Stay ahead of Web 2.0 worms
121116
XSS marks the spot Think you've protected your web applications from cross-site scripting (XSS) vulnerabilities? The odds are against you. Roughly 90 per cent of web applications have this problem, and it's getting worse as web applications and web services share more and more data.â¦
545244
Hacking Web 2.0 Applications with Firefox &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
24644
The Santy worm with variants continues spreading on the Internet taking advantage of search engines, including Google, AOL, Yahoo to identify exploitable Web pages.
316177
An attack combining malicious codes on Web sites and end-user laziness could compromise millions of routers still configured with their out-of-the-box defaults.
369121
Please be aware as there&#39;s a new virus worm spreading on the net. The Zafi.D variant is a Christmas wish e-mail together with a .
337070
A new worm can spy on users by hijacking their Web cameras, a security firm warned Monday. The Rbot.gr worm -- the latest in a long line of similar worms; one security firm estimates that more
52789
The flaw exploited by the most recent versions of the worm such as Santy.C or Santy.E is more general than the original, and can occur anywhere a site designer has left the door open for the inclusion of arbitrary files into PHP scripts, reports IDG News
513309
News.com reports that a web worm named Santy is utilizing Google to help it spread to web bulletin boards using the PHP scripting language.
534160
A new variant of the MyDoom worm that exploits an unpatched flaw in Microsoftâs Internet Explorer browser has emerged to threaten small business and home users in particular, security experts warned this week.
237354
The worm, dubbed Santy, exploits a vulnerability in third-party web servers that use phpBB bulletin board software, a popular package used to create web forums, and has been propagating at a rapid pace, infecting some 38,000 sites in a matter of hours.
469986
The Bagle worm shifts shape to outsmart antivirus software. Plus: Media player patches and Feds' fraud crackdown.
538641
Worried about catching viruses, spyware, or other malicious software while surfing the Web?
192196
bug text As worms proliferated through the first half of the year, attacks gained in sophistication. Also: A start-up fights zombies.
83482
Let the hacking begin Think you have a gift for writing compact code that replicates using one of the web's most vexing classes of security vulnerabilities? Then Security researcher RSnake (aka Robert Hansen) would like to hear from you. He has set up a contest to see who can write a self-propagating cross-site scripting (XSS) worm using the fewest number of characters.â¦
187566
Infected computers can be used as &quot;zombies&quot; to send spam or launch attacks on Web sites. Spreading Trojans via chat rooms is not unusual.
285360
Blog: Researcher shows how URLs can be spoofed and content arbitrary within Safari 3.0 beta.
466917
This third and final article in the Metasploit series covers the msfcli scripting interface as well as the intuitive web interface to the Framework. The article also discusses what's new with version 2.2, and then introduces the exploit development process through an example.