Chuck Norris Botnet Discovered By Honeypot

Czech security experts say they have uncovered a global botnet that may be redirecting Web surfers to other sites for the purpose of stealing their data. The botnet’s creators have dubbed the network “Chuck Norris” after the famous Hollywood actor and martial arts expert. Read the full article...

Chris Wysopal, Veracode

Chris was one of the first security researchers I met, in 2000, when he and the rest of the L0pht had just become part of @stake. I’ve probably interviewed him more often than anyone else on this list and he’s helped me with dozens of stories over the years. He always had five minutes to explain...

Dave Aitel, Immunity

Dave is one of the four or five smartest people I’ve ever interviewed, and not just on matters related to security or technology in general. His posts on the Daily Dave mailing list are always thoughtful and often funny and he has a knack for explaining insanely complex exploitation techniques,...

iPad Encryption Weakness Likened to iPhone

Apple’s new iPad device looks like it will have some of the same security issues that affect the iPhone, such as weak encryption, a mobile security expert said. Read the full article. Cnet...

The 2010 Threat Landscape

Costin Raiu, chief security expert at Kaspersky Lab in Romania, discusses the state of the threat landscape for the year ahead, including botnets, malicious PDFs and targeted attacks. Please note: Raiu is referring to media reports that attackers may have stolen some of Adobe’s source code. Adobe...

Can Howard Schmidt Make a Difference?

At first glance, the selection of Howard A. Schmidt as the White House Cybersecurity Coordinator looks like little more than a safe and easy choice designed to quiet the critics who for seven months have been howling for action from the Obama administration. But a closer look shows that Schmidt’s...

The simple missteps that cause data breaches

From SearchSecurity.co.uk Ron Condon Simple mistakes by organisations can cause data loss, and those errors are making it easy for cybercriminals to flourish on the Internet, according to a forensics expert who investigated some of the world’s biggest security breaches. Matthjis van der Wel is he...

nc contract returns "HTTP/1.1 4 0 0 Bad Request" solution-vulnerability warning-the black bar safety net

Copyright statement: reprint, Please to hyperlink marked article origin and author information and this statement http://qiuren.blogbus.com/logs/37117725.html A lot of times in the debugger when you need to customize the contract, in the ordinary post to submit with Firefox plug-ins enough to cop...

10 Dos and Don'ts for security job interviews

From CIO Joan Goodchild The pickings are slim in the job market and the time line of interviewing and then hiring new people is slow. But there are positions available in the security field, according to three veteran security recruiters that we spoke with recently. If you get a call that you’ve...

Expert PDF EditorX ActiveX File Overwrite Vulnerability

Expert PDF EditorX is prone to ActiveX file overwrite vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Expert PDF EditorX ActiveX File Overwrite Vulnerability

This host is installed with Expert PDF EditorX and is prone to ActiveX file overwrite vulnerability. OpenVAS Vulnerability Test $Id: secpodexpertpdfeditorxactivexvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Expert PDF EditorX ActiveX File Overwrite Vulnerability Authors: Sujit Ghosal Copyright:...

Countdown to Conficker's April 1st climax

By Byron Acohido, LastWatchdog.com Two schools of thought exist about what the Conficker worm will do come the wee hours of April 1, 2009, GMT. Some experts, like WinPatrol creator Bill Pytlovany, are sensing that the worm’s controllers will run circles lastwatchdog.com around the Microsoft-led...

Security feature bypass

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method...

CVE-2008-6496

CVE-2008-6496 affects VISAGESOFT eXPert PDF EditorX (VSPDFEditorX.ocx 1.0.200.0). The VSPDFEdit ActiveX control exposes extractPagesToFile’s first argument, allowing remote attackers to create or overwrite arbitrary files. Documented impact is arbitrary file overwrite; no remediation details are ...

qvodcms on-demand expert v1. 6 There SQL and the XSS-vulnerability warning-the black bar safety net

qvodcms on-demand expert v1. 6 There SQL withXSS demo url:http://demo.qvodcms.com/Default.html author:hiphop SQL injection: the Weaknesses page:admin/JaJaCreateClass. asp Dim Action,ii,ppage,tpage Action=TrimRequest"action" Classid=TrimRequest"Classid" from here, the Classid is not filtered...

“Cocktail”therapy to deal with the variety of Trojan hybrid intrusion-vulnerability warning-the black bar safety net

Here is a quote of the“cocktail”therapy is a medical term, refers to the physician while using the a variety of anti-viral drugs to deal with AIDS. For a computer virus to a single tool in particular is very well-known tool is very easy to be viral as against the target without losing effect, it'...

eXPert PDF EditorX ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 32664 eXPert PDF Viewer是为windows应用开发人员设计的可嵌入式PDF查看器。 VSPDFEditorX.VSPDFEdit ActiveX控件（VSPDFEditorX.ocx）所提供的extractPagesToFile方式没有正确地验证用户所提交的Filename和PagesRange参数，如果用户受骗访问了恶意网页并传送了恶意参数的话，就可能向用户系统保存或覆盖任意文件。 Visagesoft eXPert PDF Viewer ActiveX 1.0.200.0 临时解决方法： 为CLSID...

Visagesoft eXPert PDF EditorX (VSPDFEditorX.ocx) Insecure Method

No description provided by source. VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom...

Visagesoft eXPert PDF EditorX Insecure Method

VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom...

Visagesoft eXPert PDF EditorX - VSPDFEditorX.ocx Insecure Method

Visagesoft eXPert PDF EditorX - VSPDFEditorX.ocx Insecure Method VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mai...