6487 matches found
Data thieves love tax time
From internetnews.com Alex Goldman Valentine’s Day is a the season for social engineering, as many people hope for a note from a mysterious and fascinating someone and are therefore more willing to open suspicious messages and attachments than at any other time. Unfortunately, it is now the seaso...
Conficker business model: Scareware and spam
The Conficker botnet has started to use its peer-to-peer communication system to update itself and download scareware fake anti-virus programs to millions of infected Windows machines, according to malware hunters tracking the threat. The latest Conficker mutant comes a week after a heavily-hyped...
In weak economy, IT pros could turn to e-crime
By Jeremy Kirk, IDG News Service Enterprises increasingly feel their employees will be more willing to steal data or sell insider knowledge due to the poor economy, according to an annual security survey infoworld.com conducted by KPMG. Sixty-six percent of respondents felt that out-of-work IT...
Ubuntu Update for firefox vulnerabilities USN-428-1
Ubuntu Update for Linux kernel vulnerabilities USN-428-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4281.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox vulnerabilities USN-428-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for firefox vulnerabilities USN-535-1
Ubuntu Update for Linux kernel vulnerabilities USN-535-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5351.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox vulnerabilities USN-535-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Hackers can sniff keystrokes from thin air
By Elinor Mills, CNET Presenters at the CanSecWest security conference detailed on Thursday how they can sniff data by analyzing keystroke vibrations using a laser trained on a shiny laptop or through electrical signals coming from a PC connected to a PS/2 keyboard and plugged into a socket. Usin...
Wordpress fMoblog 2.1 SQL Injection
Wordpress Plugin fMoblog Remote SQL Injection Vulnerability Plugin Home: http://www.fahlstad.se/wp-plugins/fmoblog/ Plugin Version: 2.1 Author: strange kevin Email: [email protected] Google Dork: "Gallery powered by fMoblog" Exploit:...
RedHat Update for thunderbird RHSA-2008:0105-01
Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2008:0105-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Mozilla Foundation Security Advisory 2009-09
Mozilla Foundation Security Advisory 2009-09 Title: XML data theft via RDFXMLDataSource and cross-domain redirect Impact: High Announced: March 4, 2009 Reporter: Georgi Guninski Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.7 Thunderbird 2.0.0.21 SeaMonkey 1.1.15 Description...
Critical Firefox flaws flagged, fixed
The open-source Mozilla group has released Firefox 3.0.7 with fixes for at least eight security flaws, some rated critical. The most serious of the vulnerabilities could be exploited by attackers to run code and install software, requiring no user interaction beyond normal browsing, Mozilla warne...
RHEL 4 / 5 : firefox (RHSA-2009:0315)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0315 advisory. - libpng arbitrary free flaw CVE-2009-0040 - Firefox 3 Layout Engine Crashes CVE-2009-0771 - Firefox 2 and 3 - Layout engine crashes...
CVE-2008-6354
The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2poll.mdb...
More than 50% of workers stealing data when they leave jobs
Tens of millions of people have lost their jobs in recent months, and a huge number of them are taking proprieatry company data with them when they leave, according to a new study. The study shows that almost 60 percent of people who leave or are fired from a job are swiping information. Brian...
CVE-2008-6321
CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via a direct request...
CentOS Update for firefox CESA-2008:0103 centos3 x86_64
Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2008:0103 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Profense Web Application Firewall XSRF / XSS
Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP Top Ten vulnerabilities" Too bad it doesn't defend its self against all of these...
Update Protections against Recent Malware Threats (19-Jan-09)
Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...
Ubuntu USN-701-1 (thunderbird)
The remote host is missing an update to thunderbird announced via advisory USN-701-1. Several flaws were discovered in the browser engine. If a user had Javascript enabled, these problems could allow an attacker to crash Thunderbird and possibly execute arbitrary code with user privileges...
PT-2009-33 iNTERNET.cms Cross-Site Scripting Vulnerability
iNTERNET.cms is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...