1400 matches found
Microsoft Says Rustock Botnet Cut in Half
In March, Microsoft announced that its Digital Crimes Unit had scored a major victory in the war against hackers with the takedown of the Rustock botnet. Since then, the company has continued to monitor the activity of the network and the machines infected with the Rustock-related malware and fou...
Cisco: More Threats To Apple, Mobile Devices In 2011
Data suggests that 2010 was a year of “more of the same” when it comes to computer threats, but 2011 likely won’t be, at least according to networking giant Cisco Systems, which released its Annual Security Report on Wednesday. Cisco’s annual report on the state of security reiterated findings fr...
FreeBSD : Drupal Views plugin -- XSS (ff8b419a-0ffa-11e0-becc-0022156e8794)
Drupal security team reports : The Views module provides a flexible method for Drupal site designers to control how lists and tables of content are presented. Under certain circumstances, Views could display parts of the page path without escaping, resulting in a relected Cross Site Scripting XSS...
D-Link Routers - Authentication Bypass (1)
D-Link Routers - Authentication Bypass 1 Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities Date: 12-01-2011 Author: Craig Heffner, /dev/ttyS0 Firmware Link: http://www.dlink.co.uk/ Firmware Versions: All Tested on: DIR-300, DIR-320, DIR-615 revD Multiple D-Link routers...
57 Percent of Apps Have Poor Security: Report
Findings from Veracode’s report “State of Software Security Report: Volume 2.” show that overall quality of applications remains poor, with 57 percent failing to meet acceptable levels of security. New results demonstrate that cloud/web-based applications are the most commonly scrutinized, and wi...
SA-CONTRIB-2010-082 - Print - Local file read access
The Printer, e-mail and PDF versions "print" module provides printer-friendly versions of content, including a PDF version that is generated by one of three supported generation tools dompdf, TCPDF and wkhtmltopdf. When using the wkhtmltopdf PDF generation tool, that tool is able to access local...
MDVA-2010:005 : msec
This update fixes two issues with msec: - some error messages could result in msec trowing an exception instead of logging the corresponding text bug 56180 - security report about group-writable files belonging to gdm user was silenced by default bug 56064 %NASLMINLEVEL 70300 @DEPRECATED@ This...
Credit Unions Targets of Smishing Attacks
A new report found that credit unions continue to be a favorite target of smishing attacks, and that text-to-phone scams used a toll-free number in about half of the lures sent in the first quarter of 2010. Read the full article. KrebsonSecurity...
Mandriva Update for msec MDVA-2010:005 (msec)
Check for the Version of msec OpenVAS Vulnerability Test Mandriva Update for msec MDVA-2010:005 msec Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Quick Heal 10.00 SP1 - Local Privilege Escalation
ShineShadow Security Report 13102009-11 TITLE Quick Heal Local Privilege Escalation Vulnerability BACKGROUND Quick Heal Technologies is leading provider of AntiVirus and Internet Security tools and is leader in Anti-Virus Technology in India. A privately held company, Quick Heal Technologies Pvt...
Microsoft Security Intelligence Report: The Vinny and Tim Show
This video features Tim Rains and Vinny Gullotto of Microsoft discussing the major threats from the second half of 2008...
AJ Auction Authentication Bypass Vulnerability
No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...
preshoppingmail-insecure.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PRE SHOPPING MALL Insecure Cookie...
Xomol CMS v1 Login Bypass / LFI Vulnerabilities
No description provided by source. '/ -.- -------------oOO------OOo------------ | Xomol CMS v1 Login Bypass & LFI | | coded by DNX | ---------------------------------------- ! Discovered.: DNX ! Vendor.....: http://www.xomol.net ! Detected...: 12.05.2008 ! Reported...: 13.05.2008 didn't work: hos...
Unfixed XSS vulnerability at www.anten.de
Security researcher TurKPoweR, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.anten.de, which at the time of submission ranked 125098 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/06/2008. It is currentl...
5th avenue Shopping Cart SQL Injection
Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...
SOL8406 - The BIG-IP ASM web management interface cross-site scripting vulnerability CVE-2008-0539
The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report function. The vulnerability is within the BIG-IP ASM portion of the Configuration utility and can be accessed successfully only if the browser user is authenticated and the BIG-IP ASM...
f5asm-xss.txt
F5 BIG-IP Web Management ASM Security Report XSS Product: F5 BIG-IP Application Security Manager http://www.f5.com/products/big-ip/product-modules/application-security-manager.html The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report...
F5 BIG-IP Web Management ASM Security Report XSS
F5 BIG-IP Web Management ASM Security Report XSS Product: F5 BIG-IP Application Security Manager http://www.f5.com/products/big-ip/product-modules/application-security-manager.html The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report...
ImageShack Toolbar 4.5.7 - 'FileUploader' Class InsecureMethod
suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingprivatethings","Fade","White" ---- some wiresh...