Symantec Warns of New Malware Targeting SQL Databases

Symantec is warning of a new bit of malware that appears to be modifying corporate databases, particularly in the Middle East, though its showing up elsewhere in the world too. W32.Narilam, first discovered Nov. 15, follows a similar pattern of other worms by copying itself onto infected machines...

Skype Vulnerability Exposing User IP Addresses

Skype Vulnerability Exposing User IP Addresses Skype is warning users following the launch of a site devoted to harvesting user IP addresses.The Skype IP-Finder site allowed third-parties to see a user's last known IP address by simply typing in a user name. A script has been uploaded to Github...

GMER - Automating Rootkit Analyzer Released

GMER - Automating Rootkit Analyzer Released GMER is an application that detects and removes rootkits . It scans for: hidden processes hidden threads hidden modules hidden services hidden files hidden disk sectors MBR hidden Alternate Data Streams hidden registry keys drivers hooking SSDT drivers...

CVE-2010-2554

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL...

CVE-2010-2554

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL...

CVE-2010-2554

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL...

Microsoft Windows Tracing Feature for Services security vulnerabilities

Weak permissions on registry keys, buffer overflow on registry keys reading...

Microsoft Windows Kernel Could Allow Elevation of Privilege (979683)

This host is missing an important security update according to Microsoft Bulletin MS10-021. OpenVAS Vulnerability Test $Id: secpodms10-021.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Kernel Could Allow Elevation of Privilege 979683 Authors: Veerendra G Updated By: Madhuri D on...

MS10-021: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (979683)

The remote Windows host is running a version of the Windows kernel that is affected by eight vulnerabilities : - A denial of service vulnerability exists in the Windows kernel due to the insufficient validation of registry keys passed to a Windows kernel system call. CVE-2010-0234 - A denial of...

google apps googleapps.url.mailto:// uri handler cross-browser

No description provided by source. google apps googleapps.url.mailto:// uri handler cross-browser remote command \ execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://pack.google.com/intl/it/packinstaller.html teste...

Google Apps googleapps.url.mailto:// URI Handler Command Execution

google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://pack.google.com/intl/it/packinstaller.html tested against: Internet Explorer 8, windo...

Google Apps mailto uri handler cross-browser remote command execution

Exploit for unknown platform in category remote exploits ===================================================================== Google Apps mailto uri handler cross-browser remote command execution ===================================================================== Title: Google Apps mailto uri...

Google Apps - mailto URI handler cross-browser Remote command Execution

Google Apps - mailto URI handler cross-browser Remote command Execution google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site:...

Google Apps - mailto URI handler cross-browser Remote command Execution

google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://pack.google.com/intl/it/packinstaller.html tested against: Internet Explorer 8, windo...

Design/Logic Flaw

Multiple insecure method vulnerabilities in an ActiveX control in epRegPro.ocx in Evans Programming Registry Pro allow remote attackers to read and modify sensitive registry keys via the 1 About, 2 CreateKey, 3 DeleteBranch, 4 DeleteKey, 5 DeleteValue, 6 EnumKeys, 7 EnumValues, 8 QueryType, 9...

CVE-2008-7122

Multiple insecure method vulnerabilities in an ActiveX control in epRegPro.ocx in Evans Programming Registry Pro allow remote attackers to read and modify sensitive registry keys via the 1 About, 2 CreateKey, 3 DeleteBranch, 4 DeleteKey, 5 DeleteValue, 6 EnumKeys, 7 EnumValues, 8 QueryType, 9...

Pinnacle Studio 12 - '.hfz' Directory Traversal

?php / Pinnacle Studio 12 "Hollywood FX Compressed Archive" .hfz directory traversal vulnerability poc by Nine:Situations:Group::pyrokinesis Our site: http://retrogod.altervista.org/ Software site: http://www.pinnaclesys.com/ Some keys exported from the registry: HKEYCLASSESROOT.hfz @="hfzfile"...

Update Protections against Recent Malware Threats (30-Mar-09)

The update includes new protections against 2 recent malware threats:Backdoor Trojan: Zlob - Zlob is backdoor Trojan that can be installed via malware downloader or exploits. It installs other applications that continuously connect to remote servers and downloads malicious scripts and...

The decomposition of the back door to check the heart-to build antivirus PASS Backdoor-vulnerability warning-the black bar safety net

| In the security concept of growing today, want to get a station of their own chickens is easy, if say because the administrator found himself left in the broiler on the back door account and lead to broiler missing words, that is the world the most painful thing, I believe everyone will not wan...

Improper access control

Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information...