Microsoft Windows - CreateWindow Function Callback (MS10-048)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Windows CreateWindow function callback vulnerability Advisory Id:...

Mozilla Releases Firefox 3.6.7

The Mozilla Foundation has released Firefox 3.6.7 and Firefox 3.5.11 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, bypass security restrictions, or conduct cross-site scripting attacks. Some of these...

Fedora 11 : Miro-2.5.4-2.fc11 / blam-1.8.5-18.fc11 / chmsee-1.0.1-15.fc11 / eclipse-3.4.2-20.fc11 / etc (2010-1936)

Update to new upstream Firefox version 3.5.8, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.8 Note that Tenable Network Security has extracted the preceding description block directly from the...

CVE-2010-2462

creationtimestamp| type| source ---|---|--- 2010-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13948...

Windows Live Messenger 14.0.8117.416 DoS

Exploit for windows platform in category dos / poc ======================================== Windows Live Messenger 14.0.8117.416 DoS ======================================== Software : Windows Live Messenger 14.0.8117.416 Found by : Mr Ha1 / Morad Quraan Date: May 20, 2010 Site :...

[CORE-2010-0405] Adobe Director Invalid Read

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Adobe Director DIRAPI.DLL Invalid Read Vulnerability 1. Advisory Information Title: Adobe Director DIRAPI.DLL Invalid Read Vulnerability Advisory Id: CORE-2010-0405...

Adobe Director DIRAPI.DLL Memory Corruption Vulnerability

Advisory ID Internal CORE-2010-0405 1. Advisory Information Title: Adobe Director DIRAPI.DLL Memory Corruption Vulnerability Advisory Id: CORE-2010-0405 Advisory URL:http://www.coresecurity.com/content/adobe-director-memory-corruption Date published: 2010-05-11 Date of last update: 2010-05-11...

Sun Java JRE Multiple Vulnerabilities - Linux

Sun Java Deployment Toolkit is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sun:jre";...

openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0140-1)

Oracle has released JRE 6 Update 20 in order to fix potential remote code execution vulnerabilities CVE-2010-0887. Please refer to Oracle's site for more information: http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010 -0886.html %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0140-1)

Oracle has released JRE 6 Update 20 in order to fix potential remote code execution vulnerabilities CVE-2010-0887. Please refer to Oracle's site for more information: http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010 -0886.html %NASLMINLEVEL 70300 C Tenable Network Security,...

Southern-Suzuki (Auth Bypass) Remote SQL Injection

================================================== Southern-Suzuki Auth Bypass Remote SQL Injection ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 ...

Openreglement 1.04 (RFI/LFI) Multiple File Include Vulnerability

================================================================ Openreglement 1.04 RFI/LFI Multiple File Include Vulnerability ================================================================ + Openreglement 1.04 RFI/LFI Multiple File Include Vulnerability...

v2marketplacescript Upload_images Script (-7777) - Arbitrary File Upload

v2marketplacescript Uploadimages Script -7777 - Arbitrary File Upload ====================================================================== Uploadimages Script -7777 Upload Shell Vulnerability ======================================================================...

Joomla Jnewspaper SQL Injection

/ ! Joomla comjnewspaper cid SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://indonesiancoder.com ! Date : Tue, April 20, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor : http://emultisoft.net Download :...

Southern-Suzuki SQL Injection

================================================== Southern-Suzuki Auth Bypass Remote SQL Injection ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

Unfixed XSS vulnerability at www.clanfantasy.es

Security researcher RME, has submitted on 20/04/2010 a cross-site-scripting XSS vulnerability affecting www.clanfantasy.es, which at the time of submission ranked 630606 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/06/2010. It is currentl...

TJX Hacker Gets 20-Year Jail Sentence

Hacker mastermind Albert Gonzalez was sentenced Thursday in U.S. District Court to two concurrent 20-year stints in prison for his role in what prosecutors called the “unparalleled” theft of millions of credit card numbers from major U.S. retailers. U.S. District Court Judge Patti B. Saris...

Internet Exploiter II v3.0 - MS05-20 DHTML memory corruption PoC Exploit

Exploit for unknown platform in category dos / poc ======================================================================== Internet Exploiter II v3.0 - MS05-20 DHTML memory corruption PoC Exploit ======================================================================== Internet Exploiter II versi...

openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-1993)

This update of php5 fixes: CVE-2008-5624: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P: Permissions, Privileges, and Access Control CWE-264 CVE-2008-5625: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P: Permissions, Privileges, and Access Control CWE-264 CVE-2008-5814: CVSS v2...

Chris Wysopal, Veracode

Chris was one of the first security researchers I met, in 2000, when he and the rest of the L0pht had just become part of @stake. I’ve probably interviewed him more often than anyone else on this list and he’s helped me with dozens of stories over the years. He always had five minutes to explain...