Dave Dittrich on Botnets, Conficker and the Evolution of Malware

Dennis Fisher talks with Dave Dittrich of the University of Washington, one of the top botnet and malware researchers in the industry, about the evolution of botnets and malware, the innovations of the Nugache botnet and the monetization of large-scale botnets. Download Subscribe to the Digital...

SA-CONTRIB-2009-063 - XML sitemap - Cross Site Scripting

The XML sitemap module creates a sitemap that conforms to the sitemaps.org specification. It also allows users with the 'administer site configuration' permission to add additional custom links to be included in the sitemap. In the additional links interface, the module does not properly sanitize...

SA-CONTRIB-2009-061 - Markdown Preview - Cross Site Scripting

The Markdown Preview module provides a live preview pane that displays the rendered HTML output of your Markdown input. When displaying the live preview, the module does not properly escape user entered data, leading to a cross-site scripting XSS vulnerability. Such an attack may lead to a...

biggboss2 SQL Injection

==================================================================== Website: http://biggboss2.in.com/ Category: TV Show Vulnerability: Inband SQL Injection Founder: Jaydeep [email protected] Date: 16th Feb, 2009 ==================================================================== == P O C...

moneycontrol.com SQL Injection

============================================================================= Website: http://moneycontrol.com/ Category: India's one of the biggest finance screener stock market Vulnerability: Blind SQL Injection Founder: Jaydeep Dave [email protected] Date: 16th Feb, 2009...

compareindia.in.com SQL Injection

==================================================================== Website: http://compareindia.in.com/ Category: India's biggest hardware comparision website + buyer's guide Vulnerability: Inband SQL Injection Founder: Jaydeep Dave [email protected] Date: 16th Feb, 2009...

admagnet.net SQL Injection

==================================================================== Website: http://admagnet.net/ Category: Central Advertise Hosting Vulnerability: Inband SQL Injection Founder: Jaydeep Dave [email protected] Date: 16th Feb, 2009...

CVE-2006-0201

Dave Nielsen and Patrick Breitenbach PayPal Web Services aka PHP Toolkit 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipnsuccess.php...

sastcpd 8.0 'authprog' local root vulnerability

Hi, Several environment variable problems exist in the 'SAS Job Spawner for Open Systems version 8.00'. No other releases of the software were available to test. Sorry. authprog vulnerability ---------------------- The daemon passes a user-defined environment variable, 'authprog', to execve. This...