openlookup-info NSE Script

Parses and displays the banner information of an OpenLookup network key-value store server. Example Usage nmap -p 5850 --script openlookup-info Script Output 5850/tcp open openlookup | openlookup-info: | sync port: 5850 | name: Paradise, Arizona | your address: 127.0.0.1:50162 | timestamp:...

Unfixed XSS vulnerability at www.endallforeclosures.com

Security researcher Hood3dRob1n, has submitted on 21/09/2011 a cross-site-scripting XSS vulnerability affecting www.endallforeclosures.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It ...

Adobe Reader < 10.1.1 / 9.4.6 / 8.3.1 Multiple Vulnerabilities (APSB11-21, APSB11-24)

The version of Adobe Reader installed on the remote Windows host is earlier than 10.1.1 / 9.4.6 / 8.3.1. It is, therefore, potentially affected by the following vulnerabilities : - An unspecified error exists that allows local privilege escalation attacks. CVE-2011-1353 - An unspecified error...

Adobe Acrobat < 10.1.1 / 9.4.6 / 8.3.1 Multiple Vulnerabilities (APSB11-21, APSB11-24)

The version of Adobe Acrobat installed on the remote host is earlier than 10.1.1 / 9.4.6 / 8.3.1. It is, therefore, potentially affected by the following vulnerabilities : - An unspecified error exists that can allow an attacker to bypass security leading to code execution. CVE-2011-2431 - Severa...

Adobe Reader < 10.1.1 / 9.4.6 / 8.3.1 Multiple Vulnerabilities (APSB11-21, APSB11-24, APSB11-26) (Mac OS X)

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.1, 9.4.6, or 8.3.1. It is, therefore, affected by the following vulnerabilities : - An unspecified error exists that allows an attacker to bypass security restrictions, resulting in code execution. CVE-2011-2431 -...

Get Ready for Hacker Halted 2011, Miami 21-27 October

Get Ready for Hacker Halted 2011, Miami 21-27 October Hacker Halted returns to Miami for the 3rd year in a row. Following last year's success, we are expecting this year to be bigger and better. Hacker Halted will feature 4 focus tracks: 1.What's Hot – Featuring cutting-edge presentations on key...

Adobe Flash Player CFF DefineFont4 GSUBData Memory Corruption (APSB11-21; CVE-2011-2417)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing GSUB data within CFF DefineFont4 tags in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a we...

Adobe Flash Player ActionScript 3 Movie Canvas Memory Corruption (APSB11-21; CVE-2011-2135)

The vulnerability is due an error in the way the application performs boundary checks on the ActionScript tags while loading objects to Movie Canvas in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing malicious SWF file...

Adobe Flash Player ActionScript BitmapData Memory Corruption (APSB11-21; CVE-2011-2425)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the application when processing ActionScript BitmapData objects in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page...

RHEL 6 : flash-plugin (RHSA-2011:1144)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1144 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different...

HP OpenView Network Node Manager Toolbar.exe CGI Cookie Handling Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.0 and 7.53. By sending a CGI request with a specially OvOSLocale cookie to Toolbar.exe, an attacker may be able to execute arbitrary code. Please note that this module only works against a specific build i.e. NNM...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 4804)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

MozillaThunderbird: Update to Thunderbird 3.1.11 (important)

Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues: MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards MFSA 2011-20/CVE-2011-2373 bmo617247 Use-after-fre...

SmallFTPd 1.0.3 - Denial of Service

Exploit Title: smallFTPD Connection Saturation Remote Denial of Service Date: June 27, 2011 Author: Myo Soe Software Link: http://smallftpd.sf.net Version: 1.0.3-fix and earlier Tested on: windows xp, seven, 2k3 This file is part of the Metasploit Framework and may be subject to redistribution an...

JDK unspecified vulnerability in Java Web Start component

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

JDK unspecified vulnerability in Networking component

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality via unknown vectors...

Mathew Callingham Associatess 3.x.x Multiple Vulnerability

Exploit for php platform in category web applications +Title :.......Mathew Callingham Associatess 3.x.x Multiple Vulnerability +Author :......Net.Edit0r +Tested on :...Linux/PHP --------------------------------------------------------------------------- Founded by Net.Edit0r Team: Black Hat Grou...

Web2Project 2.3 SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/...