Home Depot Hacked!

Looks like The Home Depot needs to turn their own ‘Doing Dials’ up a notch: the website of the home improvement retailer was compromised by a piece of hidden code that redirected browsers to a site infected with malware. By running the Google search for “home depot stair spindles,” Mark Baldwin o...

Java WebStart allows hidden code privilege escalation

Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that validates as both a GIF an...