EUVD-2013-5374

Malware in sbrugna...

CVE-2013-5534

Directory traversal vulnerability in the attachment service in the Voice Message Web Service aka VMWS or Cisco Unity Web Service in Cisco Unity Connection allows remote authenticated users to create files, and consequently execute arbitrary JSP code, via a crafted pathname for a file that is not ...

Lock and Code S1Ep8: Securely working from home (WFH) with John Donovan and Adam Kujawa

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to John Donovan, head of security at Malwarebytes, and Adam Kujawa, director of Malwarebtyes Labs, about securely working from home WFH. With shelter-in-pla...

TimpDoor Android malware turning devices into hidden proxies

By Waqas Android users in North America are the current target of TimpDoor malware. The McAfee Mobile Research team has identified an active phishing campaign that traps users by sending an SMS to influence them on downloading and installing an Android malware app TimpDoor. It is a fake...

Threema Voice Message Plugin - Exported components, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Threema Voice Message Plugin published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert: Fake Voice Message Notice Email Messages on April 29, 2014

Medium Alert ID: 33991 First Published: 2014 April 29 19:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Voice Message Notification Email Messages on April 14, 2014.

Medium Alert ID: 33803 First Published: 2014 April 15 19:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Voice Message Notification Email Messages on January 9, 2014

Medium Alert ID: 32392 First Published: 2014 January 9 21:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message notification for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Voice Message Notification Email Messages on December 19, 2013

Medium Alert ID: 32246 First Published: 2013 December 20 15:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Voice Message Delivery Email Messages on November 21, 2013

Medium Alert ID: 31853 First Published: 2013 November 21 20:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Voice Message Notification Email Messages on November 13, 2013

Medium Alert ID: 31755 First Published: 2013 November 13 20:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Voice Message Notification Email Messages on October 21, 2013

Medium Alert ID: 31391 First Published: 2013 October 21 18:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voice message notification from Bank of America for the recipient. The text in the email message attempts to...

Mutare Software EVM 2.2.9 Cross Site Request Forgery / Cross Site Scripting

Description: Mutare Software EVM 2.2.9 possibly earlier versions is vulnerable to CSRF and XSS. An attacker could do the following to a users' EVM settings: A. Change their EVM PIN B. Delete all of their voice messages C. Change or add any of their delivery address for voicemails CERT Vulnerabili...