Trojan/Backdoor - W32/Bagle Virus Detection

Binary data 1141.prm...

Trojan/Backdoor - SubSeven Detection

Binary data 1917.prm...

Trojan/Backdoor - Portal of Doom Detection (deprecated)

Binary data 1913.prm...

Trojan/Backdoor - JS.Scob.Trojan/Download.Ject Detection

Binary data 1229.prm...

Trojan/Backdoor - NetSphere Detection

Binary data 1911.prm...

Trojan/Backdoor - Phase Zero Detection

Binary data 1916.prm...

Trojan/Backdoor - EvilFTP Detection

Binary data 1915.prm...

Trojan/Backdoor - GirlFriend Detection

Binary data 1914.prm...

Mandrake Linux Security Advisory : tcltk (MDKSA-2002:060)

Some problems were discovered with the Tcl/Tk development environment. The expect application would search for its libraries in /var/tmp prior to searching in other directories, which could allow a local user to gain root privilege by writing a trojan library and waiting for the root user to run...

Microsoft IIS Download.Ject Trojan Detection

Download.Ject is a Trojan that infects Microsoft IIS servers. The Trojan's dropper sets it as the document footer for all pages served by IIS Web sites on the infected computer. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12287; scriptversion"$Revision: 1.11 $";...

ADVISORY: ASPDOTNETSTOREFRONT Improper Upload Validation

ASPDOTNETSTOREFRONT Improper Upload Validation Release Date: June 9, 2004 Severity: HIGH Vendor: AspDotNetStorefront.com A Division of Discovery Productions, Inc. Software: Tested on AspDotNetStorefront 3.3 Previous versions may also be affected. Remote: Remotely executed from any web browser...

An analysis of the 180 Solutions Trojan

An analysis of the 180 Solutions Trojan Introduction Just when I though it was save to once more to use internet explorer I received an email bringing my attention to this webpage http://216.130.188.219/ei2/installer.htm that according to him used an exploit that affected fully patched internet...

PhatBOT Backdoor Detection

The remote systems appears to have PhatBOT installed. This program allows the machine to be controlled via a P2P network. PhatBOT is extremely sophisticated and allows the remote attacker to use the victim machine to perform various actions. C Tenable Network Security, Inc. include"compat.inc"; i...

Eznet v3.5.0 Remote Stack Overflow and Denial of Service Exploit

Exploit for unknown platform in category remote exploits ================================================================ Eznet v3.5.0 Remote Stack Overflow and Denial of Service Exploit ================================================================ !/usr/bin/perl -w Stack Overflow in eZnet.exe...

Eznet 3.5.0 - Remote Stack Overflow / Denial of Service

!/usr/bin/perl -w Stack Overflow in eZnet.exe - Remote Exploit Will download a trojan from any address which you provide on the target system, then will execute the trojan. For this exploit I have tried several strategies to increase reliability and performance: + Jump to a static 'call esp' +...

Eznet 3.5.0 - Remote Stack Overflow Denial of Service

Eznet 3.5.0 - Remote Stack Overflow Denial of Service !/usr/bin/perl -w Stack Overflow in eZnet.exe - Remote Exploit Will download a trojan from any address which you provide on the target system, then will execute the trojan. For this exploit I have tried several strategies to increase reliabili...

CVE-2003-0838

Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as...

WMAPM 3.1 - Local Privilege Escalation

WMAPM 3.1 - Local Privilege Escalation source: https://www.securityfocus.com/bid/8995/info wmapm has been reported prone to a local privilege escalation vulnerability. The vulnerability has been conjectured to result from a lack of relative path usage while the vulnerable dock app is invoking a...

WMAPM 3.1 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/8995/info wmapm has been reported prone to a local privilege escalation vulnerability. The vulnerability has been conjectured to result from a lack of relative path usage while the vulnerable dock app is invoking a third party binary. As a result of this,...

CVE-2003-0838

Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as...