Critroni Crypto Ransomware Seen Using Tor for Command and Control

There’s a new kid on the crypto ransomware block, known as Critroni, that’s been sold in underground forums for the last month or so and is now being dropped by the Angler exploit kit. The ransomware includes a number of unusual features and researchers say it’s the first crypto ransomware seen...

Cutwail-Like Wigon.PH_44 Trojan Sends Spam, Steals Data

A new spambot has been discovered that generates copious amounts of HTTP POST and GET requests in an attempt to disguise what it’s really up to and throw off the scent of detection capabilities. “In this case, it seems like it’s trying to hide impactful communication where there are actual payloa...

CVE-2012-6582

Cross-site scripting XSS vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog...

Cross site scripting

Cross-site scripting XSS vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog...

CVE-2012-6582

The vulnerability CVE-2012-6582 affects the Drupal Spambot module: versions 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 permit XSS via stopforumspam.com API responses that are logged by watchdog. The root cause is improper sanitization of API responses before logging, enabling remote attack...

CVE-2012-6582

Cross-site scripting XSS vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog...

CVE-2012-6582: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog...

PT-2013-2036

Name of the Vulnerable Software and Affected Versions Drupal Spambot module versions 6.x-3.x before 6.x-3.2 Drupal Spambot module versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a...

SA-CONTRIB-2012-142 - Spambot - Cross Site Scripting (XSS)

The Spambot module enables you to protect new user registrations from spammers using the database at stopforumspam.com. Spambot doesn't sufficiently sanitize API responses from stopforumspam.com when they are logged to the watchdog, allowing a potential XSS attack. This vulnerability is mitigated...

Report: For Hackers, Is Android The New Windows?

Mobile malware is on track to double again in 2011, as it has every year since 2007, according to a report from Kaspersky Lab. The doubling of malicious programs for mobile devices continues a trend first spotted in 2007 and that is beginning to resemble the world of PC viruses more each day, wit...

Why Takedowns Don't Reduce Online Crime

The last year has seen a string of takedowns of botnet command-and-control servers, malware drop zones, spam operations and other pieces of the crimeware infrastructure, each of which made a dent in one way or another. But the question of whether the takedowns have had any lasting effect on the...

Elite Gaming Ladders v3.2 CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Elite Gaming Ladders v3.2 CMS SQL Injection Vulnerability ========================================================= Author: SpAmBoT Software Link: http://eliteladders.com/ Version: v3.2...

New Storm Variant Merely a Spambot, Experts Say

The new piece of malware that surfaced this week and has been hailed as a return of the Storm worm, is in fact simply the worm’s original spam engine with some new components wrapped around it, researchers say, and not a rebirth of the botnet itself. Storm was a major botnet threat during its...