Report: 60% of all web sites contain serious vulnerabilities

From DarkReading Kelly Jackson Higgins Most Websites harbor at least one major vulnerability, and over 80 percent of Websites have had a critical security flaw, according to new data released today by WhiteHat Security. The Website vulnerability statistics, based on Website vulnerability data...

KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting Code Execution

KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting Code Execution KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version test Just make a website with evil javascript codes, and browse the url shows above milw0rm.com 2009-05-19...

Most attacks come from legit but hijacked sites

From TechWorld John E. Dunn The number of legitimate Websites being hacked to host malware has hit startling highs in recent days, new figures from MessageLabs have revealed. Data taken from the days between May 4 and 8 showed that 84.6 percent of Websites blocked by the company for hosting...

Puerto Rico sites redirected in DNS attack

From CNet News Elinor Mills An attack on the main domain name system registrar in Puerto Rico led to the local Web sites of Google, Microsoft, Yahoo, Coca-Cola, and other big companies being redirected for a few hours on Sunday to sites that were defaced, according to security firm Imperva. Those...

Cache-poisoning attack snares top Brazilian bank

From The Register Dan Goodin One of Brazil’s biggest banks has suffered an attack that redirected its customers to fraudulent websites that attempted to steal passwords and install malware, according to an unconfirmed report. According to this Google translation of an article penned in Portuguese...

Dust on the network enterprise websites intelligent management system 0day to use the program-vulnerability warning-the black bar safety net

Vulnerability report: Google keywords:inurl:/Web-GuestView. asp Test method: ,username,password,4,5,6,7,8%20fr%6Fm%20admin...

Redaxscript Detection

This host is running Redaxscript a free, PHP and MySQL driven Content Management System for small business and private websites. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Be careful what you search for

While search engine optimization SEO is becoming one of the must do’s for companies that are trying to improve theirsite ranking in search engines like Google and Yahoo, it’s also increasingly becoming a trick of the trade for spammers and malware authors looking to drive traffic to their own...

Sql injection

Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-1026

CVE-2009-1026 affects Kim Websites 1.0, with SQL injection vulnerabilities in login.php. The issue allows remote attackers to manipulate the database by supplying crafted values for the username or password fields, enabling arbitrary SQL execution. This aligns with the NVD assessment of a high-se...

CVE-2009-1026

Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

Kim Websites 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Kim Websites 1.0 Auth Bypass SQL Injection Vulnerability ==========================================================...

Critical Firefox flaws flagged, fixed

The open-source Mozilla group has released Firefox 3.0.7 with fixes for at least eight security flaws, some rated critical. The most serious of the vulnerabilities could be exploited by attackers to run code and install software, requiring no user interaction beyond normal browsing, Mozilla warne...

[SECURITY] Fedora 10 Update: mediawiki-1.14.0-45.fc10

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

Fedora Update for mediawiki FEDORA-2007-2189

Check for the Version of mediawiki OpenVAS Vulnerability Test Fedora Update for mediawiki FEDORA-2007-2189 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Osmodia Bulletin Board 1.x (admin.txt) File Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Osmodia Bulletin Board Version : All Version Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl:...

Fedora Update for drupal FEDORA-2008-7467

Check for the Version of drupal OpenVAS Vulnerability Test Fedora Update for drupal FEDORA-2008-7467 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for mediawiki FEDORA-2008-2288

Check for the Version of mediawiki OpenVAS Vulnerability Test Fedora Update for mediawiki FEDORA-2008-2288 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for drupal FEDORA-2008-11196

Check for the Version of drupal OpenVAS Vulnerability Test Fedora Update for drupal FEDORA-2008-11196 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Autonomy Ultraseek URL redirection vulnerability

Overview The Autonomy Ultraseek search engine contains a URL redirection vulnerability that may allow an attacker to redirect website users to other sites. Description The Autonomy Ultraseek search engine contains a URL redirection vulnerability in the /cs.html?url= paramater. The destination URL...