Automatic Drive-by Download

Added: 07/23/2010 Background This tool waits for client connections, and then gathers information about the operating system and installed software on the client. Next, it chooses the latest and most reliable client exploit for the client's operating system and installed software, and delivers th...

Automatic Drive-by Download

Added: 07/23/2010 Background This tool waits for client connections, and then gathers information about the operating system and installed software on the client. Next, it chooses the latest and most reliable client exploit for the client's operating system and installed software, and delivers th...

Microsoft Windows .LNK Vulnerability

US-CERT is aware of a vulnerability affecting Microsoft Windows. This vulnerability is due to the failure of Microsoft Windows to properly obtain icons for .LNK files. Microsoft uses .LNK files, commonly referred to as "shortcuts," as references to files or applications. By convincing a user to...

Microsoft Windows快捷方式LNK文件自动执行文件漏洞

BUGTRAQ ID: 41732 Microsoft Windows是微软发布的非常流行的操作系统。 Windows支持使用快捷方式或LNK文件。LNK文件是指向本地文件的引用，点击LNK文件与点击快捷方式所指定的目标具有相同的效果。...

Microsoft Windows automatically executes code specified in shortcut files

Overview Microsoft Windows automatically executes code specified in shortcut LNK and PIF files. Description Microsoft Windows supports the use of shortcut or LNK files. A LNK file is a reference to a local file. A PIF file is a shortcut to a MS-DOS application. Clicking on a LNK or PIF file has...

Samsung Handsets Distributed With Malware-Infected Memory Cards

Another mobile-phone manufacturer has fallen victim to an increasingly common attack in which phones’ memory cards are infected with malware during the manufacturing process and then shipped out to customers. The latest victim is Samsung, which has acknowledged that the microSD cards in a batch o...

PlayMeNow M3U Universal Buffer Overflow

!/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original Author: Gr33nG0bL1n Reference:...

PlayMeNow (Windows XP Universal) - '.M3U' Playlist Buffer Overflow

!/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original Author: Gr33nG0bL1n Reference:...

PlayMeNow (Windows XP Universal) - .M3U Playlist Buffer Overflow

PlayMeNow Windows XP Universal - .M3U Playlist Buffer Overflow !/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original...

webshell mention the weight point directory summary-vulnerability warning-the black bar safety net

C:\Documents and Settings\All Users\Start Menu\Programs\ --'look here, can jump, and we from here can get a lot of useful information such as Serv-U path. C:\Documents and Settings\All Users\Application Data\Symantec\pcAnywhere\ --‘see if you can jump to this directory, if the line that is the...

Dogrobot Malware Penetrates System Restore on Windows

GENEVA — Cyber crime gangs in China are penetrating the hard disk recovery cards on computers in Internet cafes and using a combination of zero-day flaws, rootkits and ARP spoofing techniques to steal billions of dollars worth of online gaming credentials. According to Microsoft anti-virus...

Let the administrator help you restart the machine-vulnerability warning-the black bar safety net

Let the administrator help you restart the machine Sometimes, we go through the database backup a batch to the Startup menu, you want the server on the next restart to run our batch processing. But we, Ah, etc., the server is not restarting, what should I do? Allow administrator to help us restar...

Microsoft battles malware with Windows AutoRun changes

In direct response to Conficker and an increased wave of malware attacks targeting the Windows AutoRun feature, Microsoft today announced significant changes to the way the operating system operates when USB drives are used. The changes, detailed on Redmond’s Security Research & Defense blog, hav...

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

Patch for Windows AutoRun problem released

More than a month after the US-CERT alerted users to the problems with the instructions for disabling the AutoRun capability in Windows, Microsoft has released a fix for the AutoRun problem. The guidance that Microsoft had given users previously didn’t completely disable the feature, which is use...

CVE-2009-0243

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

CVE-2009-0243

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...