Another Java zero-day vulnerability being exploited in the wild

Do you still have Java installed? There is a bad news for you ! FireEye has detected yet another Java zero-day vulnerability being exploited in attacks in the wild. The vulnerability targets browsers that have the latest version of the Java plugin installed Java v1.6 Update 41 and Java v1.7 Updat...

Another Java zero-day vulnerability being exploited in the wild

Do you still have Java installed? There is a bad news for you ! FireEye has detected yet another Java zero-day vulnerability being exploited in attacks in the wild. The vulnerability targets browsers that have the latest version of the Java plugin installed Java v1.6 Update 41 and Java v1.7 Updat...

New Zero-Day Vulnerability Found in Java 5, 6 and 7; 1.1 Billion Desktops Affected

Just when you thought it was safe to go back to using Java, security researchers have found another gaping hole that could impact potentially more than 1.1 billion desktops running the Oracle-owned platform. A critical vulnerability in all of the latest versions of Java SE software was discovered...

Researcher Finds Three New Exploits Targeting Latest IE Zero-Day

A researcher at AlienVault has discovered three new servers delivering exploits targeting the latest zero-day vulnerability in Internet Explorer. Jamie Blasco, AlienVault Labs manager, said the one of the servers is delivering a new malware payload, and all of them appear to be targeting defense...

Dark Comet RAT Tailored For Attacks On Gamers, Governments

Researchers analyzing the Dark Comet remote access Trojan RAT program say that data from more than 400 campaigns suggests the malicious program is being used for a wide range of jobs, from attacks on online gamers, to potential hacks of air force bases and government Web sites. In the blog entry,...

Office based Trojan threat for Mac OS X by Chinese hackers

Office based Trojan threat for Mac OS X by Chinese hackers Security company ESET watches the newly found Trojan for OS X establish connections and receive commands to steal information. Earlier this month, researchers from AlienVault and Intego reported a new malware attack targeting Tibetan NGOs...

Researchers Discover Android Mobile Botnet 100k Strong

A newly discovered malicious application circulating on third party Android markets in China has created a botnet that contains more than 100,000 compromised devices, researchers report. Researchers from North Carolina State University and Symantec say the malware, dubbed RootStrap NC State...

Gamers Seek Beta Versions, Download Malware Instead

Tracking the increasingly common use of PC games as an infection vector, researchers at the Microsoft Malware Protection Center MMPC discovered a couple of malicious programs making the rounds on torrent and file sharing sites. Social engineers are disguising their malware by labeling it as the...

Poison Ivy RAT Still Giving Users a Rash

The Poison Ivy malware kit is old. It was first seen in 2005, which makes it about 762 years old in Internet years. But that doesn’t mean it’s no longer useful, as evinced by the data collected by Microsoft in a new report on the tool, which shows that it is still in active use and is turning up ...

CVE-2005-3992

Multiple buffer overflows in WinEggDropShell remote access trojan RAT 1.7 allow remote attackers to execute arbitrary code via 1 a long GET request to the HTTP server, or a long 2 USER or 3 PASS command to the FTP server...

CVE-2005-3992

CVE-2005-3992 affects WinEggDropShell RAT 1.7. The vulnerability stems from multiple buffer overflows in the RAT’s HTTP server (GET requests) and FTP services (USER/PASS commands), allowing remote attackers to trigger arbitrary code execution. The provided documents do not specify affected versio...

CVE-2005-3992

Multiple buffer overflows in WinEggDropShell remote access trojan RAT 1.7 allow remote attackers to execute arbitrary code via 1 a long GET request to the HTTP server, or a long 2 USER or 3 PASS command to the FTP server...

WinEggDropShell Multiple Remote Stack Overflow

WinEggDropShell Multiple Remote Stack Overflow by Sowhat 2005.12.02 http://secway.org/advisory/AD20051202.txt http://secway.org/exploit/wineggdropshellbof.py.txt Affected: WinEggDropShell Eterntiy version 1.7 Other version may be vulnerable toooooo Overview: WinEggDropShell is a popular Chinese R...

AD20051202.txt

WinEggDropShell Multiple Remote Stack Overflow by Sowhat 2005.12.02 http://secway.org/advisory/AD20051202.txt http://secway.org/exploit/wineggdropshellbof.py.txt Affected: WinEggDropShell Eterntiy version 1.7 Other version may be vulnerable toooooo Overview: WinEggDropShell is a popular Chinese R...

NetSphere Backdoor Detection

The NetSphere backdoor is installed on the remote host. By connecting to it, a remote attacker can gain control of the affected system. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10005; scriptversion"$Revision: 1.26 $"; scriptcvsdate"$Date: 2015/10/21 20:34:20 $";...