MailEnable Webmail - Cross-Site Scripting

ME020567: MailEnable webmail cross-site scripting vulnerability CWE-79 References: CVE-2012-0389 Discovered by: Sajjad Pourali, Narendra Shinde and Shahab NamaziKhah Vendor advisory: http://www.mailenable.com/kb/Content/Article.asp?ID=me020567 Vendor contact: 2012-01-04 09:49:36 UTC Vendor...

CVE-2011-4859

CVE-2011-4859 concerns the Schneider Electric Quantum Ethernet Module family, where hard-coded credentials exist for 16 accounts (AUTCSE, AUT_CSE, fdrusers, ftpuser, loader, nic2212, nimrohs2212, nip2212, noe77111_v500, ntpupdate, pcfactory, sysdiag, target, test, USER, webserver). This enables r...

More Apps Pulled From Android Market Over Hidden SMS Functionality

There has been another round of malicious apps discovered in the official Android Market, with this wave containing hidden functionality to send SMS messages to premium-rate numbers. The apps, which Google has pulled from the Market already, are counterfeit versions of popular games, including...

Manila AT&T hackers linked to 26/11 Mumbai terror attack

Manila AT &T hackers linked to 26/11 Mumbai terror attack Police in the Philippines working with the US Federal Bureau of Investigation have arrested four people over a premium-line phone scam that targeted customers of the American telecommunications giant AT&T to funnel money to a Saudi-based...

QR codes - Next way for Android Malware

Once a user scans the QR code, the code redirects them to a site that will install a Trojan on their Android smart phones. Kaspersky's SecureList blog has a report of a malicious QR code on a web site which when scanned directs the user to a URL; the linked site doesn't have a file matching the...

QR Codes Found Sending Users to Site Containing Android Trojan

QR codes have been showing up everywhere in the last few months, from magazine ads to the sides of buses to, oddly, billboards. And now they’ve shown up on the list of ways that attackers are delivering malware to victims, with the emergence of a new Android-based Trojan that is hiding on malicio...

Hackers Push Sipvicious VoIP Tools In Malicious Attacks

Researchers at NSS Labs claim that they’ve spotted attacks that use Sipvicious, a common auditing tool for Voice over IP VoIP networks as part of malicious attacks aimed at taking control of vulnerable VoIP servers. The attacks are apparently aimed at taking control of VoIP servers to place...

BitDefender IS2011 - FV Buffer Overflow Vulnerability

Document Title: =============== BitDefender IS2011 - FV Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=147 Release Date: ============= 2011-08-29 Vulnerability Laboratory ID VL-ID: ==================================== 147...

eGroupware Premium Line v9.1 - SQL Injection Vulnerability

Document Title: =============== eGroupware Premium Line v9.1 - SQL Injection Vulnerability Release Date: ============= 2011-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 81 Product & Service Introduction: =============================== EPL is the professional choi...

New SMS Trojan Targeting Android Users

The Apple iPhone may still be the gold standard when it comes to smartphones, but the Android platform has become the playground of choice for attackers and malware authors looking to make a quick buck. The latest example is a premium-rate SMS Trojan that not only automatically sends costly SMS...

SMS Trojan Found in Several Android Apps

Google has removed a group of mobile phone applications from its Android Market after it was discovered that the applications contained code that could be used to send SMS Short Message Service spam. Google’s action came after a security firm in Taiwan published a security alert about the apps on...

The Underground Economy: SMS Fraud

The underground malware economy has expanded and diversified in recent years and the latest frontier is the mobile platform. In this video, Kaspersky Lab’s Denis Maslennikov talks about the ways that attackers use premium-rate SMS messages and banking fraud to bilk users...

Cross site scripting

Cross-site scripting XSS vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Man Pleads Guilty in a Scam Charging Unwitting Customers for Premium Phone Calls

UPDATED: A New Hampshire man has pleaded guilty in Federal Court to charges of conspiracy to commit computer fraud and failure to file income taxes stemming from a scam forcing telephone modems to call premium service numbers without their owner’s consent. Thirty seven year-old Asu Pala of Hudson...

Scam Sites Demanding SMS Payment For Fake Flash, Firefox Downloads

Phishers and scammers have developed a new tactic for separating victims from their money that involves getting them to pay for software that’s normally free, such as Mozilla Firefox or Adobe Flash. The new scam is offering users the opportunity to download applications such as Flash, Firefox and...

Threats Go Mobile

Smartphone adoption has exploded in recent years, and this has not been lost on the attackers who are looking for the best way to separate users from their money and confidential data. There were several examples of attackers sneaking malicious applications into mobile app stores, some disguised ...

Report: Romanian Authorities Bust VoIP Hacking Group

Authorities in Romania have disrupted a large hacking ring accused of stealing Voice over IP VoIP data from hacked servers and using it to place bogus calls to premium rate numbers. Agence France Presse reported on Tuesday that 42 people were arrested in the sting, breaking up a network that was...

Avira Premium Security Suite - NtCreateKey Race Condition

Avira Premium Security Suite - NtCreateKey Race Condition 1.Description: The avipbb.sys kernel driver distributed with Avira Premium Security Suite contains a race condition vulnerability in the handling paramaters of NtCreatekey function. Exploitation of this issue allows an attacker to crash...

Avira Premium Security Suite - 'NtCreateKey' Race Condition

1.Description: The avipbb.sys kernel driver distributed with Avira Premium Security Suite contains a race condition vulnerability in the handling paramaters of NtCreatekey function. Exploitation of this issue allows an attacker to crash systemmake infamous BSoD or gain escalated priviligies. An...

Avira Premium 9.0.0.420 DLL Hijacking

=================================================== avira premium 9.0.0.420 DLL Hijacking Exploit dwmapi.dll =================================================== || || | || o,7 || . o7 || 4||| ow, : / / . -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /...