Apple Addresses New SMS Trojan in Malware Lists

Apple has made updates to its malware definitions to address yesterday’s news of a new OS X Trojan, SMSSend.3666, that was disguising itself as legitimate software and confounding Russian users. The Trojan, first blogged about by antivirus firm Dr. Web, tricked users into entering their cell phon...

PayPal Bug Bounty Program - playing fair ?

Bug Bounty program, where white hat hackers and researchers hunt for serious security vulnerabilities and disclosing them only to the vendor for a patch , In return vendors rewards them with money. Various famous websites like Facebook , Google , Paypal , Mozilla, Barracuda Networks and more othe...

South Carolina Data Breach Casts Spotlight on Lack of Encryption, Stolen Credentials

South Carolina governor Nikki Haley said a mouthful this week when she spilled a dirty industry secret that Social Security numbers are generally not encrypted by state agencies. Reeling from a Department of Revenue data breach that leaked 3.6 million Social Security and credit card numbers as we...

Midori Browser 0.3.2 - Denial of Service

source: https://www.securityfocus.com/bid/55709/info The Midori Browser is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Midori Browser 0.3.2 is vulnerable; other versions may also be affected...

Divx Player 6.8.2 - Denial of Service

Divx Player 6.8.2 - Denial of Service source: https://www.securityfocus.com/bid/55105/info Divx Player is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Divx 6.8.2 is vulnerable; other versions...

Mozilla Firefox - Remote Denial of Service

source: https://www.securityfocus.com/bid/55091/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to make the affected computer unresponsive, denying service to legitimate users. Mozilla Firefox 14.01 is affected; prior versions may also...

LinkedIn Victims Do Not Connect With Legitimate Notifications

The company sent an important e-mail notification with special coding DKIM and addressed the recipient by name. It also didn’t include any links in the actual message. And yet LinkedIn did not connect with some 250,000 of its users, who flagged the legitimate alert as spam. Some thought it was a...

Foncy is Dead, Long Live Mania

In the middle of January 2012 Foncy was updated: it started to spread together with an IRC bot and a root exploit. But the end of the Foncy story was very close because in February two suspected authors of this malware were arrested in Paris: you can read the story here in French and here in...

Universal Reader 1.16.740.0 - 'uread.exe' Denial of Service

source: https://www.securityfocus.com/bid/53508/info Universal Reader is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Universal Reader 1.16.740.0 is vulnerable; other versions may also...

Facebook Anti-Troll System Snagging Ordinary Users

Complaints rang far and wide last week after an automated system for spotting inappropriate Facebook comments began blocking legitimate posts by the social network’s users, including prominent members like Robert Scoble. Facebook users of all stripes have received warnings about posting...

ECShop v2. 7. 2 wap page storm path 0day-vulnerability warning-the black bar safety net

Google: inurl:mobile/goods. php? act=viewimg&id=1 2 3 Search to After in page plus&id=5 That is, http://www. badguest. cn/mobile/goods. php? act=viewimg&id=1 2 3&id=5 For example, for many forums, submitted a non-existent file request, or submit a There is no output file of the request, the serve...

Samba Memory Leak Local Denial Of Service Vulnerability

Samba is prone to a local denial-of-service vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

UltraPlayer 2.112 - '.avi' File Denial of Service

source: https://www.securityfocus.com/bid/51652/info UltraPlayer is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. UltraPlayer 2.112 is vulnerable; other versions may also be affected...

DNS Hijacks Now Being Used to Serve Black Hole Exploit Kit

Attackers have been going after various pieces of the DNS infrastructure for a long time now, and it’s not unusual for there to be somewhat organized campaigns that target certain vertical industries or geographic regions. But researchers lately have been seeing an interesting pattern of...

Google Expands Safe Browsing Alerts to Include Malware Distribution Sites

Google is expanding the amount and kind of data that it supplies to network operators about potentially malicious activity happening on their networks and elsewhere. The company is now giving operators information on dedicated domains that are being used for malware hosting and distribution. Last...

CoDeSys 3.4 - POST Null Pointer Content-Length Parsing Remote Denial of Service

source: https://www.securityfocus.com/bid/50854/info CoDeSys is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to crash the application and deny service to legitimate users. udpsz -T -c "POST / HTTP/1.0\r\nContent-Length: 4294967295\r\n\r\n" SERVER 8080 ...

Splunk 4.1.6 Web Component - Remote Denial of Service

Splunk 4.1.6 Web Component - Remote Denial of Service source: https://www.securityfocus.com/bid/50298/info Splunk is prone to a remote denial-of-service vulnerability. Exploiting this issue will exhaust system resources and cause the application to crash, denying service to legitimate users...

Splunk 4.1.6 Web Component - Remote Denial of Service

source: https://www.securityfocus.com/bid/50298/info Splunk is prone to a remote denial-of-service vulnerability. Exploiting this issue will exhaust system resources and cause the application to crash, denying service to legitimate users...

VeriSign demands Power to takedown non-legitimate website

VeriSign demands Power to takedown non-legitimate website VeriSign, which manages the database of all .com internet addresses, wants powers to shut down "non-legitimate" domain names when asked to by law enforcement. VeriSign should be able to shut down a .com or .net domain, and therefore its...

VeriSign demands Power to takedown non-legitimate website

VeriSign demands Power to takedown non-legitimate website VeriSign, which manages the database of all .com internet addresses, wants powers to shut down "non-legitimate" domain names when asked to by law enforcement. VeriSign should be able to shut down a .com or .net domain, and therefore its...