The history of a -probably- 13 years old Oracle bug: TNS Poison

tl;dr - Patch your database ASAP with Oracle Critical Patch Update April 2012. Introduction ------------ The following advisory explains a vulnerability I found in 2008 in all versions of Oracle Database server until very recently. The bug is probably available in any Oracle Database version sinc...

Microsoft Partner Service - Persistent Web Vulnerability

Document Title: =============== Microsoft Partner Service - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=433 http://www.vulnerability-lab.com/getcontent.php?id=439 MSRC ID: 12209nj Release Date: ============= 2012-04-13...

Pakyu Cenloder Microsoft Remote Desktop Denial Of Service

Exploit for windows platform in category dos / poc Exploit Title: Pakyu Cenloder Date: March 16 2012 Author: BMario Application Link: Microsoft Terminal Services / Remote Desktop Services http://msdn.microsoft.com/en-us/library/aa383015v=vs.85.aspx Version: any Windows version before 13 Mar 2012...

FreeFloat FTP Server TEST Buffer Overflow (MSF)

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'FreeFloat FTP Server TEST Buffer Overflow', 'Description' = %q This module exploits a FreeFloat FTP Server Buffer Overflow found in the TEST command. , 'Author' = 'KaHPeSeSe' Found bug and wrote the...

MS12-020: Description of the security update for Terminal Server Denial of Service Vulnerability: March 13, 2012

None None...

CVE-2012-0943

creationtimestamp| type| source ---|---|--- 2012-03-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36966...

CVE-2012-1210

creationtimestamp| type| source ---|---|--- 2012-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36766...

Gentoo Security Advisory GLSA 201201-13 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 201201-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201110-13 (Tor)

The remote host is missing updates announced in advisory GLSA 201110-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Unfixed XSS vulnerability at gogolinks.free.fr

Security researcher Atmon3r, has submitted on 13/01/2012 a cross-site-scripting XSS vulnerability affecting gogolinks.free.fr, which at the time of submission ranked 17371582 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at www.parcjeandrapeau.com

Security researcher strepo, has submitted on 30/12/2011 a cross-site-scripting XSS vulnerability affecting www.parcjeandrapeau.com, which at the time of submission ranked 1440835 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

MS11-089: Description of the security update for Visio 2010: December 13, 2011

Describes the security update for Microsoft Visio 2010 that was released on December 13, 2011.INTRODUCTIONMicrosoft has released security bulletin MS11-089. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Unfixed XSS vulnerability at www.webrankinfo.com

Security researcher Atmon3r, has submitted on 13/12/2011 a cross-site-scripting XSS vulnerability affecting www.webrankinfo.com, which at the time of submission ranked 2141 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

Unfixed XSS vulnerability at www.manchesterproducts.com

Security researcher Atmon3r, has submitted on 13/12/2011 a cross-site-scripting XSS vulnerability affecting www.manchesterproducts.com, which at the time of submission ranked 4577051 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2012. I...

Unfixed XSS vulnerability at www-evasion.imag.fr

Security researcher Atmon3r, has submitted on 13/12/2011 a cross-site-scripting XSS vulnerability affecting www-evasion.imag.fr, which at the time of submission ranked 95283 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

MS11-095: Vulnerability in Active Directory could allow remote code execution: December 13, 2011

Resolves a vulnerability in Active Directory that could allow remote code execution.INTRODUCTIONMicrosoft has released security bulletin MS11-095. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Iron Mountain Connected Backup Opcode 13 Processing Command Injection

Added: 12/12/2011 CVE: CVE-2011-2397 BID: 50884 OSVDB: 77495 Background Iron Mountain Connected Backup is a solution for automatic online backup and recovery for Microsoft Windows and Mac OS X. An agent is installed on each computer that is to be backed up. The agent listens by default on TCP por...

Iron Mountain Connected Backup Opcode 13 Processing Command Injection

Added: 12/12/2011 CVE: CVE-2011-2397 BID: 50884 OSVDB: 77495 Background Iron Mountain Connected Backup is a solution for automatic online backup and recovery for Microsoft Windows and Mac OS X. An agent is installed on each computer that is to be backed up. The agent listens by default on TCP por...

Zeema CMS Cross Site Scripting / SQL Injection

Hello list! I want to warn you about Cross-Site Scripting, SQL Injection and Information Leakage vulnerabilities in Zeema CMS. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are all versions of Zeema CMS. ---------- Details:...

Design/Logic Flaw

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method...