FTC Gives Refunds to Rogue Antivirus Victims

The Federal Trade Commission FTC is sending reimbursement checks to more than 300,000 people victimized by a rogue antivirus scam. According to the FTC, the checks are the result of the settlement between the agency and several defendants named in a complaint the FTC filed in 2008. As part of the...

Sql injection

SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...

CVE-2010-4975

SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...

Microsoft's official Youtube channel hacked

Microsoft's official Youtube channel hacked It appears that someone has hacked into Microsoft's account on Youtube and removed all videos. As can be seen in the picture, there are currently no videos at all anymore see the red arrow in the screenshot and the comment about the website is not "Wish...

An Inside Look at Criminal Shipping Operations

Cyber criminals are relying more than ever on mules to move fenced goods from the U.S. to foreign markets for resale, according to a report on krebsonsecurity.com. With online retailers cracking down on fraudulent purchases, criminal gangs are using networks of complicit or unwitting citizens to...

Malicious Ads on Bing Lead to ZeroAccess Trojan

Search-engine poisoning has been the bane of many Internet users’ existence for a long time, and it’s one of many security problems that seems to not be getting any better. In some ways, it may be getting worse, actually. One of the main problems these days is the use of legitimate-looking ads th...

CVE-2010-4911

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Sql injection

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2010-4911

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2010-4911

CVE-2010-4911 : The vulnerability affects PHP Classifieds Ads, specifically the file component classi/detail.php. It is a SQL injection vulnerability exploitable via the sid parameter, enabling remote attackers to execute arbitrary SQL commands. The available connected documents confirm the affec...

Researchers Find Ads on Bing, Yahoo Leading to Malware Downloads

Searching on the Internet is fun. You can find videos of cats making meatloaf, cats playing the hammer dulcimer and cats reading Shakespeare while juggling eggs. Oh, and you can find malware, too. Lots of malware. Researchers at GFI Labs are good at finding that malware, and they’ve come across a...

CVE-2010-4829

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

Sql injection

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2010-4829

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2010-4829

The CVE-2010-4829 issue affects Techno Dreams (T-Dreams) Cars Ads Package 2.0, specifically the processview.asp component. The vulnerability is a SQL injection via the key parameter, enabling remote attackers to execute arbitrary SQL commands. This is caused by improper input handling in the proc...

Researchers Find Browser History-Sniffing Still Ongoing

The practice of history sniffing, which has been seen as out-of-bounds and a serious privacy violation for the better part of a decade now, is still ongoing by some ad networks, researchers have found. A study completed recently by researchers at Stanford University’s Center for Internet and...

CVE-2011-1223

CVE-2011-1223 describes a buffer overflow in the Alternate Data Stream (ADS) / named stream handling of the IBM Tivoli Storage Manager (TSM) backup-archive client on Windows. The vulnerability affects multiple product branches: TSM client versions before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6....

File Transit Inc. Cross Site Scripting

%+ $...............4.........|........0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title:File Transit Inc. persistent XSS vulnerability Vendor: www.filetransit.com Author: $4d0//r007k17 a.k.a Raghavendra Karthik D [email protected] Google Dork: File Transit...

SEO Poisoning Campaign Infecting Users With Black Hole Exploit Kit

Researchers have found a new black hat SEO campaign that is being used to redirect users to links that will install the Black Hole exploit kit. The attack is based on searches for, of all things, Shia Labeouf, and leads users through a forest of redirects before plopping them on the compromised...

Callisto 821+ Cross Site Request Forgery / Cross Site Scripting

Hello list! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough at...