CVE-2014-0831

CVE-2014-0831: IBM Financial Transaction Manager (FTM) 2.0 OAC is vulnerable to Cross-Site Request Forgery. An authenticated attacker could trigger edits to configuration data. Affected product: FTM 2.0 (OAC). Root cause: CSRF in the OAC component. Impact: potential unauthorized configuration cha...

Threat Outbreak Alert: Fake Transaction Details Notification Email Messages on January 21, 2014

Medium Alert ID: 32515 First Published: 2014 January 22 16:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain transaction details for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Transaction Notification Email Messages on January 13, 2014

Medium Alert ID: 32414 First Published: 2014 January 14 15:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain transaction details for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Transaction Processing Failure Notification Email Messages on January 9, 2014

Medium Alert ID: 32393 First Published: 2014 January 9 21:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed transaction notice for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Bank Transaction Document Email Messages on December 4, 2013

Medium Alert ID: 32015 First Published: 2013 December 4 22:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transaction notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Financial Transaction Notification Email Messages on November 25, 2013

Medium Alert ID: 31883 First Published: 2013 November 25 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain financial transaction details for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Financial Transaction Email Messages on November 24, 2013

Medium Alert ID: 31888 First Published: 2013 November 25 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to...

CVE-2013-5193

The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a 1 App purchase or 2 In-App purchase by leveraging previous entry of Apple ID credentials...

Design/Logic Flaw

The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a 1 App purchase or 2 In-App purchase by leveraging previous entry of Apple ID credentials...

CVE-2013-5193

The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a 1 App purchase or 2 In-App purchase by leveraging previous entry of Apple ID credentials...

CVE-2013-5193

The CVE-2013-5193 issue affects Apple iOS up to version 7.0.3, where the App Store component does not properly enforce a required transaction password, allowing a local user to complete (1) App purchases or (2) In‑App purchases by using previously entered Apple ID credentials. The root cause is i...

Threat Outbreak Alert: Fake Visa Card Fraudulent Transaction Notification Email Messages on November 13, 2013

Medium Alert ID: 31754 First Published: 2013 November 13 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fraudulent transaction notification for the recipient. The text in the email message attempts to persuade t...

Threat Outbreak Alert: Fake Transaction Processing Notification Email Messages on November 11, 2013

Medium Alert ID: 31718 First Published: 2013 November 12 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a transaction notification for the recipient. The text in the email message attempts to convince the recipien...

millions stolen in Bitcoin heist

More trouble for Bitcoin this week after an Australian wallet service admitted that attackers broke into their systems and made off with more than $1.2 million worth of the the digital crypto-currency. The theft comes on the coat-tails of a contentious research paper claiming that a...

[ISecAuditors Security Advisories] Multiple Reflected XSS vulnerabilities in BoltWire <= v3.5

============================================= INTERNET SECURITY AUDITORS ALERT 2013-010 - Original release date: March 20th, 2013 - Last revised: March 25th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score - CVE-ID: CVE-2013-2651...

Threat Outbreak Alert: Fake Swift Transaction Notification Email Messages on October 3, 2013

Medium Alert ID: 31118 First Published: 2013 October 4 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a swift transaction notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Transaction Disabled Notification Email Messages on August 6, 2013

Medium Alert ID: 30339 First Published: 2013 August 7 19:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain information about a disabled ACH transaction for the recipient. The text in the email message attempts to convin...

Threat Outbreak Alert: Fake Payment Transaction Notification Email Messages on August 1, 2013

Medium Alert ID: 30274 First Published: 2013 August 1 16:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transaction notification for the recipient. The text in the email message attempts to convince the...

SAP NetWeaver SOAP RFC SXPG_COMMAND_EXECUTE Command Execution

Added: 07/03/2013 BID: 55084 OSVDB: 93536 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain externa...

CVE-2013-0509

Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors SSM and Application Service Monitors ASM 4.0.0 before FP14 allows remote attackers to execute arbitrary code via a SQL transaction with a long table name that is not properly handled by a packet decoder...