Security firm Bit9 hacked, Stolen Digital Certs Used To Sign Malware

Bit9 disclosed Friday that hackers had stolen digital code signing certificates from its network and have utilized it to sign malware. Bit9, a company that provides software and network security services to the U.S. government and at least 30 Fortune 100 firms. "As a result, a malicious third par...

xss盲打金蝶旗下快递100

简要描述： 跨呀跨 详细说明： 入驻处有xss点 看到输入框，我兴奋了。。 漏洞证明： pia..跨到鸟...

53KF sql injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: 53KF sql injection Vulnerability Date: 05/10/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: http://www.53kf.com/ Category : webapps Dork : use google Type : asp Tested on: Windows & Ubunt...

Anonymous ransomware spotted in the wild, campaign to Infamous Activists group

Folks from abuse.ch spotted an interesting piece of ransomware malware currently circulating in the wild. Current release is infecting Windows users. It seems that Cybercrooks are taking advantage of Anonymous Banner, for conducting such malware campaigns and supposed to be another game by opposi...

First Irish language Ransomware Malware demanding €100 for unlock

A new Ransomware Malware dubbed Gaeilge locks up an infected computer and attempts to extort €100 from the user for an unlock code. The demand for cash reportedly appeared in poorly written Gaelic, and the software nastie was spotted on a computer in County Donegal, Ireland. Gaeilge tell computer...

Adobe Flash Player 11.3 Font Parsing Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player 11.3 Font Parsing...

Mikrotik Router - Denial of Service

!/usr/bin/python Exploit Title: Mikrotik Router Remote Denial Of Service attack Date: 19/4/2012 Author: PoURaN @ 133tsec.com Software Link: http://www.mikrotik.com Version: All mikrotik routers with winbox service enabled are affected still a 0day 30/5/2012 Tested on: Mikrotis RouterOS 2.9.6 up t...

EMC Data Protection Advisor 5.8.1 - Denial of Service

EMC Data Protection Advisor 5.8.1 - Denial of Service Luigi Auriemma Application: EMC Data Protection Advisor http://www.emc.com/backup-and-recovery/data-protection-advisor/data-protection-advisor.htm Versions: = 5.8.1 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bugs: A...

Dutch News site spread Malware on 100000 Computers

Dutch News site spread Malware on 100000 Computers Dutch popular news site NU.nl appears to be serving Java exploit drive-by malware to users of IE. Nu.nl has approximately one hour long served the Javascript code that attempted to provide visitors to the news site with a trojan to infect. The...

MS11-100: ASP.NET Could Allow Denial of Service (2638420) (uncredentialed check)

Binary data aspnethashcollisiondos.nbin...

Duqu Analysis and Detection Tool by NSS Labs

Duqu Analysis and Detection Tool by NSS Labs NSS Labs has built a new, free tool that detects known and newly created Duqu drivers that have infiltrated systems, thus allowing security experts to further analyze the "functionality, capabilities and ultimate purpose of DuQu.". The Tool is availabl...

Oracle DataDirect Buffer Overflow

g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled...

Fedora 14 : kernel-2.6.35.14-100.fc14 (2011-14747)

Small number of obvious fixes from bugzilla. ---------------------------------------------------------------------- -----= Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

OPC Systems.NET 4.00.0048 Denial Of Service

Luigi Auriemma Application: OPC Systems.NET http://www.opcsystems.com/opcsystemsnet.htm Versions: = 4.00.0048 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 10 Oct 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

Pidgin Libpurple Protocol Plugins Denial of Service Vulnerabilities (Windows)

This host is installed with Pidgin and is prone to denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginlibpurpleprotocolpluginsdosvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ Pidgin Libpurple Protocol Plugins Denial of Service Vulnerabilities Windows Authors: Rachana...

Mandriva Linux Security Advisory : pidgin (MDVSA-2011:132-1)

Multiple vulnerabilities has been identified and fixed in pidgin : It was found that the gdk-pixbuf GIF image loader routine gdkpixbufgifimageload did not properly handle certain return values from its subroutines. A remote attacker could provide a specially crafted GIF image, which, once opened ...

PT-2011-4296

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.0 Description The issue is related to the msn httpconn parse data function in the MSN protocol plugin, which does not properly handle HTTP 100 responses. This allows remote attackers to cause a denial of service,...

DIR 100 Router WebFilter - URL Bypass Vulnerability

Document Title: =============== DIR 100 Router WebFilter - URL Bypass Vulnerability References: =========== View: http://www.youtube.com/watch?v=SCFJXJwmdRA Download: http://www.vulnerability-lab.com/resources/videos/221.wmv Release Date: ============= 2011-07-07 Vulnerability Laboratory ID VL-ID...

[ MDVSA-2011:100 ] cyrus-imapd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:100 http://www.mandriva.com/security/ Package : cyrus-imapd Date : May 24, 2011 Affected: 2009.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been identified and fix...

Apache APR -- DoS vulnerabilities

The Apache Portable Runtime Project reports: A flaw was discovered in the aprfnmatch function in the Apache Portable Runtime APR library 1.4.4 or any backported versions that contained the upstream fix for CVE-2011-0419. This could cause httpd workers to enter a hung state 100% CPU utilization...