3676 matches found
Cybercriminals hijack Twitter trending topics to serve malware
From ZDNet Dancho Danchev A currently ongoing malware attack across Twitter is abusing the momentum offered by Twitter’s trending topics in order to trick users into visiting bogus exclusive video sites and infect them with malware. The campaign, spreading since last week, is relying on a growing...
Attack destroys data of thousands of Web host Vaserv's customers
From The Register Dan Goodin A targeted attack against a U.K.-based Web hosting company has destroyed the data of an estimated 100,000 of the company’s customers’ sites. Vaserv.com was hit by an attack this weekend that exploited a flaw in a virtualization application the company was running,...
Fake Google domains top exploit site list
Misspelled versions of two popular Google services are among the Top 10 sites hosting exploits for use in drive-by malware download attacks. On the heels of two massive drive-by attacks — ten of thousands of hijacked sites launching attacks via the browser — Google released a list showing that...
ntp
New ntp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0159...
Experts: Gumblar attack is alive, worse than Conficker
From CNet Elinor Mills The Web site compromise attack known as Gumblar has added new domain names that are downloading malware onto unsuspecting computers, stealing FTP credentials to compromise more sites, and tampering with Web traffic, a security firm said on Thursday. The Gumblar attack start...
AMember 3.1.7 (XSS/SQL/HI) Multiple Remote Vulnerabilities
No description provided by source. AMember - Multiple Vulnerabilities Version Affected: 3.1.7 Apr-10-2009 newest Info: aMember is a flexible membership and subscription management PHP script. It has support for PayPal, BeanStream, 2Checkout, NoChex, VeriSign PayFlow, Authorize.Net, PaySystems,...
Gumblar: The malware that is sweeping the nation
The latest large-scale malware outbreak to hit the Web, known variously as Gumblar and Geno and Martuz, is a multi-stage attack that not only infects compromised machines with a number of separate pieces of malware but also has the ability to steal credentials and block the victim from taking...
IT staffs pressured to relax Web security
From SearchSecurity.com Rob Westervelt IT managers are under pressure from the top executives in their organizations to relax their policies on Web security in order to make users more productive. A new survey of more than 1,000 IT managers found that sales and marketing personnel also are leanin...
Most attacks come from legit but hijacked sites
From TechWorld John E. Dunn The number of legitimate Websites being hacked to host malware has hit startling highs in recent days, new figures from MessageLabs have revealed. Data taken from the days between May 4 and 8 showed that 84.6 percent of Websites blocked by the company for hosting...
Adobe bitten by XSS bug it invented
Hundreds of thousand websites host vulnerable Adobe Flash files which can be exploited by malicious people to conduct convincing phishing and XSS attacks. In most cases, cookie hijacking is possible. Unsuspecting users can be redirected from trustworthy SSL and non-SSL sites to malware, adware an...
MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling
--------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.mrcgiguy.com MRCGIGU...
MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling
MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling ---------------------------------------------------------------...
MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln
Exploit for unknown platform in category web applications ====================================================== MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln ====================================================== --------------------------------------------------------------- MRCGIGUY T...
MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln
No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N...
Sql injection
SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
CVE-2008-6794
SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...
CVE-2008-6794
CVE-2008-6794 refers to a SQL injection vulnerability in the file directory.php of Scripts For Sites (SFS) EZ Pub Site. The vulnerability allows an attacker to execute arbitrary SQL commands through the cat parameter, enabling remote access to the database according to the NVD description. Relate...
Sql injection
SQL injection vulnerability in viewcomments.php in Scripts For Sites SFS EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter...
