Threat Outbreak Alert RuleID26943: Email Messages Distributing Malicious Software on December 19, 2016

Medium Alert ID: 52155 First Published: 2016 December 19 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26943 may contain the following files: Name |...

Threat Outbreak Alert RuleID26947: Email Messages Distributing Malicious Software on December 19, 2016

Medium Alert ID: 52156 First Published: 2016 December 19 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26947 may contain the following files: Name |...

U.S. Dept Of Defense: HTML injection vulnerability on a DoD website

An HTML injection vulnerability was found on a Department of Defense website which may have been used to trick a web user into viewing modified web content, potentially revealing a user's web session information, or other sensitive information. @kunalkhubchandani was able to demonstrate this...

Threat Outbreak Alert RuleID26935: Email Messages Distributing Malicious Software on December 16, 2016

Medium Alert ID: 52140 First Published: 2016 December 16 22:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26935 may contain the following files: Name |...

Threat Outbreak Alert RuleID26932: Email Messages Distributing Malicious Software on December 16, 2016

Medium Alert ID: 52139 First Published: 2016 December 16 22:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26932 may contain the following files: Name |...

Threat Outbreak Alert RuleID26837: Email Messages Distributing Malicious Software on December 16, 2016

Medium Alert ID: 52135 First Published: 2016 December 16 20:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26837 may contain the following files: Name |...

Threat Outbreak Alert RuleID26493: Email Messages Distributing Malicious Software on December 16, 2016

Medium Alert ID: 52133 First Published: 2016 December 16 20:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26493 may contain the following files: Name |...

Microsoft Internet Explorer 9 IEFRAME CView::EnsureSize Use-After-Free

Since November I have been releasing details on all vulnerabilities I found that I have not released before. This is the 34th entry in the series. This information is available in more detail on my blog at http://blog.skylined.nl/20161216001.html. There you can find a repro that triggered this...

Threat Outbreak Alert RuleID26898: Email Messages Distributing Malicious Software on December 15, 2016

Medium Alert ID: 52124 First Published: 2016 December 15 16:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26898 may contain the following files: Name |...

Threat Outbreak Alert RuleID26888: Email Messages Distributing Malicious Software on December 15, 2016

Medium Alert ID: 52122 First Published: 2016 December 15 16:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26888 may contain the following files: Name |...

Threat Outbreak Alert RuleID26908: Email Messages Distributing Malicious Software on December 15, 2016

Medium Alert ID: 52121 First Published: 2016 December 15 14:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26908 may contain the following files: Name |...

Threat Outbreak Alert RuleID26907: Email Messages Distributing Malicious Software on December 15, 2016

Medium Alert ID: 52120 First Published: 2016 December 15 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26907 may contain the following files: Name |...

Threat Outbreak Alert RuleID26906: Email Messages Distributing Malicious Software on December 15, 2016

Medium Alert ID: 52119 First Published: 2016 December 15 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26906 may contain the following files: Name |...

Threat Outbreak Alert RuleID26905: Email Messages Distributing Malicious Software on December 15, 2016

Medium Alert ID: 52118 First Published: 2016 December 15 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26905 may contain the following files: Name |...

Threat Outbreak Alert RuleID26899: Email Messages Distributing Malicious Software on December 15, 2016

Medium Alert ID: 52116 First Published: 2016 December 15 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26899 may contain the following files: Name |...

OLX: Reflected XSS in [olx.qa]

Hi Team Security @olx I Found Reflected XSS in https://olx.qa via parameter backLink on /m/account/ Information - Reflected XSS : a reflected XSS vulnerability happens when the user input from a URL or POST data is reflected on the page without being stored. This means that an attacker has to sen...

CVE-2016-6843

Open-Xchange OX App Suite before 7.8.2-rev8 is affected. When adding contacts to a group via autocomplete, script code can be injected and executed in the context of the user creating or changing the group, potentially leading to session hijacking or unwanted actions in the web interface (e.g., s...

CVE-2016-3173

Open-Xchange OX AppSuite up to version 7.8.0-rev27 is affected by CVE-2016-3173. The aria-label parameter of Portal tiles can be used to inject script code, with labels derived from file names (e.g., images) displayed in the portal. This leads to script execution in a user’s context, enabling ses...

PortSwigger Web Security: HTTP OPTION Method is Enabled on portswigger.net

Enabled OPTION method on web server allows unauthorized blind submission of privileged GET requests...

Threat Outbreak Alert RuleID26883: Email Messages Distributing Malicious Software on December 14, 2016

Medium Alert ID: 52102 First Published: 2016 December 14 17:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26883 may contain the following files: Name |...