50 matches found
How to Tell if a Website Has Been Compromised
By Uzair Amir One of the worse things that can happen if your website has been compromised is your clients’ data being stolen. This is a post from HackRead.com Read the original post: How to Tell if a Website Has Been Compromised...
Microsoft Edge Memory Corruption Vulnerability
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...
Magecart Credit Card Stealer
Magecart is a malicious javascript code injected into e-commerce websites in order to steal payment details. A compromised website containing the malicious code may leak the customer's payment details to the attacker...
Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability
Microsoft Windows 10 and others are a family of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the web browsers. ChakraCore is the cor...
Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-18049)
Microsoft Edge is a web browser developed by Microsoft.ChakraCore is the core of the open source Chakra JavaScript scripting engine, which can also be used as a standalone JavaScript engine. A memory corruption memory corruption vulnerability exists in Microsoft Edge and ChakraCore. A remote...
Microsoft ChakraCore and Edge Memory Corruption Vulnerability
Microsoft Edge is a web browser developed by Microsoft.ChakraCore is the core of the open source Chakra JavaScript scripting engine, which can also be used as a standalone JavaScript engine. A remote code execution vulnerability exists in Microsoft Edge Windows 10 version 1803 and ChakraCore. A...
Red Hen website suffers SEO spam compromise
If you're thinking about checking out the website owned by the restaurant that asked White House press secretary Sarah Huckabee Sanders to leave the premises, you might want to hold off. There's some site compromise action afoot. Although the homepage appears to be acting in a perfectly normal...
Adobe Flash Player Use After Free Remote Code Execution Vulnerability(CVE-2018-4878)
EXECUTIVE SUMMARY The 1st of February, Adobe published an advisory concerning a Flash vulnerability CVE-2018-4878. This vulnerability is a use after free that allows Remote Code Execute through a malformed Flash object. Additionally KISA Korean CERT published an advisory about a Flash 0-day used ...
Microsoft Edge Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents. An attacker who exploited the bypass could trick a user into loading a page containing malicious content. To exploit the bypas...
Internet Explorer Memory Corruption Vulnerability
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory via the Microsoft Windows Text Services Framework. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...
New Petya Distribution Vectors Bubbling to Surface
Join Kaspersky Lab and Comae Technologies Thursday June 29, 2017 at 10 a.m. Eastern time for a webinar “The Inside Story of the Petya/ExPetr Ransomware.” Click here to attend. While Microsoft and others continue to shore up links between yesterday’s global ransomware outbreak and the update...
Windows Uniscribe remote code execution vulnerability: June 13, 2017
None None...
Terror Exploit Kit Evolves Into Larger Threat
The relatively new Terror exploit kit is bucking the downward trend in the EK market, and is steadily evolving into more of a threat. Researchers at Cisco Talos said Terror has abandoned an early strategy that included “carpet-bombing” a target’s browser to one that now uses exploits that precise...
Terror Evolved: Exploit Kit Matures
This post is authored by Holger Unterbrink and Emmanuel Tacheau Executive SummaryTalos is monitoring the major Exploit KitsEK on an ongoing basis. While investigating the changes we recently observed in the RIG EK campaigns, we identified another well known candidate: Terror Exploit Kit.Terror EK...
HTML File Containing Hidden Malicious JavaScript
A vulnerability exists in websites using Joomla or WordPress, allowing a malicious JavaScript file to open hidden content as a user browses the compromised website without the users knowledge .Attackers use this technique to improve search result ranking but may also use it as a stage in more...
compair.com XSS vulnerability
Vulnerable URL: http://www.compair.com/?s=%27;alert0//%5C%27;alert1//%22;alert2//%5C%22;alert+3//--%3E%3C/SCRIPT%3E%22%3E%27+%3E%3CSCRIPT%3Ealert/XSSPOSED/%3C/SCRIPT%3E=&%7B%7D%22;%7Dalert6+;function+xss%7B// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...
Internet Systems Consortium Site Redirects to Angler Exploit
UPDATE: This story has been updated with comments from the Internet Systems Consortium. The Internet Systems Consortium website is offline today after the non-profit domain name service maintainer announced its website had possibly become infected with malware. The ISC, as it is commonly known, i...
Hacked Political News Site Targets Router DNS Settings
The website for one of Brazil’s biggest newspapers has been compromised with malware that tries to change the victim’s router DNS settings. Web security company Securi published a report yesterday that Politica Estadao’s website was loading iFrames that carried out a brute-force attack against th...
Researchers Uncover Interesting Browser-Based Botnet
Security researchers discovered an odd DDoS attack against several sites recently that relied on a persistent cross-site scripting vulnerability in a major video Web site and hijacked users’ browsers in order to flood the site with traffic. The attack on the unnamed site involved the use of...