211 matches found
PHP <= 5.4.3 RCE Vulnerability - Windows
PHP is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if descripti...
CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability [Updated]
OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...
CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability
OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...
Reports Emerge of New Flash Vulnerabilities
There are multiple reports emerging of two new vulnerabilities in Adobe Flash that could lead to remote code execution. There’s little information about the exact nature of the bugs available right now, and Adobe has not released any advisories or information about them either. The vulnerabilitie...
Java.com URL Redirect
================================== java.com | Arbitrary URL Redirect Vulnerability ================================== 1. VULNERABILITY DESCRIPTION - Arbitrary URL Redirect http://java.com/inc/BrowserRedirect1.jsp?locale=en&host=attacker.in Demo:...
Parallels Plesk 8.2 URL Redirection
Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...
Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability
Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...
The Decline and Fall of Slammer?
Me and Slammer Helkern go back a long way… to 25 January 2003 to be precise. It was a baptism of fire for me in my new role as a virus analyst at Kaspersky Lab. It was a weekend and I was alone, in charge of monitoring the incoming flow of suspicious files. I had barely been at the company a mont...
New Contest To Promote Cyber Security Skills In Teens
Cyber security has been at the forefront of American politics in recent months following high profile cyber security attacks like the Stuxnet worm and Aurora attacks. Those attacks underscored growing concern over the future of cyber security in the U.S. and the lack of native cybersecurity talen...
Windows Zero Day Expected to Be Bad
A zero-day flaw being used in targeted attacks against organizations worldwide has security experts worried that the threat could spread further. Concerns about additional attacks using the “LNK” vulnerability in Windows machines prompted the SANS Internet Storm Center today to raise its Infocon...
New Linux OS REMnux Designed For Reverse Engineering Malware
A security expert has released a stripped-down Ubuntu distribution designed specifically for reverse-engineering malware. The OS, called REMnux, includes a slew of popular malware-analysis, network monitoring and memory forensics tools the comprise a very powerful environment for taking apart...
SSH Brute Force Attacks Resurface
Security experts are warning about a fresh round of attacks against SSH implementations. The attacks are brute-force attempts to authenticate to remote SSH servers, a tactic that has been used quite often in the past in distributed attacks. The attacks, which the handlers at the SANS Internet Sto...
Palo Alto Network Vulnerability - Cross-Site Scripting
Palo Alto Network Vulnerability - Cross-Site Scripting Palo Alto Network Vulnerability - Cross-Site Scripting XSS ------------------------------ Class: Cross-Site Scripting XSS Vulnerability CVE: CVE-2010-0475 Remote: Yes Local: Yes Published: May 11, 2010 08:30AM Timeline:Submission to MITRE:...
Palo Alto Network Vulnerability - Cross-Site Scripting (XSS)
Class: Cross-Site Scripting XSS Vulnerability CVE: CVE-2010-0475 Remote: Yes Local: Yes Published: May 11, 2010 08:30AM Timeline:Submission to MITRE: 1/18/2010 Vendor Contact: 2/18/2010 Vendor Response: 2/18/2010 Patch Available: 5/2010 Patched in maintenance releases 3.1.1 & 3.0.9 Credit: Jeromi...
Introduction to Malware Analysis
In this video, Lenny Zeltser, a SANS instructor, outlines the basic concepts of reverse engineering malware, describing the process of analyzing the code and the behavior of the malware...
Top 20 'Critical Controls' from SANS Institute
The SANS Institute has released critical security controls for cyber defense agreed to by a consortium of agencies including: “NSA, US Cert, DoD, DoD JTF-GNO, the Department of Energy Nuclear Laboratories, Department of State, DoD Cyber Crime Center plus the top commercial forensics experts and p...
SugarCRM x<5.5.0a and 5.2.0l cross site scripting Vulnerability
Exploit for unknown platform in category web applications =============================================================== SugarCRM x ;...
Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability
Microsoft Windows operating system is prone to a privilege escalation vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900740. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...
WordPress Installations Under Brute-Force Attack
There is an ongoing attack against some WordPress implementations that is trying to brute-force the passwords for the administrator accounts on the installations. The attack is being driven by an automated PHP script that tries thousands of possible passwords. The SANS Internet Storm Center has...
Adobe Ships 29 Patches for Reader and Acrobat
On the same day that Microsoft unleashed a torrent of 34 patches on its customer base, Adobe on Tuesday published patches for 29 vulnerabilities in its Acrobat and Reader products as part of its new quarterly patch release program. The Adobe vulnerabilities patched yesterday include a remote...