6772 matches found
freetextbox editor 0day and fix-vulnerability warning-the black bar safety net
By:kook Vulnerability Description: The All version didn't do login authentication can directly access to the upload Trojan FTBv3-3-1 can directly upload any file format Freetextbox 1.6.3 and other versions can be uploaded in the format 1. asp;. jpg file upload after the Trojan address as the...
Anti-injection program to get a shell and fix-vulnerability warning-the black bar safety net
When you use single quotes“’”to test a website there may be injection vulnerability in the address, assuming the URL is“www.xxxx/news.asp?id=6”pop“your operation has been recorded!” Such information, and we can't go to bypass anti-injection system, you can try to submit http://www. xxxx/sqlin. as...
Google's security tool infected with trojan !
It's pretty bold and a cunning coup; criminals have installed a trojan in the Android Market Security Tool that Google is distributing to delete the contaminated apps that recently popped up on the Android Market. As users have been told to expect to see the application running on their phones...
CVE-2011-0032
Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...
Design/Logic Flaw
Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure...
Design/Logic Flaw
Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...
CVE-2011-0032
CVE-2011-0032 is an Untrusted search path vulnerability in DirectShow loading DLLs from the current working directory, allowing local privilege escalation. Affected: Windows Vista SP1/SP2, Windows 7 (Gold/SP1), Windows Server 2008 R2/R2 SP1, and Windows Media Center TV Pack for Vista. Root cause:...
CVE-2011-0032
Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...
PT-2011-2029 · Microsoft · Directshow +5
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP1 and SP2 Microsoft Windows 7 Gold and SP1 Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows Media Center TV Pack for Windows Vista Description: The issue allows local users to gain privileges via a Troja...
Google Throws App Kill Switch On DroidDream
Google has announced plans to implement new security features in order to strengthen the defenses of the Android Market following the appearance of a Trojan horse, DroidDream, targeting devices running the company’s Android mobile operating system. In a post on Google’s official Android blog, Ric...
More than 150 French Government systems hacked !
The French Ministry of Finance was hit by an unprecedented cyber attack in December, with over 150 computers compromised, according to reports. Hackers got their hands on documents related to the current French presidency of the G20 and international economic affairs, Paris Match reported. Patric...
Android Market XSS Bug Allowed Code Execution on Mobile Devices
A simple, trivially exploitable persistent cross-site scripting bug on the Google Android Web Market allowed anyone to upload an app that could be used to later run arbitrary code on the user’s Android device. The vulnerability, which Google has patched, enabled an attacker to silently install hi...
SiteServer CMS system 0day-vulnerability warning-the black bar safety net
Detail: with the previous move is easy as registered member you can use xx. asp style registration. While we upload the attachments images also are in accordance with our member name to store. Then the tragedy of 0day is produced. The use of an IIS parsing properties! Use way: The first to enter...
Trojan & Botnet Activities Increased in February-March !
Trojans were the most prolific malware threat in February-March, and collaboration seems to be the name of the game in malware development and distribution. Trojan-based attacks continue to be the biggest malware threat in February, but PDF exploits aren't far behind, according to several securit...
Four Face Jail Time for Ghost Market Crime Forum
Two U.K. teens and twenty-somethings received a collective prison sentence of fifteen years after administering the Ghost Market criminal forum, a meeting place and a classroom where nefarious individuals found anything from banking malware to methamphetamine recipes. Gary Paul Kelly, an unemploy...
Malware Piggybacks On Anti-Phishing Software
Malware authors have discovered a shortcut to create a Trojan horse program: using components from an anti-phishing product from China-based Zhuhai Kingsoft Software. Symantec researcher Poul Jensen wrote about the malware on that company’s Connect blog on Wednesday. The Trojan package...
Analysis Shows DroidDream Trojan Designed for Future Monetization
A detailed analysis of the DroidDream Trojan that was found in dozens of apps in the Android Market this week shows that the malware has a modular construction that likely was designed to give attackers the ability to monetize infected devices through installations of adware or spyware. The Troja...
New banking trojan capable of hijacking the SSL connections !
Security researchers from Symantec warn of a new banking trojan capable of hijacking the SSL connections between browsers and online banking sites in a way that is hard to spot. Variants of this malware, which Symantec detects as Trojan.Tatanarg, have been in circulation since last October, but i...
BlackHole RAT : Mac OS X backdoor Trojan !
'BlackHole' is the latest remote administration tool RAT and is available both in Windows and Mac. Hacktool such RAT employs client-server program that communicates to its victim's machine through its trojan server. The server application is installed on the victim while the client application is...