert RuleID18998: Email Messages Distributing Malicious Software on October 29, 2015

Medium Alert ID: 41752 First Published: 2015 October 27 13:48 GMT Last Updated: 2015 October 29 14:35 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18998...

aromes-et-gourmandises.fr XSS vulnerability

Vulnerable URL: http://www.aromes-et-gourmandises.fr/shop.php?action=%22%22;%3C/script%3E%3Cscript%3Eprompt%28/XSSPOSED/%29%3C/script%3E%3C%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Code injection

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

FreeBSD : asterisk -- File descriptor leak when incompatible codecs are offered (2eeb6652-a7a6-11e4-96ba-001999f8d30b)

The Asterisk project reports : Asterisk may be configured to only allow specific audio or video codecs to be used when communicating with a particular endpoint. When an endpoint sends an SDP offer that only lists codecs not allowed by Asterisk, the offer is rejected. However, in this case, RTP...

dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)

dhclient 4.1 - Bash Environment Variable Command Injection Shellshock !/usr/bin/python Exploit Title: ShellShock dhclient Bash Environment Variable Command Injection PoC Date: 2014-09-29 Author: @fdiskyou e-mail: rui at deniable.org Version: 4.1 Tested on: Debian, Ubuntu, Kali CVE: CVE-2014-6277,...

Threat Outbreak Alert: Fake Software Offer Email Messages on March 3, 2014

Medium Alert ID: 33167 First Published: 2014 March 4 21:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Employment Offer Email Messages on January 31, 2014

Medium Alert ID: 32643 First Published: 2014 January 31 21:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an employment opportunity for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Job Offer Notification Email Messages on January 16, 2014

Medium Alert ID: 32475 First Published: 2014 January 17 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Job Offer Information Email Messages on January 9, 2014

Medium Alert ID: 32388 First Published: 2014 January 9 17:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Job Offer Documents Email Messages on December 24, 2013

Severity Alert ID: 32283 First Published: 2014 January 2 14:43 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on December 24, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Threat Outbreak Alert: Fake Software Offer Email Messages on December 9, 2013

Medium Alert ID: 32100 First Published: 2013 December 10 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a software offer notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Job Offer Notification Email Messages on November 19, 2013

Medium Alert ID: 31826 First Published: 2013 November 19 17:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer from Altran Company for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Job Offer Inquiry Email Messages on November 12, 2013

Medium Alert ID: 31742 First Published: 2013 November 13 17:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Job Offer Email Messages on July 3, 2013

Medium Alert ID: 29945 First Published: 2013 July 5 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer for the recipient. The text in the email message attempts to persuade the recipient to download a .zip...

Threat Outbreak Alert: Fake Loan Offer Email Messages on June 14, 2013

Medium Alert ID: 29674 First Published: 2013 June 17 11:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a loan offer for the recipient. The text in the email message attempts to convince the recipient to open the...

Unfixed XSS vulnerability at tradingkstocks.com

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting tradingkstocks.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...