Vulnerabilities

Sun Solaris
(more…)

Vulnerabilities
php - tempnam() open_basedir bypass PHP 4.4.2 and 5.1.2: details
(more…)

Vulnerabilities
XSS in “phpinfo()”: details
(more…)

Vulnerabilities
Linux Kernel: Update to 2.14.1/2.4.32-pre1; CVE-2005-3275

Two articles from Tallahassee[1] [2] and one from Netcraft, show that 3 different websites from online banks are vulnerable to XSS.
(more…)

(more…)

We’ve just seen a new trojan come up. The various virus databases failed to pick it up (well, the dozen or so that we tried it with), with the exception of BitDefender which picked it up via heuristic detection. The Social Engineering component is quite good - as shown below. Who would expect a virus from HMRC.
(more…)

Phishing, scamming and cross-site scripting (XSS) attacks were first used to steal passwords from web-based mail and banking resources.
And from the beginnings of small offences, a new generation of hackers have appeared to trick people to steal money. Launched on bigger scales each time, profits are gaining.
(more…)

Yesterday, we came across the PHP/Apache XSS disclosure: blog.phpdoc.info
(more…)

Phew. We’re currently seeing a relatively large number of new brepibot variants arriving - a new one about every hour. Somebody is being busy.
(more…)