A week in security (January 7 – 13)

Last week on the Malwarebytes Labs blog, we took a look at the Ryuk ransomware attack causing trouble over the holidays, as well as a ransom threat for an Irish transportation company. We explored the realm of SSN scams, and looked at what happens when an early warning system is attacked. Other...

SQL Injection Vulnerability in Guotai Newpoint Public Resources Trading Platform

Jiangsu Guotai New Point Software Co., Ltd. is an informatization total solution provider, focusing on the fields of smart government, smart transaction, smart city park, construction industry and so on. A SQL injection vulnerability exists in Guotai Newpoint's public resources trading platform,...

SQL Injection Vulnerability in Haitong Blockchain Trading Platform

Haitong Network is an architecture service provider specializing in trading systems, the company has a multi-currency BTC trading platform, wallet blockchain, block browser system and more than a dozen sets of perfect and professional industry systems. SQL injection vulnerability exists in Haiton...

Struts2 Remote Command Execution Vulnerability Exists in the Postcard Trading Platform of United Culture Postal and Coin Card Trading Center

United Culture Postal and Coin Card Trading Center Postal and Coin Card Trading Platform is a postal and coin card trading platform. The United Culture Postal and Coin Card Trading Center Postal and Coin Card Trading Platform suffers from a Struts2 remote command execution vulnerability, which ca...

eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities

eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities Luigi Auriemma Application: eSignal and eSignal Pro http://www.esignal.com/esignal/default.aspx Versions: " files even those original included in the program like those with the registered extensions QUO, SUM and POR: eax=00000001...

Dirt Jumper Caught in the Act

In late July 2011, a specific piece of malware came to our attention. Analysis revealed that this particular piece of malware was launching DDoS attacks and we have direct evidence of DDoS attack on two Russian websites. One of these was a gaming website, the other involved in selling a popular...

Nasdaq systems were hacked last year !

Federal authorities are investigating a computer advance at the aggregation that runs the Nasdaq banal exchange, the Wall Street Journal arise Friday. According to the report, which cites bearding sources, Nasdaq OMX Group computers were compromised ancient over the accomplished year, but the...

Hua-speed online trading platform V13 full version more than the presence of injection vulnerabilities-vulnerability warning-the black bar safety net

Publishing author: wandering wind Affected versions: V13 Official website: http://www.hs173.cn Vulnerability type: SQL injection Vulnerability Description: The program is also the only anti-get and post two kinds of injection, then we can use the cookie injection, get admin username and password...

Online trading platform system getshell vulnerabilities-vulnerability warning-the black bar safety net

Anti-injection issues, anti-injected into the database file is asp. There is no anti-download. Method of submission listbuy. asp? class3=3 7 7 4 1+and+┼disorder dirt 爠 Hwan enemy 瑳∨∣┩anger Word password is Anti-injection the database file is /sqlwhelpu. asp...

Hua-speed online trading platform oday-vulnerability warning-the black bar safety net

Hua-speed online trading platform oday program: China speed online trading platform Vulnerability description:upload, storm library google keywords: inurl:listbuy. asp? class1 EXP test: Copy the code save it as html file html head meta http-equiv="Content-Type" content="text/html; charset=gb2312"...