Cry Ransomware Using UDP, Imgur, Google Maps

Ransomware purporting to come from a phony government agency, something called the Central Security Treatment Organization, has been making the rounds, researchers say. The ransomware, which is already known by a number of names including Cry, CSTO ransomware, or Central Security Treatment...

Virut and Waledac Botnets Spamming from Shared Machines

In an analysis of Virut botnet samples, Symantec researchers observed the malware downloading Waledac variants, suggesting that the gangs responsible for each botnet may be cooperating with one another through some sort of affiliate program, or, at the very least, that the two threats coexist and...

CVE-2009-2308

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation aka Affiliates module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the 1 in or 2 out parameter...

Sql injection

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation aka Affiliates module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the 1 in or 2 out parameter...

CVE-2009-2308

CVE-2009-2308 affects PunBB’s Affiliation (aka Affiliates) module (version 1.1.0 and earlier). The vulnerability arises in affiliates.php, where remote attackers can trigger SQL injection through the (1) in or (2) out parameter, enabling arbitrary SQL execution. Exploitation details or in-the-wil...

CVE-2009-2308

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation aka Affiliates module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the 1 in or 2 out parameter...