SEO Poisoned Sites Still Slipping By Google

Attacks that use search engine optimization to push malicious pages into the top rankings on search engine results are on the rise in 2011, but new research from zScaler suggests that efforts to identify and block the pages are paying meager dividends. A blog post by Web security firm zScaler not...

PandaLabs Releases : Annual Report 2010 (Must Read) !

In 2010, cyber-criminals have created and distributed a third of all existing viruses. That is, in just 12 months, they have created 34 percent of all malware that has ever existed and has been classified by the company. Furthermore, the Collective Intelligence system, which automatically detects...

JNTUH College site Hacked by Indonesian BlackHat Team !

JNTUH College site Hacked by Indonesian BlackHat Team ! Hacked Link : Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

SecTor

Toronto, Ontario, Canada Billed as “Canada’s Premiere IT Security Conference” they might want to ask the CanSecWest folks about that, SecTor is an annual security confab that draws some of the top security researchers and IT professionals from the Great White North and the U.S. to Toronto for...

Oracle 9i XDB (Windows x86) - HTTP PASS Overflow (Metasploit)

$Id: oracle9ixdbpass.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Electronic Book (ebook.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Electronic Book ebook.php Blind SQL Injection Vulnerability ============================================================= @ Exploit Title: Electronic Book ebook.php Blind SQL...

Joomla Component com_family SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Joomla Component comfamily SQL Injection Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1...

MOPS-2010-006: PHP addcslashes() Interruption Information Leak Vulnerability

MOPS-2010-006: PHP addcslashes Interruption Information Leak Vulnerability May 3rd, 2010 PHP’s addcslashes function can be abused for information leak attacks, because of the call time pass by reference feature. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 = 5.3.2 Credits Th...

MOPS-2010-016: PHP ZEND_SR Opcode Interruption Address Information Leak Vulnerability

MOPS-2010-016: PHP ZENDSR Opcode Interruption Address Information Leak Vulnerability May 8th, 2010 PHP’s ZENDSR opcode can be abused for address information leak attacks by an userspace error handler interruption attack. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 = 5.3.2...

MOPS-2010-014: PHP ZEND_BW_XOR Opcode Interruption Address Information Leak Vulnerability

MOPS-2010-014: PHP ZENDBWXOR Opcode Interruption Address Information Leak Vulnerability May 8th, 2010 PHP’s ZENDBWXOR opcode can be abused for address information leak attacks by an userspace error handler interruption attack. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 =...

Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability

No description provided by source. ======================================================================================== | Title : Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lunix Français v.9.4 Ubuntu | Bu...

Debian DSA-1852-1 : fetchmail - insufficient input validation

It was discovered that fetchmail, a full-featured remote mail retrieval and forwarding utility, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' recently published at the Blackhat conference. This allows an attacker to perform undetected man-in-the-middle attacks via a...

Internet Explorer Daxctle.OCX KeyFrame Method Heap Buffer Overflow Vulnerability

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

SEO Scareware Campaign Compromises 200K Websites

Security researchers have detected a massive blackhat SEO search engine optimization campaign consisting of over 200,000 compromised web sites, all redirecting to fake security software Inst58s6.exe, commonly referred to as scareware. The massive blackat SEO campaign has been launched by the same...

Oracle 9i XDB HTTP PASS Overflow (win32)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Oracle 9i XD...

Debian Security Advisory DSA 1904-1 (wget)

The remote host is missing an update to wget announced via advisory DSA 1904-1. OpenVAS Vulnerability Test $Id: deb19041.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1904-1 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1869-1 (curl)

The remote host is missing an update to curl announced via advisory DSA 1869-1. OpenVAS Vulnerability Test $Id: deb18691.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1869-1 curl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

DSA-1869-1 curl - SSL certificate verification weakness

Bulletin has no description...

PHP <= 5.2.10 Interruptions and Calltime Arbitrary Code Execution Vulnerability

PHP is prone to a vulnerability that an attacker could exploit to execute arbitrary code with the privileges of the user running the affected application. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft Visual Studio和Internet Explorer未明远程代码执行漏洞

Bugraq ID: 35804 CNCAN ID：CNCAN-2009072803 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft Internet Explorer是一款流行的WEB浏览器。 Blackhat会议公布了Microsoft Visual Studio和Internet Explorer的未明安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Microsoft Visual Studio 2008 SP1 Microsoft Visual Studio 2008 0...