В протоколе HTTP найдена серьезная DDOS-уязвимость

Исследователи Proactive Risk обнаружили системный дефект в HTTP-протоколе, который позволяет проводить атаки отказа в обслуживании даже в условиях защищенных коммуникаций. Уязвимость опирается на так называемый «медленный» POST-трафик, который затруднительно дифференцировать от законного обмена...

Massive Denial Of Service Attack Severs Myanmar From Internet

The nation of Myanmar, formerly known as Burma, found its access to the Internet severed by a massive denial of service attack, according to a report by Arbor Networks. The source or motivation of the attack isn’t known, but it is believed that the distributed denial of service DDoS attacks have...

New Trojan, Vecebot, Targets Anti-Communist Bloggers

A new family of Trojan Horse programs is being used to stifle political opposition to the Communist Party in Vietnam, according to an analysis by researchers at SecureWorks. The Trojan, dubbed Vecebot, is a new family of malware and has been linked to distributed denial of service DDoS attacks...

Доменная зона .рф откровется для всех желающих 11 ноября

На проходящей в Москве конференции RIPE NCC накануне вечером было объявлено о том, что открытая доменная регистрация в российской зоне .рф стартует 11 ноября в полдень по московскому времени. Напомним, что до сих пор домены .рф могли регистрировать только госучреждения, госпредприятия,...

Personal.Net Portal Multiple Vulnerabilities

Exploit for asp platform in category web applications ============================================ Personal.Net Portal Multiple Vulnerabilities ============================================ Title : Personal.Net Portal Multiple Vulnerabilities Affected Version : Personal.Net Portal Version 2.8.1...

mojoportal Multiple Remote Vulnerabilities

Exploit for asp platform in category web applications ========================================== mojoportal Multiple Remote Vulnerabilities ========================================== Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery :...

mojoportal - Multiple Vulnerabilities

mojoportal - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery :...

mojoportal - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery : www.Abysssec.com Vendor :...

Botnet-For-Hire Model Resurfaces in New IMDDOS Botnet

Researchers have identified a new botnet based in China that was openly selling DDoS-for-hire services and had managed to plant roots inside a number of major U.S. ISPs. The botnet, known as IMDDOS, is mostly contained right now and the researchers are working with authorities to locate its...

Искусство зомбирования: азбука создания неугоняемых ботнетов.

Популярность бот-сетей приносит новую волну на черный рынок. Спектр услуг ограничивается лишь фантазией создателя бота: начиная от назойливого спама, который проходит через антиспам-фильтры, как нож сквозь масло, и заканчивая сервисом сбора кредитных карт в промышленных масштабах. Посмотрим на...

CVE-2010-2361

Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks...

CVE-2010-2362

Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks...

Design/Logic Flaw

Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks...

Design/Logic Flaw

Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks...

CVE-2010-2362

Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks...

CVE-2010-2361

Winny 2.0b7.1 and earlier contains a vulnerability in the processing of BBS information. This flaw can enable a remote attacker to participate in distributed denial-of-service (DDoS) activities. The public sources (e.g., JVN/JVNDB) explicitly advise not using Winny as the mitigation. No patch or ...

CVE-2010-2362

The CVE-2010-2362 issue affects Winny 2.0b7.1 and earlier. It is a vulnerability in the processing of node information, which can be exploited by a remote attacker to have the infected host participate in Distributed Denial of Service (DDoS) activity. As described in JVN sources, affected users m...

CVE-2010-2361

Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks...

CVE-2010-2361: Improper Input Validation

Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks...

CVE-2010-2362: Improper Input Validation

Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks...