AT&T Facilitated NSA Surveillance Efforts

Telecommunication giant AT&T facilitated, to a larger degree than any other provider, the National Security Agency’s surveillance reach beyond domestic telephone data collection to email and Internet traffic, companion New York Times and ProPublica articles said on Saturday. It’s probably the...

My Category Order <= 4.3 - Authenticated Cross-Site Scripting (XSS)

The my-category-order WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

WordPress My Page Order Plugin <= 4.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameters are "pages" and "hdnParentID". Solution Upgrade this plugin...

My Page Order <= 4.3 - Authenticated Cross-Site Scripting (XSS)

The my-page-order WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

WordPress My Page Order Plugin <= 4.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameters are "pages" and "hdnParentID". Solution Upgrade this plugin...

WordPress Kiwi Logo Carousel Plugin <= 1.7.1 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "tabflagsorder". Solution Update this plugin...

Threat Outbreak Alert RuleID17180: Email Messages Distributing Malicious Software on August 10, 2015

Medium Alert ID: 40382 First Published: 2015 August 10 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17180 may contain the following files: Name |...

Threat Outbreak Alert RuleID16981: Email Messages Distributing Malicious Software on August 05, 2015

Medium Alert ID: 40319 First Published: 2015 August 5 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16981 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID16955: Email Messages Distributing Malicious Software on October 12, 2015

Medium Alert ID: 40155 First Published: 2015 July 27 22:33 GMT Last Updated: 2015 October 12 18:14 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16955 and...

金蝶shop商城后台弱口令泄露大量商家/会员信息/订单/网站信息

简要描述： 之前报的洞走了大厂商竟然就给了1rank，桑心啊，深夜挖洞挺不容易的，求给良心rank。。。 详细说明： 直接上图证明吧，出现问题的域名。 http://k3shop.k3cloud.kingdee.com/ 大致的扫了下网站目录，找到后台可直接登录admin用户！ 泄露的网站信息 http://k3shop.k3cloud.kingdee.com/sitemap.xml 漏洞证明： 订单信息 商家信息 会员信息...

WordPress Floating Social Bar Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in the 'saveorder' function in the class-floating-social-bar.php script in versions of the...

Threat Outbreak Alert RuleID16670: Email Messages Distributing Malicious Software on July 15, 2015

Medium Alert ID: 39961 First Published: 2015 July 16 13:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16670 may contain the following files: Name | Siz...

ZenPhoto 1.4.8 - Multiple Vulnerabilities

ZenPhoto version 1.4.8 suffers from cross site scripting, remote SQL injection, and path traversal vulnerabilities. Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version...

Threat Outbreak Alert RuleID16511: Email Messages Distributing Malicious Software on July 7, 2015

Medium Alert ID: 39799 First Published: 2015 July 8 17:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16511 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID16483: Email Messages Distributing Malicious Software on September 30, 2015

Medium Alert ID: 39791 First Published: 2015 July 8 17:42 GMT Last Updated: 2015 October 1 15:17 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16483 and...

Threat Outbreak Alert RuleID15980: Email Messages Distributing Malicious Software on October 7, 2015

Medium Alert ID: 39551 First Published: 2015 June 30 13:19 GMT Last Updated: 2015 October 7 19:54 GMT Version: 14 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15980 and...

OracleVM 3.3 : nss (OVMSA-2015-0073)

The remote OracleVM system is missing necessary patches to address critical security updates : nss - Added nss-vendor.patch to change vendor - Additional NULL initialization. - Updated the patch to keep old cipher suite order - Resolves: Bug 1224449 - Rebase to nss-3.19.1 - Resolves: Bug 1224449 ...

Threat Outbreak Alert RuleID15850: Email Messages Distributing Malicious Software on June 10, 2015

Medium Alert ID: 39287 First Published: 2015 June 10 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15850 may contain the following files: Name | Siz...

CVE-2015-4024

Algorithmic complexity vulnerability in the multipartbufferheaders function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service CPU consumption via crafted form data that triggers an improper order-of-growth...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/Sales/meb_his.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...