Threat Outbreak Alert: Fake Shipment Tracking Information Email Messages on April 30, 2014

Medium Alert ID: 34010 First Published: 2014 April 30 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipment tracking information for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Shipment Tracking Information Email Messages on April 18, 2014

Medium Alert ID: 33852 First Published: 2014 April 18 13:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipment tracking information from UPS for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Delivery Rescheduling Notice Email Messages on April 10, 2014

Medium Alert ID: 33744 First Published: 2014 April 10 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a delivery rescheduling notice from UPS for the recipient. The text in the email message attempts to convince th...

[SECURITY] [DSA 2867-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2867-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 23, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2867-1 (otrs2 - several vulnerabilities)

Several vulnerabilities were discovered in otrs2, the Open Ticket Request System. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-1694 Norihiro Tanaka reported missing challenge token checks. An attacker that managed to take over the session of a logge...

CVE-2014-1694

Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...

DEBIAN-CVE-2014-1694

Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...

UBUNTU-CVE-2014-1694

Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...

FreeBSD : otrs -- multiple vulnerabilities (c7b5d72b-886a-11e3-9533-60a44c524f57)

The OTRS Project reports : SQL injection issue An attacker that managed to take over the session of a logged in customer could create tickets and/or send follow-ups to existing tickets due to missing challenge token checks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Threat Outbreak Alert: Fake Missed Shipping Delivery Notice Email Messages on January 27, 2014

Medium Alert ID: 32579 First Published: 2014 January 27 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a UPS shipping notification for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Shipping Order Notification Email Messages on January 14, 2014.

Medium Alert ID: 32431 First Published: 2014 January 15 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipping order details for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Package Delivery Information Email Messages on November 7, 2013

Medium Alert ID: 31684 First Published: 2013 November 8 17:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain package delivery information for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Delivery Failure Notice Email Messages on October 18, 2013

Medium Alert ID: 31362 First Published: 2013 October 18 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery failure notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Package Delivery Invoice Notification Email Messages on September 25, 2013

Medium Alert ID: 30984 First Published: 2013 September 26 19:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery invoice notification for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Email Messages with Malicious Attachments on September 25, 2013

Medium Alert ID: 30955 First Published: 2013 September 24 13:06 GMT Last Updated: 2013 September 25 19:43 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain attachments for the recipient. The email message attempts to...

Fedora 18 : asterisk-11.5.1-2.fc18 (2013-15567)

Thu Aug 29 2013 Jeffrey Ollie - 11.5.1-2 : - Enable hardened build BZ954338 - Significant clean ups - Thu Aug 29 2013 Jeffrey Ollie - 11.5.1-1 : - The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15, 11.2, and Asterisk 1.8, 10, and 11. The available...

Fedora 19 : asterisk-11.5.1-2.fc19 (2013-15560)

Thu Aug 29 2013 Jeffrey Ollie - 11.5.1-2 : - Enable hardened build BZ954338 - Significant clean ups - Thu Aug 29 2013 Jeffrey Ollie - 11.5.1-1 : - The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15, 11.2, and Asterisk 1.8, 10, and 11. The available...

Threat Outbreak Alert: Fake Package Delivery Notification Email Messages on September 3, 2013

Medium Alert ID: 30645 First Published: 2013 September 4 18:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery notification from UPS for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake UPS Parcel Notification Email Messages on August 15, 2013

Medium Alert ID: 30435 First Published: 2013 August 15 17:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a UPS parcel notification for the recipient. The text in the email message attempts to convince the recipient t...