AV Arcade - 'Search' Cross-Site Scripting / HTML Injection

Exploit Title: AV Arcade Search Field XSS/HTML Injection Date: 6/5/2010 Author: Vadim Toptunov, http://www.twitter.com/pentesting Software Link: http://www.avscripts.net/avarcade/ Version: 5.1.4 Free and Pro latest and prior Tested on: Any NIX CVE : N/a Code : below Description: AV arcade is a fr...

Fake AV Using Domain Rotation To Blast Users

In a report being released today, Google said that between January 2009 and the end of January 2010 it found some 11,000 malicious or hacked Web pages that attempted to foist fake anti-virus on visitors. Read the full article. KrebsonSecurity...

Moscow Bombings, TJX Hacker Spur Black Hat Campaigns

Spammers and malware writers have wasted no time in taking advantage of Monday’s bombings in Moscow, opening up a campaign on Twitter to point users to malicious sites. The pair of suicide bombings that hit the Metro system in Moscow Monday morning inevitably led to a flood of messages on Twitter...

Multiple Vendor Anti-Virus Magic Byte Detection Evasion

Anti-Virus AV software is meant to search for known viruses embedded in accessed or transferred files. The products are also known as virus scanners. Most virus scanners use a database of known binary patterns of viruses in order to identify trojans and other malware. The number of recognizable...

On The Way to Better Malware Testing

Have you ever found a false positive when uploading a file to a website like VirusTotal? Sometimes it happens that not just one scanner detects the file, but several. This leads to an absurd situation where every product which doesn’t detect this file automatically looks bad to users who don’t...

TwonkyMedia Server 4.4.17/5.0.65 - Cross-Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =========================================================================== Title: TwonkyMedia Server Multiple Cross-Site Scripting Vulnerabilities Product: TwonkyMedia Server Vendor: TwonkyMedia PacketVideo Corporation, http://www.twonkymedia.com...

TwonkyMedia Server <= 4.4.17, 5.0.65 xss

Exploit for unknown platform in category web applications ======================================== TwonkyMedia Server = 4.4.17, 5.0.65 xss ======================================== =========================================================================== Title: TwonkyMedia Server Multiple...

Skype 'Online Notification' Alert Leads to Fake AV

Trend Micro researcher Rik Ferguson has discovered a new twist on the old social engineering attacks on Skype — the use of usernames and monikers that appear very, very convincing. In the latest attacks, which lure computer users to fake anti-virus sites rogueware, the attackers are using the...

iPhone SMS Used as Bait in Rogue AV Scam

Cyber-criminals are using interest in MMS or SMS on the iPhone to trick users into downloading rogue antivirus software. According to security company Websense, attackers are abusing Google’s search engine to get users to click on links leading to a malicious page pushing scareware. Read the full...

Rogue AV Scam Targets Google PageRank

An ongoing attack on Google users is sending victims to rogue anti-virus software sites, researchers said this week. The attack takes advantage of Google’s page-ranking feature, according to researchers at eSoft’s Threat Prevention Team. The scam works like this: An attacker hacks a site, but...

Mac OS X Mega-Update Fixes 33 Security Defects

Apple today shipped another Mac OS X mega-update with fixes for at least 33 serious security problems affecting Mac OS X users. The update includes patches for third party components like Adobe’s Flash Player plug-in, Clam AV, MySQL and PHP. A separate update was released for Snow Leopard to fix...

Design/Logic Flaw

Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, wh...

CVE-2009-2450: Improper Restriction of Operations within the Bounds of a Memory Buffer

The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHODNEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as...

F-PROT AntiVirus Security Bypass Vulnerability (Linux)

The host is installed with F-PROT AntiVirus and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodf-protavsecbypassvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ F-PROT AntiVirus Security Bypass Vulnerability Linux Authors: Nikita MR Copyright: Copyright c 2009...

F-PROT AntiVirus Security Bypass Vulnerability - Linux

F-PROT AntiVirus is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

McAfee Products Security Bypass Vulnerability (Windows)

This host is installed with McAfee products and are prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmcafeeprdtssecbypassvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ McAfee Products Security Bypass Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2009...

McAfee Products Security Bypass Vulnerability (SB10001) - Linux

McAfee products are prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1348

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via 1 an invali...

CVE-2009-1348

CVE-2009-1348 affects McAfee antivirus products (VirusScan, Total Protection, Internet Security, SecurityShield for ISA Server/SharePoint, Security for Email Servers/Email Gateway, Active Virus Defense, etc.). The issue is a virus-detection bypass caused by malformed archive metadata in ZIP/RAR f...

CVE-2009-1348

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via 1 an invali...