Microsoft исследует информацию о новой бреши в Windows 2000 и XP

Датская мониторинговая компания Secunia опубликовала предупреждение о наличии в операционных системах Windows XP и Windows 2000 “умеренно критической” уязвимости. Согласно выпущенному фирмой руководству, уязвимость присутствует из-за граничной ошибки в классе CFrameWnd в файле mfc42.dll. Ее...

ReVou MicroBlogging Script Auth Bypass Vulnerabilty

Exploit for php platform in category web applications =================================================== ReVou MicroBlogging Script Auth Bypass Vulnerabilty =================================================== Name : ReVou MicroBlogging Script Auth Bypass Vulnerabilty Date : july 6,2010 Critical...

Linux/ARM - execve"/bin/sh","/bin/sh",0 30 bytes

Linux/ARM - execve"/bin/sh","/bin/sh",0 - 30 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - execve"/bin/sh","/bin/sh",0 - 30 bytes Date: 2010-06-28 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Dtabase of...

Twitter Agrees to FTC Security Audits

An important milestone that should compel all social networks to be much more diligent about preserving privacy and providing robust security was established by federal regulators with Twitter. Read the full article. The Last Watchdog...

XSS Flaw Found in Twitter

A Twitter user has demonstrated a cross-site scripting XSS vulnerability on the microblogging platform that could allow an attacker to take over users’ accounts or spread malware. Read the full article. Secure Computing...

reVou Twiter Clone Beta 2.0 Cross Site Scripting / SQL Injection

Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability Author: Sid3^effects Published: 2010-06-06 price:$99 email:[email protected] vendor: Revou url : http://www.revou.com/demo/home google dork : Powered by TextAds 2.08 ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888...

Keep Up With Malware Authors Via Twitter

Malware authors are increasingly willing — if not eager — to talk about what they’re working on in a public forum like Twitter. Read the full article. InfoWorld...

Nucleus Twitter 0.8 Remote File Inclusion

============================================================================================================= o Nucleus Plugin Twitter Remote File Inclusion Vulnerability Software : NPTwitter version 0.8 Download : http://edmondhui.homeip.net/nudn?file=2/NPTwitterv08.zip Author : AntiSecurity NoG...

Nucleus Plugin Twitter - Remote File Inclusion

Nucleus Plugin Twitter - Remote File Inclusion ============================================================================================================= o Nucleus Plugin Twitter Remote File Inclusion Vulnerability Software : NPTwitter version 0.8 Download :...

Nucleus Plugin Twitter Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ========================================================== Nucleus Plugin Twitter Remote File Inclusion Vulnerability ==========================================================...

Nucleus Plugin Twitter - Remote File Inclusion

============================================================================================================= o Nucleus Plugin Twitter Remote File Inclusion Vulnerability Software : NPTwitter version 0.8 Download : http://edmondhui.homeip.net/nudn?file=2/NPTwitterv08.zip Author : AntiSecurity NoG...

BP Twitter Account Hacked

Oil giant BP suffered further embarrassment after its official Twitter account was hacked. Pranksters purloined the @BPAmerica Twitter account to write “Terry is now in charge of operation Top Kill, work will recommence after we find a XXL wetsuit. bpcares oilspill”. Read the full article. The...

New, Simple Twitter Botnet Tool Debuts

There is a new point-and-click tool circulating online that enables virtually anyone to create a piece of malware that will connect a PC to a budding Twitter botnet. The tool, known as TwitterNET Builder, is being used by attackers to build quick and easy botnets that are then controlled through...

Feasting on Twitter User Desire for Followers

The cybercriminals behind the intensifying phishing scam that has been plaguing Twitter since late last week are proving how easy it is to pervert the trust social networks like Twitter and Facebook along with search giant Google have made a cornerstone of their respective business models. The id...

Botnet Herders Can Command Via Twitter

A security researcher has unearthed a tool that simplifies the process of building bot armies that take their marching orders from specially created Twitter accounts. Read the full article. The Register...

Watch for Fake Twitter Support Malware

Almost a week ago, Twitter began warning its users about fake Twitter Support emails. Since then, a couple of variants of the email have surfaced, with small differences in the text “unreaded messages”, “information messages”. Read the full article. Help Net Security...

Expected Twitter Ads Should Get Malware Infusion

Miscreants are highly likely to take advantage of Twitter’s move towards making money through ad-supported micro-blogging updates, security watchers warn. Read the full article. The Register...

ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability

ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-067 April 6, 2010 -- CVE ID: CVE-2010-0529 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Fake iPad, iPhone Giveaways Hit Twitter

Not surprisingly, spam using the Apple iPad as a lure to get users to give up personal or credit card information has began to make rounds of Twitter users. Read the full article. Help Net Security...

ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability

ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-055 April 5, 2010 -- CVE ID: CVE-2010-0095 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- Vulnerabili...