New MySpace Attack Launches Zeus Spyware

The latest MySpace attack tries to lure recipients into giving up their MySpace credentials, and then attempts to trick victims into installing password-stealing malicious software. Attackers began blasting out the junk e-mails early Monday, according to researchers at the University of Alabama,...

Facebook, MySpace Fix Subdomain Errors

Facebook and MySpace have fixed errors that could have allowed data to be given out from its subdomains. A Dutch developer, Yvo Schaap, discovered the flaw and wrote on his blog: “A “more invasive and hidden exploit could harvest all the user’s personal photos, data and messages to a central serv...

Fedora Core 10 FEDORA-2009-7370 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7370. OpenVAS Vulnerability Test $Id: fcore20097370.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7370 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 9 FEDORA-2009-7415 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7415. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-7359 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7359. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2009-2004

Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 student and 2 course parameters, a different vector than CVE-2007-2902...

CVE-2009-2004

Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 student and 2 course parameters, a different vector than CVE-2007-2902...

CVE-2009-2008: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 uInfo parameter to main/tracking/userLog.php and the 2 course parameter to main/mySpace/lptracking.php, a different vector than CVE-2009-2006.2...

CVE-2009-2006: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 searchterm parameter to main/auth/courses.php; the 2 frmtitle and 3 frmcontent parameters in a new personal agenda item action; the 4...

Conficker-infected PCs get update, better anti-security defenses

From Network World Jeremy Kirk Millions of PCs infected with the Conficker virus have received a series of updated files over peer-to-peer connections that improve the worm’s defenses against security products and also include a sniffer and some fake anti-virus software. This is just the latest...

Orbit Downloader 2.8.7 Arbitrary File Deletion Vulnerability

No description provided by source. waraxe-2009-SA073 - Arbitrary File Deletion in Orbit Downloader = 2.8.7 =============================================================================== Author: Janek Vind "waraxe" Date: 21. March 2009 Location: Estonia, Tartu Web:...

Can social networks foster security?

It’s a departure from the stance that most people are taking these days when it comes to issues of social networking and security, but some industry players are pitching the idea eweek.com that the ever-more-popular communications applications could someday replace more traditional messaging...

Pligg Auto-Voter Using XSS to Bypass CSRF Protection

Explanation: Pligg Suffers from a Reflective Cross Site Scripting vulnerability in index.php. For the $GET'category' variable. Exploit code was written that uses this flaw to bypass the CSRF protection to then vote on any pligg article of the attackers choosing. I took inspiration from the Myspac...

Bypass-Myspace-Phisher-Block.txt

Bypass Myspace.com Phisher Block Script By IMC EXE February 28, 2008 Greetz IMC GrahamPhisher IMC Tullywacker IMC Phire Phreak IMC TwiZted Tom Insanemasterminds.com Script ------------------ Bypass Phisher Block Script By IMC EXE...

CVE-2008-0850: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to whoisonline.php, 2 trackinglistcoachescolumn parameter to main/mySpace/index.php, 3 tutorname parameter to main/createcourse/addcourse.php, the 4 Referer HTTP...

MySpace Uploader ActiveX Control < 1.0.0.6 Action Property Buffer Overflow

The remote host contains a version of the MySpace Uploader ActiveX control MySpace.Uploader.4.1 that reportedly is affected by a buffer overflow that can be triggered by assigning a string longer than 260 characters to certain properties, such as 'Action', 'ExtractIptc', and 'ExtractExif'. If a...

DSquare Exploit Pack: D2SEC_MYSPACE

Name| d2secmyspace ---|--- CVE| CVE-2008-0659 Exploit Pack| D2ExploitPack Description| MySpace Uploader MySpaceUploader.ocx ActiveX Stack Overflow Notes|...

CVE-2008-0659

CVE-2008-0659 is a stack-based buffer overflow in Aurigma ImageUploader ActiveX control (ImageUploader4.ocx) up to version 4.5.70 and in MySpaceUploader.ocx 1.0.0.4, enabling remote code execution via a long Action property. Connected sources confirm the affected component and versions and descri...

MySpace Uploader - MySpaceUploader.ocx 1.0.0.4 Remote Buffer Overflow

MySpace Uploader - MySpaceUploader.ocx 1.0.0.4 Remote Buffer Overflow MySpace Uploader Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

MySpace Uploader (MySpaceUploader.ocx 1.0.0.4) BOF Exploit

No description provided by source. !-- MySpace Uploader Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6 MySpaceUploader.ocx version 1.0.0.4: 48DD0448-9209-4F81-9F6D-D83562940134...