Apple Updates XProtect to Detect Mac Trojan

Apple released an update today for its built-in, malware protection platform, XProtect, in response to the emergence of Mac-targeting trojan that hijacks Google searches, according to an article posted on Softpedia. Once the trojan has installed itself on a user’s machine, it starts adding fake...

WordPress <= 3.1.2 - Multiple Unspecified Remote vulnerabilities

Because of these vulnerabilities, the attackers can determine usernames of non-authors via canonical redirects. Solution Update WordPress...

DroidDream Again Appears in Android Market Apps

For Android users, the refrain must be getting a little tiresome: Researchers have found another batch of apps in the Android Market that were infected with malware. Once again, it was the DroidDream malware family causing the trouble, but this time, it was just a handful of apps and they were on...

Web Browser - Remote Exploitation Session

Document Title: =============== Web Browser - Remote Exploitation Session References: =========== Download: http://www.vulnerability-lab.com/resources/videos/14.wmv View: http://www.youtube.com/watch?v=zSFJw9PMHU Release Date: ============= 2011-06-18 Vulnerability Laboratory ID VL-ID:...

PhoenixCMS 1.7.0 Module(Web_Links) Blind SQL Injection

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Movie Player v4.82 0Day Buffer overflow/DOS Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python +Exploit Title: Movie Player v4.82 0Day Buffer overflow/DOS Exploit +Software Link: http://www.movieplay.org/download.php +Software : Movie Player +Version : v4.82 +Tested On : WIN-XP SP3 + Date : 31.03.2011 + Hour : 3:37 PM...

MPlayer Lite r33064 - .m3u Local Overflow (SEH)

MPlayer Lite r33064 - .m3u Local Overflow SEH !/usr/bin/perl +Exploit Title: Exploit Buffer Overflow MsplayerSEH +Date: 19\03\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download +Version: Li...

Android Targeted by Two New Spyware Programs

Two new spyware programs, SW.SecurePhone and SW.Quieting, are targeting users of Android devices, mainly in the U.S., and could lead to serious data compromises, according to new research from NetQin Mobile. These programs are collecting all of the data saved on the phone’s SD card. This data...

eNdonesia 8.4 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= eNdonesia 8.4 SQL Injection Vulnerability ========================================= ======================================================================/ eNdonesia 8.4 Print Module SQL Injection...

New Conference Wants to Bring Malware Writers Out of the Shadows

ED: Malcon Conference hopes to bring malware writers out of the shadows DEK: Malcon, a new, Mumbai-based conference, says that the security community can benefit from what malware authors have to teach. The computer security community is used to vilifying the hackers and malware authors who choos...

PHP-Nuke - friend.php Module SQL Injection

PHP-Nuke - friend.php Module SQL Injection Exploit Title: PHP-Nuke 'friend.php' Module Remote SQL Injection Date: 05.05.2010 Author: CMD Contact : [email protected] Version: all version =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code :...

PHP-Nuke viewslink Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== PHP-Nuke viewslink Remote SQL Injection Vulnerability ===================================================== Version: PHP Nuke 5.0 and other version Dork: allinurl: op=viewslink&sid=...

PHP-Nuke 5.0 - Viewslink SQL Injection

PHP-Nuke 5.0 - Viewslink SQL Injection Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...

SongForever.com-Clone Shell Upload

======================================================================================== | Title : SongForever.com-clone Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site :...

Pay-Per-Install Malware Models Affiliate Marketing

From Black Hat DC: Sites like Amazon offer affiliate programs that pay users for sending them new customers. And now, malware authors, always quick to adopt tactics that work elsewhere, have developed their own affiliate program. Read the full article. MIT Technology Review...

Fedora Core 11 FEDORA-2009-13694 (kernel)

The remote host is missing an update to the linux kernel announced via advisory FEDORA-2009-13694. OpenVAS Vulnerability Test $Id: fcore200913694.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13694 kernel Authors: Thomas Reinke Copyright: Copyrigh...

On the Hunt for Conficker

There are several ongoing investigations attempting to find the authors of the Conficker botnet, one of the fastest spreading worms in history, but those responsible for the worm have proven elusive. Read the full article. TechTarget...

HP OpenView Network Node Manager (OV NNM) 7.53 - 'ovalarm.exe' CGI Remote Buffer Overflow

!/usr/bin/python HP NNP ovalarm.exe CGI Remote Buffer Overflow - Pre Authentication Tested on XP SP3 + IIS + NNM Release B.07.50 Authors: muts & sinn3r x90.sinner a.t gmail.c0m Reference: http://dvlabs.tippingpoint.com/advisory/TPTI-09-12...

Twitter Domain API Back in Malware Fray

Malware writers have revamped code that uses a popular Twitter command to generate hard-to-predict domain names, a technique that brings stealth to their drive-by exploits. Read the full article. The Register...

Fedora Core 10 FEDORA-2009-12690 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-12690. OpenVAS Vulnerability Test $Id: fcore200912690.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12690 expat Authors: Thomas Reinke Copyright: Copyright c 2009...