Report: Google May Face $500m Fine Over Rogue Pharma Ads

The Wall Street Journal is reporting that search giant Google is close to reaching a settlement with the U.S. Justice Department over an investigation of the company’s policy of running ads from online pharmacies that operate outside U.S. borders and in violation of U.S. law. Google has not made ...

XSS in CLASSIFIED ADS

Product: CLASSIFIED ADS Vendor: http://www.got.my http://www.got.my/CLASSIFIED-ADS/ Vulnerable Version: 2.9.1 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

Classifieds Ads 2.9.1 Cross Site Scripting

Product: CLASSIFIED ADS Vendor: http://www.got.my http://www.got.my/CLASSIFIED-ADS/ Vulnerable Version: 2.9.1 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

GoT.MY (Multiple Products) - theme_dir Cross-Site Scripting

GoT.MY Multiple Products - themedir Cross-Site Scripting source: https://www.securityfocus.com/bid/47702/info Multiple GoT.MY products are prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

TextAds 2.08 Cross Site Scripting

=========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting Vulnerability Vendor:...

Classified Ads PLUS Scripts SQL Injection

Exploit Title : Classified Ads PLUS Scripts Sql Injection Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 05-04-2011 + Software Link: http://www.softbizscripts.com/classified-ads-plus-script-features.php + category: Web Apps SQli + HomePage : Black-hat.cc...

Malicious Ads Serving Malware to Spotify Users

Users of free music streaming service, Spotify are reporting that they have been the victims of drive-by malware attacks according to a report from Netcraft. The attacks appear to be coming from third party advertisements which are displayed in the ad-supported version of Spotify’s software. By...

Step 7: Practice Safe Browsing

Rogue antivirus and scareware typically requires user interaction to get a toe hold on victims’ computers. Users can protect themselves by steering clear of suspicious or merely opaque links such as the shortened links common on Twitter and other social media platforms. Beware of pop-up ads warni...

London Stock Exchange website gets hacked with Malware Ads !

London Stock Exchange website gets hacked with Malware Ads ! THE LONDON STOCK EXCHANGE LSE website has been bombarded with fake insecurity software adverts that point to malware. It seems that dodgy security ads have been unknowingly hosted at the LSE website for at least a few months. An analysi...

Hackers Insert Rogue Content on Al Jazeera Arabic Website !

Al-Jazeera said that hackers have managed to bring the rogue content to some of its Arabic website for ads aimed at discrediting the objectivity of its coverage of Egyptian protests. "Hackers have managed to bring the portion of the advertising instead ajjazeera.net distort the network news...

Fake AVG: Scam Software Cops Name and Logo of Real AV

We’ve noted for a while that the practices of rogue antivirus software have started to mimic those of legitimate antivirus software vendors. But a new version of FakeXPA scareware take things a bit further: posing as a legitimate commercial AV package, AVG Antivirus 2011. Microsoft’s Malware...

PHP Classified ads software (cid) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == -Author: BorN To K!LL - h4ck3r -Contact: email protected == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xample:...

FTC Charges Scareware Operators to Pay $8 Million Settlement

The FTC doled out $8 million in fines to the operators of an online scareware scheme. The scam involves tricking consumers into thinking their computers are infected with malware and then selling them software to remedy problems that doesn’t exist in the first place. A district court order in...

PHP Classified Ads Software Blind SQL Injection

== -Author: BorN To K!LL - h4ck3r -Contact: [email protected] == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xample: path/browsecats.php?cid=2 and substringversion,1,1=...

PHP Classified ads software - cid Blind SQL Injection

PHP Classified ads software - cid Blind SQL Injection == -Author: BorN To K!LL - h4ck3r -Contact: [email protected] == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xampl...

PHP Classified ads software - 'cid' Blind SQL Injection

== -Author: BorN To K!LL - h4ck3r -Contact: [email protected] == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xample: path/browsecats.php?cid=2 and substringversion,1,1=...

Fake AV Scareware Passively Served

A piece of fake anti-virus scareware, Antivirus 8, has been infecting computers via ICQ in recent days according to Roel Schouwenberg at Securelist. What makes this fake antivirus popup intriguing is that it appears infecting users who are not actively using their computer. While most fake...

Digital Forensics Framework v0.9.0 latest version download !

"DFF Digital Forensics Framework is a simple but powerful tool with a flexible module system which will help you in your digital forensics works, including file recovery due to error or crash, evidence research and analysis, etc. DFF provides a robust architecture and some handy modules." This is...

Joomla Ads Manager Remote File Inclusion

Joomla Component comadsmanager Remote File Include ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://downloads.ziddu.com/downloadfiles/10982893/comadsmanager.zip .:. Dork : inurl:"comadsmanager" === Exploit ===...

plx Ad Trader 3.2 - Authentication Bypass

Vendor or Software Link: http://www.plxwebdev.com/script/adtrader/ Category:WebApp Version: 3.2 Price: 60 USD Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members Submit Your Exploit at [email protected]...