CVE-2012-5329

creationtimestamp| type| source ---|---|--- 2012-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36972...

Java Runtime Environment MixerSequence Function Pointer Control

Added: 02/28/2012 CVE: CVE-2010-0842 BID: 39077 OSVDB: 63493 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java...

Java Runtime Environment MixerSequence Function Pointer Control

Added: 02/28/2012 CVE: CVE-2010-0842 BID: 39077 OSVDB: 63493 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java...

Gentoo Security Advisory GLSA 201201-19 (acroread)

The remote host is missing updates announced in advisory GLSA 201201-19. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

VideoLAN VLC Media Player 1.2.0 - 'libtaglib_pluggin.dll' Denial of Service

import binascii print '\n\n' print '' print ' VLC libtaglibplugin.dll divide by zero DOS ' print ' Tested on : Windows 7 and XP sp3 ' print ' VLC verion : 1.2.0 and 1.1.11 possibly lower ' print ' Author : nomnom ' print ' Date : 1/19/2012 ' print ' - shouts to disable, jtm, welder and the csg '...

VLC 1.2.0 (libtaglib_pluggin.dll) DoS

Exploit for windows platform in category dos / poc import binascii print '\n\n' print '' print ' VLC libtaglibplugin.dll divide by zero DOS ' print ' Tested on : Windows 7 and XP sp3 ' print ' VLC verion : 1.2.0 and 1.1.11 possibly lower ' print ' Author : nomnom ' print ' Date : 1/19/2012 ' prin...

General Electric D20 Password Recovery

The General Electric D20ME and possibly other units D200? feature TFTP readable configurations with plaintext passwords. This module retrieves the username, password, and authentication level list. Module Options msf use auxiliary/gather/d20pass msf undefinedd20pass show actions ...actions... msf...

Saudi hacker target Israeli stock exchange and National air carrier

Saudi hacker target Israeli stock exchange and National air carrier Saudi cyber Hacker OxOmar struck again on Monday. This time disrupted the websites of Israel's stock exchange and National air carrier. Last week he had leaked private information about more than 400,000 Israelis. Credit card...

Fedora 15 : phpMyAdmin-3.4.9-1.fc15 (2011-17370)

Changes 3.4.9.0 2011-12-21 : - edit Inline editing enum fields with null shows no dropdown - interface DB suggestion not correct for user with underscore - core Magic quotes removed in PHP 5.4 - session No feedback when result is empty signon authtype - display Problems regarding ShowTooltipAlias...

XSS in setup.

PMASA-2011-19 Announcement-ID: PMASA-2011-19 Date: 2011-12-21 Summary XSS in setup. Description Crafted values entered in the setup interface can produce XSS; also, if the config directory exists and is writeable, the XSS payload can be saved to this directory. Severity We consider this...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7596)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

Zeema CMS Cross Site Scripting / SQL Injection

Hello list! I want to warn you about Cross-Site Scripting, SQL Injection and Information Leakage vulnerabilities in Zeema CMS. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are all versions of Zeema CMS. ---------- Details:...

Vulnerabilities in EViews 7.2

Luigi Auriemma Application: EViews http://www.eviews.com Versions: = 7.0.0.1 aka 7.2 Platforms: Windows Bugs: A memory corruption B heap overflow Exploitation: file Date: 19 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bugs 3 The Code 4 Fix...

AWStats 7.0 / 6.0 SQL Injection / Cross Site Scripting / CRLF Injection

Hello list! I want to warn you about multiple security vulnerabilities in AWStats. These are Cross-Site Scripting, Redirector, SQL Injection, HTTP Response Splitting and CRLF Injection vulnerabilities in AWStats in awredir. ------------------------- Affected products: -------------------------...

IBM WebSphere Application Server 7.0 < Fix Pack 19 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 19 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An open redirect vulnerability exists related to the 'logoutExitPage' parameter. This can allow remote attackers to trick user...

freetype security update

2.1.9-19.el4 - Add freetype-2.1.9-CVE-2011-2895.patch Prevent stackp to overflow. - Resolves: 729317...

#DefCon 19 : Presentations from the Defcon Conference for Download

DefCon 19 : Presentations from the Defcon Conference for Download Defcon 19 presentations available for download, Go check out the presentations from this year's defcon conference here: For folks that don't have time to click: curl -silent https://good.net/dl/k4r3lj/DEFCON19/ | grep -i 'pdf' | cu...

#DefCon 19 : Presentations from the Defcon Conference for Download

DefCon 19 : Presentations from the Defcon Conference for Download Defcon 19 presentations available for download, Go check out the presentations from this year's defcon conference here: https://good.net/dl/k4r3lj/DEFCON19/ For folks that don't have time to click: curl -silent...

Oracle, other companies hacked by Social Engineering attack in #DefCon 19

Oracle, other companies hacked by Social Engineering attack in DefCon 19 A weekend contest from 4th August to 7th August , at the world's largest hacking convention in Las Vegas showed one reason why big corporations seem to be such easy prey for cyber criminals : their workers are poorly trained...

Moshi Moshi : VoIP bot written in Python

Moshi Moshi : VoIP bot written in Python Moshi Moshi is a VoIP Bot written in Python that uses SIP as VoIP Protocol, Text-to-speech engines for Output, and DTMF Tones for Input. It is part of a talk "Sounds Like Botnet " given at DEF CON 19 and BSidesLV 2011 on VoIP Botnets by Itzik Kotler and...