Dental Practice Loses $200K to Criminals

Organized computer criminals yanked more than $200,000 out of the online bank accounts of a Missouri dental practice this month, in yet another attack that exposes the financial risks that small- to mid-sized organizations face when banking online. Read the full article. KrebsonSecurity...

CVE-2010-0104

The CVE affects Broadcom NetXtreme/Integrated NIC Management Firmware on HP Small Form Factor and Microtower PCs. Vulnerable firmware versions are Broadcom Broadcom Integrated NIC Management Firmware before 1.40.0.0 and before 8.08 (i.e., 1.x pre-1.40.0.0 and 8.x pre-8.08). The issue allows remot...

Banking Losses for Small Biz Blowing Up

Most small business owners have no clue about the threats they face or the liability they assume when banking online, even as the frequency and sophistication of attacks appears to be increasing. Read the full article. KrebsonSecurity...

Online Banking Crime By The Numbers

Organized cyber criminals stole more than $25 million from small to mid-sized businesses in brazen e-banking heists in the 3rd quarter of 2009 alone, federal regulators said last week. Read the full article. KrebsonSecurity...

GZip 'huft_build()' in 'inflate.c' Input Validation Vulnerability (Linux)

This host is installed with GZip and is prone to Input Validation Vulnerability OpenVAS Vulnerability Test $Id: gbgzipinflatedosvulnlin.nasl 6664 2017-07-11 10:20:11Z cfischer $ GZip 'huftbuild' in 'inflate.c' Input Validation Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2010...

Small Biz Targeted by Banking Criminals

The American Bankers Association and the FBI are advising small and midsize businesses that conduct financial transactions over the Internet to dedicate a separate PC used exclusively for online banking as they ahve become targets of banking malware. Read the full article. The Last Watchdog...

B2B eCommerce SQL Injection

B2B ecommerce for small business factoring Url| http://www.example.com/buyoffers.php?pg=2&cid=sql injection Union Columns = 8 google : inurl:buyoffers.php? / hakerzy ze szkocji ; ------------------------------ ---- DUNDEE ----- POLISH ----- ------------------------------ MoJaCiPkA4 / majki --...

Panda Products Version Detection

This script finds the installed Panda Products. The script logs in via smb, searches for Panda Global Protection, Panda Internet Security and Panda Antivirus in the registry and gets the version from registry SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from...

Ipswitch WhatsUp Small Business Application Suite Directory Traversal (CVE-2005-1939)

The Ipswitch WhatsUp Small Business product is an application suite which provides monitoring and protection services for a small network. The program allows a network to be mapped, devices monitored, and failures to be detected. A directory traversal vulnerability exists in the Ipswitch Whatsup...

Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection

Exploit for unknown platform in category web applications =================================================================== Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection =================================================================== Exploit: XSS & Html code injection ...

Micronet SP1910 Data Access Controller UI - Cross-Site Scripting / HTML Code Injection

Exploit: XSS & Html code injection in Micronet SP1910 data access controller UI Date: 27-11-2009 Author: K053 Vendor: http://www.micronet.info/modeldetail.aspx?seriesno=6&sno=472 Tested on : Private Networks ------------------------------------------------------------------------------------ Note...

FBI Reports Malware on Rise in Electronic Funds Fraud

The FBI reports it has seen a rise of malware over the past few months targeting small and medium businesses and municipal government entities and school districts. Once a malicious attachment or link is opened, keylogging tactics obtain bank account info where criminals then initiate wire...

Internet Phone Systems Become Fraudster's Tool

Cybercriminals have found a new launching pad for their scams: the phone systems of small and medium-sized businesses across the U.S. In recent weeks, they have hacked into dozens of telephone systems across the country, using them as a way to contact unsuspecting bank customers and trick them in...

[SECURITY] Fedora 11 Update: dnsmasq-2.46-3.fc11

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

SMBs, Non-Profits New Targets of Choice for Attackers

Large enterprises and consumers have been dealing with sophisticated phishing scams, online extortion plots and other assorted theft schemes for years, but now attackers are turning their attention to the huge population of small businesses and non-profits in the U.S. And they are finding a gold...

Cybercriminals Riding Money Mules in Online Bank Robberies

Over on the Washington Post’s SecurityFix blog, Brian Krebs has been doing a phenomenal job highlighting the online bank robberies — using malware — against small businesses in the United States. The latest installment, which looks at the role of “money mules” in the cybercrime operation is...

Code injection

Unspecified vulnerability in Small Footprint CIM Broker SFCB before 1.2.5 has unknown impact and attack vectors...

CVE-2008-7230

Unspecified vulnerability in Small Footprint CIM Broker SFCB before 1.2.5 has unknown impact and attack vectors...

CVE-2008-7230

Unspecified vulnerability in Small Footprint CIM Broker SFCB before 1.2.5 has unknown impact and attack vectors...

PT-2009-4385 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 Description: A denial of service issue exists due to an error in TCP/IP processing when handling specially crafted...