Symantec Enterprise AV Server detection

Binary data 5956.prm...

Fake antivirus campaign on India's DNA e-newspaper website !

Fake antivirus campaign on India's DNA e-newspaper website ! DNA Daily News and Analysis is an Indian daily English language newspaper. According to Wikipedia, DNA ranks 8th among the top ten English dailies in India. Recently, the Zscaler solution was blocking access to this site, as it containe...

Report: Vishing Attack Targets Skype Users

Skype users are being targeted in an ongoing voice-phishing, or “vishing,” attack, according to a report by ZDNet’s Zero Day blog. Skype users reported receiving a pre-recorded call informing them that their computer had been infected with malware. In order to remove this malware users are advise...

Preemptive Protection against LizaMoon - Mass SQL Injection Attacks

LizaMoon is a mass SQL code injection attack, where a Web application vulnerability is exploited to inject malicious code into affected websites. If a Web surfer visits an infested site, he will be redirected to an alternate website that tries to install a rogue anti-malware software. This...

CA Multiple Products AV Engine CAB Header Parsing Stack Overflow (CVE-2007-2864)

CA provides an anti-virus engine that is shared among multiple applications and products. The anti-virus engine is capable of scanning files stored in numerous archive format. One of these archive format is the Microsoft Cabinet CAB file format. A stack-based buffer overflow vulnerability has bee...

Twitter Worm Uses Google URL Shortener to Spread Scareware

A fast-moving Twitter worm is in circulation, using Google’s goo.gl redirection service to push unsuspecting users to a notorious scareware fake anti-virus malware campaign. At 8:45 a.m EST today, this Twitter search shows thousands of Twitter messages continuing to spread the worm. According to...

Dissecting the ZeroAccess Rootkit

The ZeroAccess rootkit isn’t the most well-known or closely watched piece of malware in recent history, but, as an extremely detailed new analysis of the program shows, it is a perfect example of the kind of sophisticated malware that attack crews are using to maintain persistent, silent access t...

Fazendabaiagrande.com.br Hacked By Indian Hackers "AV" & "ShuBham"

Fazendabaiagrande.com.br Hacked By Indian Hackers "AV" & "ShuBham" Link : Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4087

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file mma...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4086

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file...

[CORE-2010-0624] MS OpenType CFF Parsing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ MS OpenType CFF Parsing Vulnerability 1. Advisory Information Title: MS OpenType CFF Parsing Vulnerability Advisory Id: CORE-2010-0624 Advisory URL:...

Users Still Making Life Easy for Scareware Crews

Scareware and rogue AV programs have enjoyed a very good run in the last few years, making millions of dollars for their creators and generally making life miserable for victims. And while there’s been some innovation recently in the mechanisms attackers use to keep the programs resident on...

AV Music Morpher Gold 5.0.38 Denial Of Service

!/usr/bin/python Exploit Title: AV Music Morpher Gold .m3u Local Crash PoC Date: 08-20-2010 Author: b0telh0 Software Link: http://www.musicmorpher.com/download.php?product=musicgold Version: 5.0.38 Tested on: Windows XP SP3 pt-br VirtualBox .acd and .bdi files will crash the application too! cras...

AV Music Morpher Gold 5.0.38 (.m3u) Denial of Service

Exploit for windows platform in category dos / poc ===================================================== AV Music Morpher Gold 5.0.38 .m3u Denial of Service ===================================================== !/usr/bin/python Exploit Title: AV Music Morpher Gold .m3u Local Crash PoC Date:...

AV Music Morpher Gold 5.0.38 - '.m3u' Denial of Service

!/usr/bin/python Exploit Title: AV Music Morpher Gold .m3u Local Crash PoC Date: 08-20-2010 Author: b0telh0 Software Link: http://www.musicmorpher.com/download.php?product=musicgold Version: 5.0.38 Tested on: Windows XP SP3 pt-br VirtualBox .acd and .bdi files will crash the application too! cras...

AV Arcade 'ava_code' Cookie Parameter SQL Injection Vulnerability

AV Arcade is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2933

SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the avacode cookie to the "main page," related to index.php and the login task...

Sql injection

SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the avacode cookie to the "main page," related to index.php and the login task...

CVE-2010-2933

SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the avacode cookie to the "main page," related to index.php and the login task...

CVE-2010-2933

The CVE-2010-2933 entry describes an SQL injection in AV Arcade 3 (AV Scripts) that can be triggered through the ava_code cookie sent to the main page (index.php, login task). Affected component: web application logic handling the ava_code cookie. Root cause: improper handling/validation of the c...