4442 matches found
Microsoft Malware Data Shows Trojans Rampant in USA
One week after the release of its Microsoft Security Essentials utility, Microsoft is sharing some very useful data on malware infections globally. In the first week alone, the tool counted four million detections on 535,752 distinct machines, with ID-theft related Trojans sitting atop the detect...
Dogrobot Malware Penetrates System Restore on Windows
GENEVA — Cyber crime gangs in China are penetrating the hard disk recovery cards on computers in Internet cafes and using a combination of zero-day flaws, rootkits and ARP spoofing techniques to steal billions of dollars worth of online gaming credentials. According to Microsoft anti-virus...
Linux Botnet Discovered
From The H Security A network of hijacked Linux servers is apparently being used to distribute malicious software to Windows PCs. According to an analysis by web developer Denis Sinegubko, the comprised systems all have one thing in common: the light weight web server nginx is running and serving...
Discuz! Plugin Crazy Star < = 2.0 Sql injection Vulnerability-vulnerability warning-the black bar safety net
========================Author============================ + Founded : ZhaoHuAn + Contact : ZhengXingatshandagamesdotcom + Blog : http://www.patching.net/zhaohuan/ + Date : August, 26th 2 0 0 9 Double Seventh Festival ========================Soft Info========================= Software: Discuz!...
Discuz! Plugin Crazy Star 2.0 - 'fmid' SQL Injection
============================================================ Discuz! Plugin Crazy Star = 2.0 Sql injection Vulnerability ============================================================ ========================Author============================ + Founded : ZhaoHuAn + Contact :...
Discuz! Plugin Crazy Star <= 2.0 (fmid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Discuz! Plugin Crazy Star = 2.0 fmid SQL Injection Vulnerability ===================================================================...
The Microsoft MsVidCtl Video Control Flaw Explained
From Websense Security Labs The recently publicized Zero-Day Vulnerability in Microsoft DirectShow is in the wild and spreads through infection of thousands of legitimate Web sites. The proof-of-concept of the vulnerability is out and exploitation is very easy to achieve. In our labs we have been...
暴风影音（BaoFeng Storm）播放文件缓冲区溢出漏洞
暴风影音是在中国非常流行的万能多媒体播放软件。 暴风影音的medialib.dll库在处理smpl播放列表文件时存在栈溢出漏洞，用户受骗打开了包含有超长路径的播放列表文件就会触发这个溢出，导致执行任意指令。 .text:1000567B ; int stdcall sub1000567BLPCWSTR pszUrl,DWORD pcchPath .text:1000567B sub1000567B proc near ; DATA XREF: .rdata:100248D4 o .text:1000567B .text:1000567B FileName = word ptr -628h...
Baofeng Media Player Stack Overflow
Baofeng Media Player playlist stack overflow vulnerability By Jambalaya of Nevis Labs Date: 2009.06.24 Vender: Baofeng Affected: Storm 3.9.62 Other version may also be affected Overview: Baofeng is a widely popular media player in China, and it plays many common media file formats. There are almo...
Baofeng Media Player playlist stack overflow vulnerability
Baofeng Media Player playlist stack overflow vulnerability By Jambalaya of Nevis Labs Date: 2009.06.24 Vender: Baofeng Affected: Storm 3.9.62 Other version may also be affected Overview: Baofeng is a widely popular media player in China, and it plays many common media file formats. There are almo...
Unfixed XSS vulnerability at www.washingtonchinareview.org
Security researcher Xylitol, has submitted on 06/10/2009 a cross-site-scripting XSS vulnerability affecting www.washingtonchinareview.org, which at the time of submission ranked 12424883 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/201...
Oblog多用户博客程序attachment.asp页面越权漏洞
oBlog多用户博客程序是目前国内应用最广泛的博客程序。OBLOG程序已经广泛应用在国内数万家网站，覆盖国内上千万上网人群，并经过上千家知名网站的严格检测，被称为国内博客建站第一程序oBlog多用户博客程序”是目前国内应用最广泛的博客程序。 漏洞文件：attachment.asp 1. !-- include file= inc/incsyssite.asp -- 2. % 3. Dim Path,rs,FileID,ShowDownErr,uid,fileext 4. Dim SQL 5. Path = TrimRequest path 6. FileID = TrimRequest...
KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability
No description provided by source. KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version = 1.1.0.62 Background: KingSoft Web Shield is a popular anti-malwebsites production of KingSoft Inc. around China. Details: When the KSWebShield detects a malwebsite, it send...
KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability
Exploit for windows platform in category remote exploits ================================================================ KingSoft Web Shield = 1.1.0.62 XSS/Code Execution Vulnerability ================================================================ KingSoft Web Shield XSS and Remote Code...
KingSoft Web Shield XSS / Code Execution
KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version test Just make a website with evil javascript codes, and browse the url shows above...
KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting / Code Execution
KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version test Just make a website with evil javascript codes, and browse the url shows above milw0rm.com 2009-05-19...
China steps up fight against cybercrime
From CSO Robert McMillan In the face of increased attacks by its citzens against Chinese networks, China is stepping up the severity and enforcement of its computer crime laws. China often is cited as one of the major havens for hackers and malware authors, but as this IDG News Service report...
team 1.x - File Disclosure / Cross-Site Scripting
--------------------------------------------------------- Portal Name: Team Board Version : all version Google Dork : team5 studio all rights reserved site:cn Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...
team 1.x - File Disclosure Cross-Site Scripting
team 1.x - File Disclosure Cross-Site Scripting --------------------------------------------------------- Portal Name: Team Board Version : all version Google Dork : team5 studio all rights reserved site:cn Author : PouyaServer , [email protected] Vulnerability : DD/XSS...
Flexphpic 0.0.x SQL Injection
Autore: S.W.A.T. Email: [email protected] Site: Www.BaTLaGH.coM Cms: Flexphpic 0.0.4 & Flexphpic Pro 0.0.3 Download: http://www.china-on-site.com/flexphpic/downloads.php Bug In \admin\usercheck.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...