Microsoft Windows - 'afd.sys' Local Kernel (PoC) (MS11-046)

/ MS11-046 Was a Zero day found in the wild , reported to MS by Steven Adair from the Shadowserver Foundation and Chris S . Ronnie Johndas wrote the writeup dissecting a malware with this exploit . I Rahul Sasifb1h2s just made the POC exploit available . Reference: ms8-66, ms6-49 Too lazy to add...

CVE-2010-0219

creationtimestamp| type| source ---|---|--- 2010-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16315 2010-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16312 2010-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15869 2018-05-29...

Shadowserver Starts Free Binary-Checking Service

A non-profit group that tracks malicious activity online has just started a new free service that enables users to check executable files against a database of known good applications and to help determine whether a given file is malicious. The service, offered by the Shadowserver Foundation, is ...

Which ISPs Are Hosting the Bad Guys?

Security blogger Brian Krebs has compiled lists of the top 10 ISPs who are hosting the worst botnets, spam, phishing, and other malware from independent tracking organizations. These lists come from: Stop Badware, F.I.R.E., Phishtank, Zeustracker, Malware Domain List, Arbor Top ASN List, Emerging...

Conficker Infections Drop With New Year

People have one more reason to celebrate the new year, according to the Shadowserver Foundation: Nearly a million Conficker-infected computers have oddly disappeared overnight. Read the full article. Security Focus...

Shadowserver Data Reveals Top Conficker Victims

ISPs in Russia and Ukraine are home to some of the highest concentrations of customers whose machines are infected with the Conficker worm, shows data from the Shadowserver Foundation. Read the full article. Washington Post...

Conficker Infects 7 Million Systems in a Year

The Shadowserver Foundation reported that it has discovered 7 million unique IP addresses infected by Conficker and its variants. Tracking of the attack was accomplished by cracking the algorithm that the worm uses to find instructions on the Internet. Shadowserver then used sinkhole servers to l...

CVE-2009-0545

creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8023 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zeroshellexec.rb 2024-10-25 00:00:00+00:00| seen| The...