Threat Outbreak Alert RuleID13472: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 37396 First Published: 2015 February 9 15:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13472 may contain the following files: Name |...

Threat Outbreak Alert RuleID13465: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 37393 First Published: 2015 February 9 15:52 GMT Last Updated: 2015 February 10 14:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13465...

Sql injection

Multiple SQL injection vulnerabilities in FancyFon FAMOC before 3.17.4 allow 1 remote attackers to execute arbitrary SQL commands via the device ID REST parameter PATHINFO to /ajax.php or 2 remote authenticated users to execute arbitrary SQL commands via the order parameter to index.php...

Joyent Node.js Sequelize SQL Injection Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. Sequelize is one of the database ORM object-relational mapping tool. A SQL injection vulnerability exists in Joyent Node.js Sequelize. A remote attacker can...

CVE-2015-1369

SQL injection vulnerability in Sequelize before 2.0.0-rc7 for Node.js allows remote attackers to execute arbitrary SQL commands via the order parameter...

Threat Outbreak Alert RuleID13134: Email Messages Distributing Malicious Software on July 6, 2015

Medium Alert ID: 37030 First Published: 2015 January 16 17:07 GMT Last Updated: 2015 July 7 13:09 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13134 and...

用友某订单系统POST Oracle注入(疑似通用)

简要描述： 涉及订单就不深入了，但是危害自己知道，如果黑客进去了，就不好办了，故rank为高 详细说明： 有两个问题站点：http://ufbg-ss02.yonyou.com/Login/login.aspx?ReturnUrl=%2flogin.aspx http://desktop.yonyou.com/Login/login.aspx?ReturnUrl=%2flogin.aspx 按照页面上的英文来说，应该是订单系统，涉及订单就不深入了，但是危害自己知道，如果黑客进去了，就不好办了 列出了Oracle用户密码 db： CTXSYS HR MDSYS ODM ODMMTR OE...

North Korea Sanctions Handed Out in Sony Hack

President Obama today signed an Executive Order authorizing sanctions against North Korea for its alleged involvement in the Sony hack. The FBI on Dec. 19 formally blamed the hack on the North Korean government; the attack destroyed workstations and resulted in the loss of employee personal and...

CmsEasy最新版5.5 存储型XSS导致GetShell

简要描述： n处XSS，我不信都插完打不到cookie，get不了shell -.- 详细说明： 第一处（只代码审计第一处，后面几处类似。都是没有过滤）： function loginfalse cookie::set'loginfalse',int cookie::get'loginfalse'+1,time+3600; event::log'loginfalse','失败 user='.front::post'username'; front::flashlang'登陆失败！'."".lang'backuppage'."";...

Discuz! 6. x/7. x a global variable Defense bypass lead to command execution-vulnerability warning-the black bar safety net

Vulnerability overview: Due to php5. 3. x version php. ini settings requestorder the default value for the GP, resulting in Discuz! 6. x/7. x a global variable Defense bypass vulnerability. Vulnerability analysis: | 1 2 3 4 5 6 7 8 9 1 0 1 1 1 2 1 3 1 4 1 5 1 6 1 7 1 8 1 9 2 0 | include/global...

OracleVM 3.1 : xen (OVMSA-2013-0087)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/HVM: only allow ring 0 guest code to make hypercalls Anything else would allow for privilege escalation. This is CVE-2013-4554 / XSA-76. CVE-2013-4554 - x86: restrict XENDOMCTLgetmemlist Coverity ...

OracleVM 3.0 : xen (OVMSA-2012-0056)

The remote OracleVM system is missing necessary patches to address critical security updates : - xen: fix error handling of guestphysmapmarkpopulateondemand The only user of the 'out' label bypasses a necessary unlock, thus enabling the caller to lock up Xen. Also, the function was never meant to...

OracleVM 3.3 : glibc (OVMSA-2014-0033)

The remote OracleVM system is missing necessary patches to address critical security updates : - Remove gconv transliteration loadable modules support CVE-2014-5119, - nlfindlocale: Improve handling of crafted locale names CVE-2014-0475, - Switch gettimeofday from INTUSE to libchiddenproto 109902...

CVE-2014-4807

Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service CPU consumption via a '\0' character...

CVE-2014-4807

Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service CPU consumption via a '\0' character...

FTC Shutters $120 Million Tech Support, Bogus Software Scam

Earlier this week a federal court in Florida issued a temporary restraining order shutting down a series of organizations in the business of peddling fake software and nonexistent tech support services, temporarily freezing the assets of those companies’ and placing them under the control of a...

CVE-2014-9026

The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authenticated users with the "view own orders" permission to obtain sensitive information via unspecified vectors...

Information disclosure

The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authenticated users with the "view own orders" permission to obtain sensitive information via unspecified vectors...

Threat Outbreak Alert RuleID12383: Email Messages Distributing Malicious Software on November 12, 2014

Medium Alert ID: 36395 First Published: 2014 November 12 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12383 may contain the following files: Name |...

74cms(20141027)多处二次注入

简要描述： 看完了xfkxfk大神的 http://wooyun.org/bugs/wooyun-2010-070827 http://wooyun.org/bugs/wooyun-2014-070858 对74cms尝试了下，果然有收货。 详细说明： 1. user/company/companyajax.php elseif$act=="promotionaddsave" reportdeal$uid,2,$points; $userpoints=getuserpoints$uid;...