http://www.netdisaster.com/desktop/index.html
So what this very harmless program did was allow you to mess with a website only in your own browser.It actually did nothing what so ever to the actual website.
It was a really fun cool program.
But it looks like some nut jobs didn't understand that it actually harmed nothing at all and got it shut down...
***
Now this on the other hand is a threat to websites:
A security flaw discovered in a common PHP class allows knowledgeable attackers to execute code on a website that uses a vulnerable version of the script, which in turn can allow an attacker to take control over the underlying server.The vulnerable library is PHPMailer, a PHP script that allows developers to automate the task of sending emails using PHP code, also included with WordPress, Drupal, Joomla, and more.
The vulnerability was fixed on Christmas with the release of PHPMailer version 5.2.18.
Nevertheless, despite the presence of a patched version, it will take some time for the security update to propagate.
Judging by past incidents, millions of sites will never be updated, leaving a large chunk of the Internet open to attacks.
Even though the security researcher who discovered the flaw didn't publish any in-depth details about his findings, someone reverse-engineered the PHPMailer patch and published their own exploit code online, allowing others to automate attacks using this flaw, which is largely still unpatched due to the holiday season.
***
No comments:
Post a Comment