3457 matches found
Major Spam Network Fined Over $15 Million
A U.S. district court judge has ordered the largest “spam gang” in the world to pay nearly $15.2 million for sending unsolicited e-mail messages marketing male-enhancement pills, prescription drugs, and weight-loss supplements, according to the U.S. Federal Trade Commission. Read the full article...
SAP AG SAPgui EAI WebViewer3D Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SAP AG SAPgui EAI...
K-Meleon 1.5.3 Remote Array Overrun
No description provided by source. From Full Disclosure: http://seclists.org/fulldisclosure/2009/Nov/222 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 K-Meleon 1.5.3 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.:...
KDE KDELibs 4.3.3 - Remote Array Overrun
KDE KDELibs 4.3.3 - Remote Array Overrun -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE KDELibs 4.3.3 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689 Risk: High...
Unfixed XSS vulnerability at www.sportsman-et.co.uk
Security researcher Attackers US, has submitted on 18/11/2009 a cross-site-scripting XSS vulnerability affecting www.sportsman-et.co.uk, which at the time of submission ranked 14607357 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010...
FBI Reports Malware on Rise in Electronic Funds Fraud
The FBI reports it has seen a rise of malware over the past few months targeting small and medium businesses and municipal government entities and school districts. Once a malicious attachment or link is opened, keylogging tactics obtain bank account info where criminals then initiate wire...
DHS Set to Announce Cyber Merger
In what could mark a major improvement to the nation’s ability to defend itself against cyber threats, the Department of Homeland Security will announce Friday that the US Computer Emergency Readiness Team will merge with the National Coordinating Center for Telecommunications. The two groups — n...
US-CERT Warns About Free BlackBerry Spyware App
The U.S. Computer Emergency Readiness Team warned BlackBerry users on Tuesday about a new program called PhoneSnoop that allows someone to remotely eavesdrop on phone conversations. The PhoneSnoop application must be installed on the phone by someone who has physical access to it or by tricking t...
Wyse Rapport Hagent Fake Hserver Command Execution
$Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'timeout...
Adobe Reader FlateDecode filter TIFF Predictor integer overflow
Added: 10/27/2009 CVE: CVE-2009-3459 BID: 36600 OSVDB: 58729 Background Adobe Reader is free software for viewing PDF documents. Problem An integer overflow in the FlateDecode filter in Adobe Reader allows command execution when a user opens a PDF file containing specially crafted compressed...
Exploit Code Published for New Microsoft IIS FTP Flaw
There is exploit code circulating for a newly discovered vulnerability in the FTP service of Microsoft IIS, a flaw which could enable an attacker to run his own code on a remote server. The flaw mainly affects older versions of IIS, Microsoft’s Web server product, but the existence of a working...
Oracle Document Capture 10g ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in Oracle Document Capture 10g 10.1.3.5.0. Oracle Document Capture 10g comes bundled with a third party ActiveX control emsmtp.dll 6.0.1.0. When passing an overly long string to the method "SubmitToExpress" an attacker may be able to execute arbitrary...
Three Indicted For Hack Attacks on Heartland, Hannaford
A Miami man and two Russians have been indicted usdoj.gov by a grand jury in New Jersey on charges of conspiring to commit some of the largest data breaches in U.S. history. Albert Gonzalez, 28, and the two still-unnamed Russian citizens are charged with running an international scheme to steal...
Obama is Failing the Cybersecurity Test
That giant sucking sound you hear is the steady stream of talented security people and experienced policy makers getting out of Washington as quickly as possible as the Obama administration continues to be paralyzed by indecision and a lack of direction regarding cybersecurity. The latest chapter...
US-CERT Technical Cyber Security Alert TA09-204A -- Adobe Flash Vulnerability Affects Flash Player and Other Adobe Products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-204A Adobe Flash Vulnerability Affects Flash Player and Other Adobe Products Original release date: July 23, 2009 Last revised: -- Source: US-CERT Systems Affected Adobe Flash Player...
Wyse Rapport Hagent Fake Hserver Command Execution
No description provided by source. $Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Wyse Rapport Hagent Fake Hserver - Command Execution (Metasploit)
$Id: hagentuntrustedhsdata.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
MyDoom DDoS Attacks Likely Work of Unsophisticated Attackers
The ongoing DDoS attacks that have been targeting a series of U.S. government sites as well as some commercial sites is likely not the work of any government organization and is being executed by an old piece of malware that is designed to ruin files on infected PCs rather than steal data, expert...
US-CERT Technical Cyber Security Alert TA09-187A -- Microsoft Video ActiveX Control Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-187A Microsoft Video ActiveX Control Vulnerability Original release date: July 06, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows XP Microsoft Windows Server 200...
