417 matches found
Websense 7.6 Products - favorites.exe Authentication Bypass
Websense 7.6 Products - favorites.exe Authentication Bypass source: https://www.securityfocus.com/bid/51087/info Multiple Websense products are prone to an authentication-bypass vulnerability. Remote attackers can exploit this issue to bypass the authentication mechanism and gain unauthorized...
Websense 7.6 Triton - ws_irpt.exe Remote Command Execution
Websense 7.6 Triton - wsirpt.exe Remote Command Execution source: https://www.securityfocus.com/bid/51086/info Websense Triton is prone to a remote command-execution vulnerability. An attacker can exploit this issue to execute arbitrary commands with SYSTEM-level privileges. Successfully exploiti...
Websense 7.6 - Triton Report Management Interface Cross-Site Scripting
source: https://www.securityfocus.com/bid/51085/info Websense Triton is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...
Websense 7.6 Products - 'favorites.exe' Authentication Bypass
source: https://www.securityfocus.com/bid/51087/info Multiple Websense products are prone to an authentication-bypass vulnerability. Remote attackers can exploit this issue to bypass the authentication mechanism and gain unauthorized access. The following Websense products are affected: Websense...
Websense 7.6 Triton - 'ws_irpt.exe' Remote Command Execution
source: https://www.securityfocus.com/bid/51086/info Websense Triton is prone to a remote command-execution vulnerability. An attacker can exploit this issue to execute arbitrary commands with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of...
Facebook content restrictions bypass Vulnerability
Facebook content restrictions bypass Vulnerability Blackhat Academy claims to have found a way to bypass content restrictions on links, as posted on their site and posts put on a user's public wall. Even Security Analysts claim that Facebook was notified of these vulnerabilities on July 31st, 201...
Facebook content restrictions bypass Vulnerability
Facebook content restrictions bypass Vulnerability Blackhat Academy claims to have found a way to bypass content restrictions on links, as posted on their site and posts put on a user's public wall. Even Security Analysts claim that Facebook was notified of these vulnerabilities on July 31st, 201...
Facebook and Websense Team Up to Fight Malicious Linking
Facebook, a wildly popular social media platform you may or may not have heard of has partnered with the security firm, Websense, in order to better protect the network’s some 800 million users from malicious links leading to websites hosting malware. In the near future, according to a post on th...
How Spammy Facebook Scams Still Manage to Claim Millions of Victims
As Facebook scams continue to loom and infiltrate news feeds, web security firm Websense has conducted a study to tabulate just how far these campaigns stretch. The news isn’t encouraging, with scams on Facebook estimated to reach more than a million users in a matter of days. According to a...
Image of the Day: SEO Poisoning
Today’s Image of the Day comes from web security firm Imperva, who’ve crafted an infographic to accompany their monthly Hacker Intelligence Initiative report on search engine poisoning SEP. We’ve seen before how attackers continue to poison SEO to thwart search engine algorithms. To increase thei...
Fake Apple Store Emails Redirect to New WikiPharmacy
Fake Apple Store order notification emails floating around the Web right now are redirecting to a new site pushing the same old familiar list of discount read: fake pharmaceuticals. Similar scams have been going on for months now. They typically redirect to a relatively familiar pharmacy page...
"Real" Osama bin Laden Death Photos? Yeah, They're Fake, Too.
You’ve heard about the tidal wave of spam e-mail and scammy Web links that followed the killing of Osama bin Laden by U.S. Special Forces on Sunday. But what about the latest round of e-mails offering death photos of the slain terrorist leader? Well, turns out they’re fake, also. Security firm...
New Cheap Toolkit Makes Anyone a Facebook App Developer
New cheap toolkits give amateur developers the ability to create their own viral Facebook applications, something that’s become a favorite activity of attackers in recent months. One example of a malicious Facebook application that could have easily been created using this toolkit is the ‘Faceboo...
Attack Knocks Mail and Guardian Web Site Offline
The Web site of The Mail & Guardian, a leading news outlet in South Africa, was off line on Wednesday after what the paper claims were “sustained attacks” by hackers, reportedly based in Russia. The paper pulled down its Web site, which had begun hosting malicious content and posted a message...
Spam Volume Recovers After Holiday Break
The amount of spam hitting users’ inboxes fell off a cliff in late December, with many security experts attributing the decline to the sudden disappearance of the Rustock botnet and other networks from the spam business. But the level of spam has begun to gain back some of the ground it lost toda...
New Google service could be a godsend to scammers !
The Instant Previews service that Google launched last week allows users to click on the magnifying glass icon next to a result's title or on its background in order to see a preview of that result. There is no doubt that this feature is very helpful when it comes to skimming through legitimate...
Amnesty International Site Found Hosting Malware, IE Zero Day
Researchers at security firm Websense have found that Amnesty International’s Hong Kong site, amnesty.org.hk, is serving up a cocktail of malware that includes last week’s Internet Explorer 0-day. Visitors to the human rights organization’s site operating versions 6 and 7 of IE are being targeted...
Websense Enterprise 6.3.3 Via: Bypass Still Exists
discovered by mrhinkydink PRODUCT: Websense Enterprise EXPOSURE: Trivial Web Policy Bypass III LINK: http://mrhinkydink.blogspot.com/2010/08/websenseisa-via-bypass-redux.html SYNOPSIS ======== On May 29, 2010 I demonstrated that by adding a "Via:" header to an HTTP request it is possible for a us...
New Trojan Disguised as Windows IME
There’s a new attack technique in use right now that enables attackers to inject Trojan code onto victims’ machines by disguising it as a Windows input method editor IME. The technique is a twist on the classic attack vector of making malicious code look like something benign. In this case, the...
Online Ad Site Hacked, Rigged to Serve Exploits
A high-profile online advertising Web site has been hacked and rigged to serve multiple exploits to Microsoft Windows users surfing the net with unpatched third party desktop software. According to a warning issued by Websense Security Labs, the malicious code was found on media-servers.net, whic...