Waledac: March, 2010

Though not nearly as large or important a botnet, Waledac – which counted fewer than 100,000 infected hosts at its height – was notable for the tactics that researchers used to dismantle the botnet. Microsoft worked with a group of researchers at the University of Mannheim, the University of Vien...

Fedora Update for pure-ftpd FEDORA-2011-3349

Check for the Version of pure-ftpd OpenVAS Vulnerability Test Fedora Update for pure-ftpd FEDORA-2011-3349 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 14 Update: pure-ftpd-1.0.30-1.fc14

Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...

18 Websites Hacked

18 Websites Hacked Hacked Sites : https://tonycleevelandscapes.co.uk/ https://www.qq55765.com/minhal.html https://www.6008765.com/minhal.html https://www.larbresolutions.com/assetmanager/images/minhal.html https://www.m-dev.org/portals/0/minhal.html...

Firefox 4 With Content Security Policy Due Tuesday

Firefox 4, the newest version of Mozilla’s flagship browser slated for release today, includes a variety of security and privacy protections, but perhaps the most important of them is the addition of the Content Security Policy. The mechanism, which is enabled by default in Firefox 4, is designed...

New Malware, JKDDOS, Targets Commodities Investment Firms

Researchers at Arbor Networks say they have discovered unique samples of a new family of malware that is targeting large investmen firms with holdings in the commodities markets, especially the mining industry. The malware, dubbed ‘JKDDOS,’ is used to launch distributed denial of service DDOS...

Phishing Sites Increasingly Targeting University Students

In February, the developing trend of phishing websites targeting universities in the U.S. and the U.K. became increasingly commonplace, and Symantec researchers isolated three exemplative cases. The first targeted a University in the U.K. This phishing attack came via email, and purported that...

NY Times: Stuxnet Traced to Five Iranian Internet Domains

The Stuxnet Worm attempted to infiltrate five industrial complexes in Iran over a span of ten months according to a report in the New York Times based on a Stuxnet Dossier published by Symantec. Stuxnet was designed to not only attack industrial control systems built by Siemens Corporation, which...

High Profile Education, Government Sites Hacked

The Web sites of some of the nation’s top universities were discovered to be serving up links to bogus online stores offering everything from popular software by Microsoft to student visas and Viagra, according to a report from security firm zScaler. Portions of Websites belonging to Harvard...

Spam Volume Recovers After Holiday Break

The amount of spam hitting users’ inboxes fell off a cliff in late December, with many security experts attributing the decline to the sudden disappearance of the Rustock botnet and other networks from the spam business. But the level of spam has begun to gain back some of the ground it lost toda...

Storm Botnet Returns as Part of New Year's Attacks

A new spam campaign that appeared shortly before the New Year is part of a new effort by the crew behind the Storm/Waledac botnet and is using some rather elementary tactics–in combination with fast-flux–to attempt to compromise unsuspecting users. The new attack emerged late last week and is...

NoScript Cross Site Scripting Via SQL Injection

Hi List NoScript fails to detect the reflective XSS from trusted domains when an attack is conducted through SQLXSSI. The bypass in NoScript has been successfully conducted by using "Reflective XSS" through Union SQL poisoning attacks by exploiting the reverted errors in the browser. The attack...

Report: Phishing Activity is Down (And That's A Bad Thing)

The number of phishing attacks declined in the first half of 2010, but a report from the Anti Phishing Working Group warns that might not be such a good thing. The group released its Global Phishing Survey on Monday covering the first six months of 2010. Overall, the survey reported a steep decli...

Nmap NSE: SMB Enum Domains

This script attempts to enumerate domains on a Windows system, along with their policies. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-domains.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumdomains.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Enum...

Nmap NSE: SMB Enum Domains

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Report: More Than 1 Million Web Sites Serving Malware in Q2

Web anti malware firm Dasient has published data claiming that more than 1 million Web sites were compromised in the second quarter, 2010 – a sharp increase. More than one million Web domains were infected with malicious code in the second quarter of 2010 – around one percent of all active Web...

Hack Puts Spotlight on Malware's Long Tail: Parked Domains

They’re the dusty corners of the Web: so-called “parked” domains. But these little trafficked sites are attracting the attention of security experts, who say that it’s time for hosting firms and others that profit from them to clean up malware infections that may be exposing millions of Web users...

OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0091...

USN-964-2: Likewise Open regression

USN-964-1 fixed vulnerabilities in Likewise Open. The upstream fixes were incomplete, which caused problems running certain services. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Matt Weatherford discovered that Likewise Open did not correctly chec...

USN-964-1: Likewise Open vulnerability

Matt Weatherford discovered that Likewise Open did not correctly check password expiration for the local-provider account. A local attacker could exploit this to log into a system they would otherwise not have access to...