4430 matches found
Aurora Attack Malware Components May Be Four Years Old
Although the first known attacks using the Aurora malware that compromised Google weren’t discovered until late last year, some parts of the malware codebase has been in existence in China for nearly four years, raising questions about how many other attacks it might have been used in during that...
Microsoft Confirms IE Zero-Day Used in Google Attack
Hackers linked to China used a zero-day vulnerability in Microsoft’s Internet Explorer browser to compromise corporate systems at more than 30 U.S. companies, including Google, Adobe and Juniper Networks. According to Microsoft, the vulnerability is still unpatched and can lead to remote code...
Google Attack Should Be No Surprise
The attack that compromised Google’s corporate network and the systems of more than 30 other companies in recent weeks appears to be the work of smart, careful and very well-informed attackers who knew exactly whom to target and what to take once they were inside, security experts say. Google, an...
Google Threatens China Pullout After Cyber Attack
Google said in a blog post today that it will consider shutting down its site in China and closing its offices, following a large scale attack on its corporate infrastructure originating from China that resulted in the theft of Google’s intellectual property. Read the full story ZDNet...
Discuz 1.0 Cross Site Scripting
======================================================================================== | Title : Discuz Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 1 | Hig...
Trojan Hackers Get Prison in China
A Chinese court Wednesday sentenced 11 members of a malware ring for writing and distributing Trojan horse viruses meant to steal online game account passwords, according to state media. Read the full article. IDG News Service...
DNS Changes in China Could Thwart Malware
Security researchers believe changes being made by the Chinese government to the DNS process could help limit the number of malicious sites using the .cn top-level domain. Read the full article. eWEEK...
Foxy
Foxy is a Traditional Chinese peer to peer file sharing application. It is widely used in Hong Kong, Mainland China and Taiwan. Unlike other peer to peer software, Foxy is very easy to use and has unlimited download capabilities. The use of Foxy may circumvent the organizational security policy...
Microsoft Malware Data Shows Trojans Rampant in USA
One week after the release of its Microsoft Security Essentials utility, Microsoft is sharing some very useful data on malware infections globally. In the first week alone, the tool counted four million detections on 535,752 distinct machines, with ID-theft related Trojans sitting atop the detect...
Dogrobot Malware Penetrates System Restore on Windows
GENEVA — Cyber crime gangs in China are penetrating the hard disk recovery cards on computers in Internet cafes and using a combination of zero-day flaws, rootkits and ARP spoofing techniques to steal billions of dollars worth of online gaming credentials. According to Microsoft anti-virus...
Linux Botnet Discovered
From The H Security A network of hijacked Linux servers is apparently being used to distribute malicious software to Windows PCs. According to an analysis by web developer Denis Sinegubko, the comprised systems all have one thing in common: the light weight web server nginx is running and serving...
Discuz! Plugin Crazy Star < = 2.0 Sql injection Vulnerability-vulnerability warning-the black bar safety net
========================Author============================ + Founded : ZhaoHuAn + Contact : ZhengXingatshandagamesdotcom + Blog : http://www.patching.net/zhaohuan/ + Date : August, 26th 2 0 0 9 Double Seventh Festival ========================Soft Info========================= Software: Discuz!...
Discuz! Plugin Crazy Star <= 2.0 (fmid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Discuz! Plugin Crazy Star = 2.0 fmid SQL Injection Vulnerability ===================================================================...
Discuz! Plugin Crazy Star 2.0 - 'fmid' SQL Injection
============================================================ Discuz! Plugin Crazy Star = 2.0 Sql injection Vulnerability ============================================================ ========================Author============================ + Founded : ZhaoHuAn + Contact :...
The Microsoft MsVidCtl Video Control Flaw Explained
From Websense Security Labs The recently publicized Zero-Day Vulnerability in Microsoft DirectShow is in the wild and spreads through infection of thousands of legitimate Web sites. The proof-of-concept of the vulnerability is out and exploitation is very easy to achieve. In our labs we have been...
暴风影音（BaoFeng Storm）播放文件缓冲区溢出漏洞
暴风影音是在中国非常流行的万能多媒体播放软件。 暴风影音的medialib.dll库在处理smpl播放列表文件时存在栈溢出漏洞，用户受骗打开了包含有超长路径的播放列表文件就会触发这个溢出，导致执行任意指令。 .text:1000567B ; int stdcall sub1000567BLPCWSTR pszUrl,DWORD pcchPath .text:1000567B sub1000567B proc near ; DATA XREF: .rdata:100248D4 o .text:1000567B .text:1000567B FileName = word ptr -628h...
Baofeng Media Player Stack Overflow
Baofeng Media Player playlist stack overflow vulnerability By Jambalaya of Nevis Labs Date: 2009.06.24 Vender: Baofeng Affected: Storm 3.9.62 Other version may also be affected Overview: Baofeng is a widely popular media player in China, and it plays many common media file formats. There are almo...
Baofeng Media Player playlist stack overflow vulnerability
Baofeng Media Player playlist stack overflow vulnerability By Jambalaya of Nevis Labs Date: 2009.06.24 Vender: Baofeng Affected: Storm 3.9.62 Other version may also be affected Overview: Baofeng is a widely popular media player in China, and it plays many common media file formats. There are almo...
Unfixed XSS vulnerability at www.washingtonchinareview.org
Security researcher Xylitol, has submitted on 06/10/2009 a cross-site-scripting XSS vulnerability affecting www.washingtonchinareview.org, which at the time of submission ranked 12424883 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/201...
KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability
No description provided by source. KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version = 1.1.0.62 Background: KingSoft Web Shield is a popular anti-malwebsites production of KingSoft Inc. around China. Details: When the KSWebShield detects a malwebsite, it send...