Drive-By Downloads Still Running Wild

For some time now, the browser has been the most dangerous piece of software on the Web, and to hear researchers tell it, the climate it likely to get far worse before it gets any better. The attack landscape has shifted in a lot of important ways in the last few years, but none of the changes ha...

vBulletin Downloads FileInfo SQL Injection

=========================================== Vbulletin Downloads FileInfo SQL Injection =========================================== +Title : Vbulletin Downloads FileInfo SQL Injection +Software : FileInfo +Vendor : http://www.vbulletin.com +Download : http://www.vbulletin.com/download.php +Author ...

Security Flaw in Mac Safari Remains Unfixed for Two Years, Experts Concerned

Two years after fixing a security bug in the Windows version of its Safari browser, Apple apparently has decided that Mac users can go without a fix. Apple was initially unimpressed by Nitesh Dhanjani’s work developing what’s known as a “carpet bomb” attack, the security researcher said in an...

Firesheep – Social Network Session Stealing/Hijacking Tool

A huge wave has been made by this tool in the mainstream media this week as it makes session stealing/hijacking a click and go procedure. It was released at Toorcon 12 and is simply a Firefox Add-on. Stealing sessions/passwords and so on is something we've been able to do for a LONG time using...

Inside Google's Anti-Malware Operation

TORONTO–A Google malware researcher gave a rare peek inside the company’s massive anti-malware and anti-phishing efforts at the SecTor conference here, and the data that the company has gathered shows that the attackers who make it their business to infect sites and exploit users are adapting the...

Real SEO Feeding Traffic to Fake Search Engines

Online scam artists are using black hat search engine optimization SEO techniques to push more than just malicious software. In fact, SEO is increasingly being used to drive traffic to a range of phony Web based search engines that are feeding cost-per-click advertising scams, according to a blog...

Fedora 14 : rekonq-0.6.1-1.fc14 (2010-15874)

Mem leak fixed in the bars - Bookmarklets support - No more focus stealing on external url calls - Chinese sites right encoding - OpenSearch suggestions localized - Fixed urlbar crash in disconnected mode - AdBlock performance improvements - UrlBar Improvements - Suggestions - History Review -...

Directory traversal in multiple FTP clients

It's possible for file to be downloaded outside directory choosen by user...

Two Unpatched Flaws Show Up in Apple iOS

The technique that the Jailbreakme.com Web site is using to bypass the iPhone’s security mechanisms and enable users to run unapproved apps on their phones involves exploiting two separate vulnerabilities. One of the vulnerabilities is a memory-corruption flaw that affects the way that Apple’s...

CVE-2010-2912: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the a parameter in a downloads action...

Kayako eSupport v3.70.02 SQL injection Vulnerability

Exploit for php platform in category web applications ==================================================== Kayako eSupport v3.70.02 SQL injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Sandbox 2.0.3 Bypass / Local File Inclusion / Shell Upload / SQL Injection

Sandbox 2.0.3 Multiple Remote Vulnerabilities Name Sandbox Vendor http://www.iguanadons.net Versions Affected 2.0.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-07 X. INDEX I. ABOUT THE APPLICATION II...

CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

Joomla Joomdocs Cross Site Scripting

======================================= Joomla comjoomdocs XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...

Joomla Component com_joomdocs XSS Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Component comjoomdocs XSS Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Understanding The Porn + Malware Connections

CAMBRIDGE — For a minimal investment of about $160, a single porn site operator can infect more than 20,000 computers with malware for use in cybercrime, according to an academic study presented at the Workshop on the Economics of Information Security WEIS 2010. The research team presented a...

CVE-2010-2037

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2037

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2037

CVE-2010-2037 is a directory traversal vulnerability in the Joomla! component Percha Downloads Attach (com_perchadownloadsattach) version 1.1. An attacker can read arbitrary files by providing a ‘..’ in the controller parameter to index.php, enabling potential exposure of sensitive information an...