Siemens .NET Client Library for SIMATIC S7 Webserver API information leakage vulnerability

The Siemens .NET Client Library for SIMATIC S7 Webserver API versions prior to V3.3.62 has a vulnerability related to information leakage. This vulnerability arises from the improper masking of the PLC recovery password from HTTP error messages. As a result, attackers with access to logs or other...

EUVD-2008-0932

Malware in sbrugna...

Attackers Embracing Steganography to Hide Communication

Encouraged by patterns carried out on a larger scale recently, researchers believe digital steganography has arrived as a legitimate method for attackers to use when it comes to obscuring communication between command and control servers. In a presentation last week at Black Hat Europe researcher...

Microsoft Internet Explorer 5 - Custom HTTP Error HTML Injection

Microsoft Internet Explorer 5 - Custom HTTP Error HTML Injection source: https://www.securityfocus.com/bid/7939/info An issue has been reported for Microsoft Internet Explorer that may result in HTML injection attacks. The vulnerability exists when IE is used to display custom HTTP error messages...