3676 matches found
Netto.se Open Redirection
Background -------------- Netto is a supermarket chain based in denmark with stores in Denmark, Poland, Germany and Sweden. The following vulnerability affects the swedish branch site although similar ones may affect others. Vulnerability -------------- The vulnerability is present on the netto.s...
Report: North Korea Accused Of DDoS Attack On South Korean Airport
North Korean agents have been linked to a malware attack on a South Korea’s Incheon International Airport, according to a report from the JoongAng Daily, a South Korean paper. The paper, citing the Seoul Metropolitan Police Agency, said that a 39 year-old South Korean man was arrested for...
Launching Forward with IPv6
With the era of freely available IPv4 addresses nearing its end, I'm pleased to see that 2012 appears to be the year when the IPv6 Internet will finally reach maturity and launch into wide-scale commercial use. For over a decade, the groundwork for the migration to version 6 of the Internet...
Tiny New Tinba Banker Trojan Found Stealing Financial Data
Security researchers have discovered a tiny new banking Trojan that comprises just 20 KB of code and uses a number of well-word man-in-the-browser tricks in an attempt to defeat two-factor authentication. Known as Tinba, the new malware doesn’t bother with any encryption or packing and yet is...
Like Those Wikipedia Ads? They Mean You're Infected With Malware!
The Wikimedia Foundation is warning its millions of visitors that if they’re seeing ads appearing on any of the Foundation’s Web sites, then their computer is probably infected with malware. The Foundation issued a statement on Monday clarifying that it never runs ads on the Web site for Wikipedi...
Hijacked Web Sites Among The Most Visited On Google's Black List
Legitimate Web sites that have been hijacked and used to serve malicious content greately outnumber malicious sites on a list of the most-trafficked sites on Google’s blacklist, according to analysis by security firm Zscaler. Zscaler analyzed the top one million Web sites on the Web, based on...
baserCMS vulnerable to session management
Overview baserCMS contains a vulnerability in session management. baserCMS is an open-source Contents Management System CMS. baserCMS contains a vulnerability in session management. Impact If a web server is hosting several websites, and baserCMS are installed on the respective websites, an...
Safari < 5.1.7 Multiple Vulnerabilities
The version of Safari installed on the remote host reportedly is affected by several issues : - Two unspecified errors exist that can allow malicious sites to perform cross-site scripting attacks. CVE-2011-3046, CVE-2011-3056 - An unspecified memory corruption error exists that can allow maliciou...
OauthApplinksServlet Open Redirect
The OauthApplinksServlet servlet has an open redirect vulnerability in the doGet that will allow phishers to lure users away from legitimate JIRA hosted sites. An open redirect vulnerability is caused by an attacker having control over a request parameter that hasn’t been validated before redirec...
OauthApplinksServlet Open Redirect
The OauthApplinksServlet servlet has an open redirect vulnerability in the doGet that will allow phishers to lure users away from legitimate JIRA hosted sites. An open redirect vulnerability is caused by an attacker having control over a request parameter that hasn’t been validated before redirec...
ConsumerConfigurationServlet Open Redirect
The ConsumerConfigurationServlet servlet has an open redirect vulnerability in the doGet method that will allow phishers to lure users away from legitimate JIRA hosted sites. An open redirect vulnerability is caused by an attacker having control over a request parameter that hasn’t been validated...
ConsumerConfigurationServlet Open Redirect
The ConsumerConfigurationServlet servlet has an open redirect vulnerability in the doGet method that will allow phishers to lure users away from legitimate JIRA hosted sites. An open redirect vulnerability is caused by an attacker having control over a request parameter that hasn’t been validated...
AddConsumerReciprocalServlet Open Redirect
The AddConsumerReciprocalServlet servlet has an open redirect vulnerability in the doGet method that will allow phishers to lure users away from legitimate JIRA hosted sites. An open redirect vulnerability is caused by an attacker having control over a request parameter that hasn’t been validated...
AddConsumerReciprocalServlet Open Redirect
The AddConsumerReciprocalServlet servlet has an open redirect vulnerability in the doGet method that will allow phishers to lure users away from legitimate JIRA hosted sites. An open redirect vulnerability is caused by an attacker having control over a request parameter that hasn’t been validated...
AddConsumerReciprocalServlet Open Redirect
The AddConsumerReciprocalServlet servlet has an open redirect vulnerability in the doGet method that will allow phishers to lure users away from legitimate JIRA hosted sites. An open redirect vulnerability is caused by an attacker having control over a request parameter that hasn’t been validated...
CityVariety SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: CityVariety MySQL error based injection Date: 06/05/2012 Author: ReZK2LL Team : k2ll33d - Farouk reseau - ala Manai Vendor : http://www.cityvariety.co.th Version: N/A Category: webapps Google dork: intext:"powered by CityVariety...
Drupal 7.x Core URI重定向漏洞
Bugtraq ID: 53365 CVE ID：CVE-2012-1589 Drupal是一款开放源码的内容管理平台。 Drupal表单API允许用户设置目的地址，但没有正确校验URL是否为内部站点，这可通过恶意脚本重定向登录页面到远程恶意站点，可获得敏感信息。 0 Drupal 7.x 厂商解决方案 Drupal 7.13已经修复此漏洞，建议用户下载使用： http://www.drupal.org/...
Expert Warns That WordPress Autoupdate Feature Used To Infect Blogs With Malware
UPDATE: More than 1,000 WordPress blogs are currently being infected by a form of malware that has ‘piggybacked’ its way onto the blogging platform using the WordPress automatic update function, a security researcher has discovered. According to Denis Sinegubko, founder of Unmask Parasites, the...
Nine Percent of Websites May be Malicious
Just fewer than 10 percent of websites serve some sort of malicious purpose, with an additional nine percent of sites being characterized as “suspicious” by Zscaler in a new research report. Zscaler ran 27,000 website URLs through a tool they developed to assess the security of websites and give...
Norasoft - SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================================================== Norasoft - SQL Injection Vulnerability ========================================================================== Title: Norasoft - SQL Injection Vulnerability Author :...