Spammers Using SHY Character to Hide Malicious URLs

Spammers have jumped on the little-used soft hyphen or SHY character to fool URL filtering devices. According to researchers at Symantec Corp., spammers are larding up URLs for sites they promote with the soft hyphen character, which many browsers ignore. Spammers aren’t shy about jumping humans...

Lotus Domino nrouter.exe iCalendar MAILTO buffer overflow

Added: 09/24/2010 CVE: CVE-2010-3407 BID: 43219 OSVDB: 68040 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow in the nrouter.exe service allows remote attackers to execute arbitrary commands by sending an iCalendar message...

CVE-2010-2728

CVE-2010-2728 is a heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2 that occurs when Online Mode for an Exchange Server is enabled. A crafted e-mail message can lead to remote code execution. Public sources (MS10-064) confirm the vulnerability and provide the secur...

Malicious Email Campaign Circulating

US-CERT is aware of public reports of malware spreading via email. These reports indicate that the malicious email messages contain the subject line "Here you have" or "Just For You" and contain a link to a seemingly legitimate PDF file. If users click on this link, they will be redirected to a...

Secure your e-mail

This advice can be extended to general online activity, not just social networks, and most importantly, not just Twitter. You should care at least as much for the security of your e-mail account, especially if it was used to register your Twitter or Facebook accounts. Basically, a compromised ema...

How to Avoid Getting Your Twitter Account Hacked

“All upcoming Guns N’ Roses dates are officially canceled. Please contact your place of purchase for any refunds.” No Guns N’ Roses fan ever wants to see this text. And especially when it’s published on Axl Rose’s official Twitter account, it’s a guaranteed recipe for disaster. This is not the...

Saeculum 2009 Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== Saeculum 2009 Multiple SQL Injection Vulnerability ================================================== + Author: TeaM MosTa + Software Link:http://www.saeculum.tv/ + Tested on Win Xp Sp2/Sp3...

Yahoo! Mail Cross Site Scripting

Title: Yahoo mail Dom Based Cross Site Scripting Author: Pratul Agrawal Date: 13/06/2010 Indian Hacker Service: Webmail Vendor: Yahoo mail, and possibly others Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: High Tested on: Microsoft IE 7.0 Details: Yahoo mail filte...

Office 2010 Beta Email Is Windows Trojan

An e-mail with the subject “See Office 2010 Beta in action” uses an alleged Office 2010 Beta version used as bait. Read the full article. Help Net Security...

CVE-2010-1568

CVE-2010-1568 affects the Cisco IronPort Desktop Flag Plug-in for Outlook prior to version 6.5.0-006. The issue lies in the Send Secure functionality, which may mishandle simultaneously composed messages, potentially allowing an attacker to obtain cleartext contents of e-mail messages that were i...

CVE-2010-0525

CVE-2010-0525 affects Apple Mac OS X prior to 10.6.3. Mail may select an encryption key from a keychain with multiple recipient certificates without proper key-usage validation, enabling possible information disclosure via brute-force on a weakly encrypted e‑mail. Root cause: inadequate enforceme...

CVE-2010-1132

CVE-2010-1132 affects spamass-milter (SpamAssassin Milter Plugin) 0.3.1, where using the -x (expand) option allows remote attackers to craft RCPT TO data that executes arbitrary shell commands on the server. The root cause is unsanitized input during alias expansion via the milter, enabling comma...

Apache SpamAssassin Milter Plugin 0.3.1 - Remote Command Execution

Apache SpamAssassin Milter Plugin 0.3.1 - Remote Command Execution Description: The Spamassassin Milter plugin suffers from a remote root command execution vulnerability. Full exploit details provided. Author: Kingcope Spamassassin Milter Plugin Remote Root Zeroday BTW zerodays lurk in the shadow...

Over 50% of Malware Are Phishing Attacks

More than half 55.59 per cent of all malware sent on email is an attempted phishing attack, according to analysis of malware by researchers. Read the full article. Help Net Security...

Child of Storm Botnet 'Waledac' Is Expansive

In an undercover mission to learn more about the size and scope of the son of the infamous Storm botnet, Waledac, German researchers have discovered the spamming botnet is much bigger and more efficient than previously thought. Read the full article. Dark Reading...

Chipmunk Newsletter XSRF

------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009. -------------------------------------------------------------------------------------------------...

Websense Email Security < 7.1 Hotfix 4

Websense Email Security is installed on the remote host. The installed version is affected by multiple issues : - Websense Email Security Web Administrator service is affected by a denial of service issue. - Websense Email Security Web Administrator is affected by multiple cross-site scripting...

CVE-2009-3749

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the 1 FileName, 2 IsolatedMessageID, 3 ServerName, 4 Dictionar...

CVE-2009-3748

Multiple cross-site scripting XSS vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the 1 FileName, 2 IsolatedMessageID, 3 ServerName, 4 Dictionar...