Threat Outbreak Alert: Fake Purchase Order Invoice Email Messages on March 16, 2014

Medium Alert ID: 33362 First Published: 2014 March 17 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order invoice notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on March 12, 2014

Medium Alert ID: 33307 First Published: 2014 March 12 17:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Online Order Information Email Messages on March 10, 2014

Medium Alert ID: 33250 First Published: 2014 March 10 14:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain online order information from Amazon for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on March 9, 2014

Medium Alert ID: 33245 First Published: 2014 March 10 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on March 3, 2014

Medium Alert ID: 33168 First Published: 2014 March 5 23:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that purport to contain a purchase order attachment for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on March 5, 2014

Medium Alert ID: 33199 First Published: 2014 March 5 20:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification from Amazon for the recipient. The text in the email message attempts to convince th...

Threat Outbreak Alert: Fake Purchase Order Email Messages on March 1, 2014

Medium Alert ID: 33148 First Published: 2014 March 3 14:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a purchase order for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Sample Order Email Messages on June 23, 2014

Medium Alert ID: 33149 First Published: 2014 March 3 14:49 GMT Last Updated: 2014 June 25 13:05 GMT Version: 20 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample order for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on February 23, 2014

Medium Alert ID: 32987 First Published: 2014 February 24 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to convince the recipient ...

ShopNC一处信息泄露可导致任意用户订单泄露

简要描述： ShopNC在前台的用户隐私信息防护做得很好，但忽略了一处api的防护，导致漏洞产生 漏洞可直接获取包含用户订单详情的json字符串 详细说明： 使用官方商城做演示（http://www.shopnctest.com/c2c/2013/test/ 用户名shopnc 密码shopnc） url:http://www.shopnctest.com/c2c/2013/test/mobile/28aeb56bf14c9a5f826f8ad65bc6d7f0.php?commend=orderdetail&orderid=570 oderid变量可遍历 正确返回是这样的：...

Threat Outbreak Alert: Fake Product Order Delivery Information Email Messages on February 16, 2014

Medium Alert ID: 32882 First Published: 2014 February 17 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product order details for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Order Confirmation Email Messages on February 12, 2014

Medium Alert ID: 32828 First Published: 2014 February 12 16:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order confirmation notification for the recipient. The text in the email message attempts to convince the...

Cybersecurity Framework for U.S. Critical Infrastructure

Critical infrastructure operators have been delivered a cybersecurity framework by the U.S. government that paints broad strokes as to how to defend IT and SCADA networks in some of the country’s most sensitive industries such as energy, water and financial services. NIST today announced the...

Threat Outbreak Alert: Fake Online Order Information Email Messages on February 11, 2014

Medium Alert ID: 32809 First Published: 2014 February 11 16:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain order details for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Order Detail Attachment Email Messages on February 9, 2014

Medium Alert ID: 32782 First Published: 2014 February 10 17:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain order details for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Order Report Information Email Messages on January 31, 2014

Medium Alert ID: 32644 First Published: 2014 January 31 21:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain order information from Amazon for the recipient. The text in the email message attempts to convince the...

kernel: xen: Lock order reversal between page allocation and grant table locks

Xen before 4.1.x, 4.2.x, and 4.3.x does not take the pagealloclock and granttable.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service host deadlock via unspecified vectors...

kernel security and bug fix update

kernel 2.6.18-371.4.1 - char ipmi: fix message handling during panics Tony Camuso 1049731 995293 - net igb: Use 32bit mask calculating the flow control watermarks Stefan Assmann 1041694 1036115 - fs NTLM auth and sign - Use appropriate server challenge Sachin Prabhu 1029865 1018286 - xen gnttab:...

Gag Order Eased on NSA surveillance Transparency Reporting

A gag order has been eased that prevented technology and telecommunications companies from reporting requests for customer data made under the Foreign Intelligence Surveillance Act FISA. The move comes on the heels of announced surveillance reforms by President Obama on Jan. 17. Obama, during an...

Simple e-Document 1.31 SQL Injection / XSS / CSRF Vulnerabilities

Simple e-Document version 1.31 suffers from login bypass, cross site request forgery, cross site scripting, remote shell upload, and remote SQL injection vulnerabilities. +Exploit: Simple e-document v1.31 = Sql inj,Login Bypass,XSS,Insecure Cookie Handlingprivilege escalation,Arbitrary File Uploa...