Date Author Title
2024-07-25Xavier MertensXWorm Hidden With Process Hollowing
2024-04-29Johannes UllrichD-Link NAS Device Backdoor Abused
2023-11-09Xavier MertensVisual Examples of Code Injection
2022-09-14Xavier MertensEasy Process Injection within Python
2022-02-10Johannes UllrichZyxel Network Storage Devices Hunted By Mirai Variant
2022-01-20Xavier MertensRedLine Stealer Delivered Through FTP
2021-12-21Xavier MertensMore Undetected PowerShell Dropper
2021-12-10Xavier MertensPython Shellcode Injection From JSON Data
2021-11-20Guy BruneauHikvision Security Cameras Potentially Exposed to Remote Code Execution
2021-07-06Xavier MertensPython DLL Injection Check
2021-06-12Guy BruneauFortinet Targeted for Unpatched SSL VPN Discovery Activity
2021-04-29Xavier MertensFrom Python to .Net
2021-02-13Guy BruneauvSphere Replication updates address a command injection vulnerability (CVE-2021-21976) - https://www.vmware.com/security/advisories/VMSA-2021-0001.html
2020-11-19Xavier MertensPowerShell Dropper Delivering Formbook
2020-09-24Xavier MertensParty in Ibiza with PowerShell
2020-08-28Xavier MertensExample of Malicious DLL Injected in PowerShell
2020-07-30Johannes UllrichPython Developers: Prepare!!!
2018-09-28Xavier MertensMore Excel DDE Code Injection
2018-09-05Xavier MertensMalicious PowerShell Compiling C# Code on the Fly
2017-05-05Xavier MertensHTTP Headers... the Achilles' heel of many applications
2016-02-15Bojan ZdrnjaExploiting (pretty) blind SQL injections
2013-10-19Johannes UllrichYet Another WHMCS SQL Injection Exploit
2013-07-16Johannes UllrichWhy don't we see more examples of web app attacks via POST?
2013-02-17Guy BruneauHP ArcSight Connector Appliance and Logger Vulnerabilities
2013-01-25Johannes UllrichVulnerability Scans via Search Engines (Request for Logs)
2013-01-09Rob VandenBrinkSQL Injection Flaw in Ruby on Rails
2012-10-05Richard PorterReports of a Distributed Injection Scan
2012-07-31Daniel WesemannSQL injection, lilupophilupop-style
2011-12-01Mark HofmanSQL Injection Attack happening ATM
2011-06-06Johannes UllrichThe Havij SQL Injection Tool
2011-04-19Bojan ZdrnjaSQL injection: why can’t we learn?
2011-04-01John BambenekLizaMoon Mass SQL-Injection Attack Infected at least 500k Websites
2010-12-02Kevin JohnsonSQL Injection: Wordpress 3.0.2 released
2010-08-15Manuel Humberto Santander PelaezObfuscated SQL Injection attacks
2010-06-09Deborah HaleMass Infection of IIS/ASP Sites
2010-02-06Guy BruneauLANDesk Management Gateway Vulnerability
2009-07-16Bojan ZdrnjaOWC exploits used in SQL injection attacks
2009-05-19Bojan ZdrnjaAdvanced blind SQL injection (with Oracle examples)
2009-05-09Patrick NolanShared SQL Injection Lessons Learned blog item
2009-04-21Bojan ZdrnjaWeb application vulnerabilities
2009-02-11Robert DanfordProFTPd SQL Authentication Vulnerability exploit activity
2008-12-12Johannes UllrichMSIE 0-day Spreading Via SQL Injection
2008-12-01Jason LamInput filtering and escaping in SQL injection mitigation
2008-11-20Jason LamLarge quantity SQL Injection mitigation
2008-09-29Daniel WesemannASPROX mutant
2008-09-01John BambenekThe Number of Machines Controlled by Botnets Has Jumped 4x in Last 3 Months
2008-08-23Mark HofmanSQL injections - an update
2008-08-08Mark HofmanMore SQL Injections - very active right now
2008-07-24Bojan ZdrnjaWhat's brewing in Danmec's pot?
2008-06-30Marcus SachsMore SQL Injection with Fast Flux hosting
2008-06-24Jason LamSQL Injection mitigation in ASP
2008-06-24Jason LamMicrosoft SQL Injection Prevention Strategy
2008-06-23donald smithPreventing SQL injection
2008-06-13Johannes UllrichSQL Injection: More of the same
2008-05-20Raul SilesList of malicious domains inserted through SQL injection
2008-04-24donald smithHundreds of thousands of SQL injections
2008-04-16Bojan ZdrnjaThe 10.000 web sites infection mystery solved
2008-03-14Kevin Liston2117966.net-- mass iframe injection
2008-01-09Bojan ZdrnjaMass exploits with SQL Injection
2007-02-24Jason LamPrepared Statements and SQL injections