The Vienna Connection? Trying To Stamp Out Flame, Researchers Find Clues To Its Origins

Researchers at Kaspersky Lab, domain registrar GoDaddy and OpenDNS have taken steps to cut off Internet access for machines infected with the Flame worm. In the process, the researchers say they uncovered a large and complex command and control infrastructure of more than 80 Web domains and...

WebData CMS SQL Injection

Exploit Title : WebData CMS SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : www.webdatadevelopers.com Contact : [email protected] , [email protected] Security Risk : High DorK : "Powered by...

ACC PHP eMail v1.1 - Multiple Web Vulnerabilites

Exploit for php platform in category web applications Title: ====== ACC PHP eMail v1.1 - Multiple Web Vulnerabilites Date: ===== 2012-04-13 ntroduction: ============= Acc PHP eMail is a email subscription and management script. Manage subscribers them and send newsletters. Acc PHP eMai is...

ACC PHP eMail v1.1 - Multiple Web Vulnerabilities

Document Title: =============== ACC PHP eMail v1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=505 Release Date: ============= 2012-04-12 Vulnerability Laboratory ID VL-ID: ==================================== 505 Produ...

Apple Developing Fix For Flashback Malware

Apple is planning to release a software fix that will find and remove the Flashback malware that has been haunting Mac users for several months now. The latest version of Flashback has built a botnet that at times has included more than 600,000 infected machines. Apple said on Tuesday that it was...

Active Zeus C&Cs Remain Following Microsoft Takedown

It appears that Microsoft’s recent Zeus takedown attempt left some bots behind. Days after the company announced it had sinkholed the troublesome botnet, researchers say that there are still some C&C domains active. FireEye Malware Intelligence Lab’s Atif Mushtaq is reporting that, despite a...

DEBIAN-CVE-2012-1570

The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain name...

Jobrapido.com Cross Site Scripting

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Jobrapido.com Multiple XSS Date : 07-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Web site : http://www.jobrapido.com Web master...

FlashFXP Filter Exception - Buffer Overflow Vulnerability

Document Title: =============== FlashFXP Filter Exception - Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/463.wmv View: http://www.youtube.com/watch?v=vffoSP3EOjk http://www.vulnerability-lab.com/getcontent.php?id=463 Release Dat...

Resellerclub and Directi Registrars Hacked

Resellerclub and Directi Registrars Hacked Various Domains and Sudomains of two largest Reseller focused Registrars in the world got hacked by GrayHatz turkish Group of hackers. ResellerClub is one of the largest private label Web Solutions Providers globally. ResellerCLub's products represent an...

UBUNTU-CVE-2012-1191

The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names"...

Astaro Security Gateway Whitelist Bypass

Advisory Information Title: Astaro Security Gateway - bypass using whitelist domain pattern weakness upSploit Ref: UPS-2011-0041 Advisory Summary Astaro Security Gateway's default Web Filtering Exceptions allow specially-named domains to bypass security features of the firewall. Vendor Astaro...

PT-2012-3031 · Isc +4 · Isc Bind 9 +4

Name of the Vulnerable Software and Affected Versions: ISC BIND 9 versions 9.1.1 through 9.8.1-P1 ISC BIND 9 version 9.7.0 ISC BIND 9 version 9.7.2 Description: The issue allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. This...

Suspected LOIC Traffic Domains Block List

Multiple domains have been identified to potentially host LOIC or other malicious code...

Microsoft Adds Kelihos Botnet Operator To Civil Complaint

A Russian man was added to the list of defendants in a civil complaint filed by Microsoft at the operators of the Kelihos botnet. In an amended complaint filed in U.S. District Court on Monday, the company said that Andrey Sabelnikov controlled Kelihos using 21 Internet domains bought from a...

Network Of 7K Typo Squatting Domains Drives Huge Traffic To Spam Web Sites

A report from Websense finds that spammers are cleaning up on misspelled domain names for prominent sites. A network of such typo squatting sites is driving millions of visitors to a Web site controlled by the spammers, making it one of the most traffic sites on the Internet. The report, on...

Siemens multiple domains hacked by Hmei7

Siemens multiple domains hacked by Hmei7 Indonesian hacker Hacker named "Hmei7" previously in news for hacking Microsoft and IBM , yesterday hack and deface 6 domains of Siemens company. Defaced websites come from different TLD which include the Ecuador, Peru, Venezuelan, Colombia and Brazil and...

FTC Criticizes ICANN Plan to Expand Domain Names

The Federal Trade Commission FTC is taking aim at a plan by the Internet Corporation for Assigned Names and Numbers ICANN to increase the number of domains on the Web. On Dec. 16, the FTC sent a letter to ICANN claiming that expanding the number of generic top-level domains gTLDs would open users...

CVE-2011-4761: Undefined Security Weakness

Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving domains/sitebuilderedit.php and certain other files. NOTE: it is...

CVE-2011-4753: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by domains/sitebuilderedit.php and certain other files...