Adobe Photoshop CS5 - '.gif' Remote Code Execution

Application: Adobe Photoshop CS5 GIF Remote Code Execution Platforms: Adobe Photoshop CS5 12.0 and 12.1 Exploitation: Remote code execution CVE Number: CVE-2011-2131 Adobe Vulnerability Identifier: APSB11-22 PRL: 2011-08 Author: Francis Provencher Protek Research Lab's Website:...

Get Ready for Microsoft 13 updates for August Patch Tuesday

Get Ready for Microsoft 13 updates for August Patch Tuesday Microsoft has announced that it will release 13 bulletins to address 22 vulnerabilities in Windows, Office, Internet Explorer, .NET and Visual Studio on its next Patch Tuesday. Another "critical" bulletin affects Windows server operating...

Solaris 10 (x86) : 145199-01

SunOS 5.10x86: ehci patch. Date this patch was last updated by Sun : Jun/22/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/02/25. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 4804)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

MozillaThunderbird: Update to Thunderbird 3.1.11 (important)

Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues: MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards MFSA 2011-20/CVE-2011-2373 bmo617247 Use-after-fre...

Mozilla Firefox/Thunderbird/SeaMonkey Array.reduceRight()远程代码执行漏洞

BUGTRAQ ID: 48372 CVECAN ID: CVE-2011-2371 Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。 Mozilla Firefox、Thunderbird和SeaMonkey在处理超长JavaScript数组的实现上存在远程代码执行漏洞，远程攻击者可利用这些漏洞执行任意代码，使受响应用程序崩溃，可能造成拒绝服务。 Mozilla Firefox 3.6.x Mozilla...

Designscope SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Designscope SQL Injection Vulnerability Author : Net.Edit0r Email : email protected email protected Location : Iran Dork : "site by Designscope" Category : webapps Data : 2011-03-22 Download Script: www.designscope.com.au Platform...

ZDI-11-109: (Pwn2Own) Apple Safari OfficeArtBlip Parsing Remote Code Execution Vulnerability

ZDI-11-109: Pwn2Own Apple Safari OfficeArtBlip Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-109 March 22, 2011 -- CVE ID: CVE-2011-1417 -- CVSS: 9.7, AV:N/AC:L/Au:N/C:C/I:C/A:P -- Affected Vendors: Apple -- Affected Products: Apple Safari --...

Unfixed Script Insertion vulnerability at dfoto.datateknologer.se

Security researcher istehem, has submitted on 22/03/2011 a Script Insertion vulnerability affecting dfoto.datateknologer.se, which at the time of submission ranked 21368178 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

PhreeBooks R30RC4 Local File Inclusion

------------------------------------------------------------------------ Software................PhreeBooks R30RC4 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/phreebooks Release Date............2/22/2011 Tested On...............Windows Vist...

Solaris 10 (sparc) : 146279-01

SunOS 5.10: uucp patch. Date this patch was last updated by Sun : Dec/22/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/11/14. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Unfixed XSS vulnerability at davidgreenfans.com

Security researcher VirtualSystEm, has submitted on 22/01/2011 a cross-site-scripting XSS vulnerability affecting davidgreenfans.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/11/2011. It is...

Unfixed XSS vulnerability at www.adcocorp.com

Security researcher VirtualSystEm, has submitted on 22/01/2011 a cross-site-scripting XSS vulnerability affecting www.adcocorp.com, which at the time of submission ranked 7630747 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/11/2011. It is...

SuSE 11 / 11.1 Security Update : kdenetwork (SAT Patch Numbers 3563 / 3564)

This update of kdenetwork fixes several bugs, the security related issues are : - The 'name' attribute of the 'file' element of metalink files is not properly sanitised this can be exploited to download files to arbitrary directories. CVE-2010-1000: CVSS v2 Base Score: 4.3...

Microsoft Internet Explorer 8 - CSS Parser Denial of Service

Microsoft Internet Explorer 8 - CSS Parser Denial of Service color:red; @import url"css.css"; @import url"css.css"; @import url"css.css"; @import url"css.css"; Exploit-DB Notes: Original credit goes to an unidentified researcher using WooYun anonymous account "路人甲". WooYun is a connection platfor...

AuraCMS (pfd.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= AuraCMS pfd.php SQL Injection Vulnerability ============================================= Author : Arianom email protected Homepage : http://indonesiancoder.com Vendor : http://www.auracms.org/...

ZyXEL P-660R-T1 V2 Cross Site Scripting

Name : ZyXEL P-660R-T1 V2 XSS Author : Usman Saeed from Xc0re Security Research Group Homepage :http://www.xc0re.net Dated : 22/11/2010 Exploit: VECTOR :http://IP/Forms/home1?&HomeCurrentDate='alert1;'01%2F01%2F2000 This works with the post request ! As by default this value is sent through POST...

Oracle Java SE Multiple Vulnerabilities - Windows

Oracle Java JDK/JRE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4120

creationtimestamp| type| source ---|---|--- 2010-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34912 2010-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34908 2010-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34913 2010-10-22...

Oracle Java SE Multiple Vulnerabilities (October 2010 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 6 Update 22 / 5.0 Update 26 / 1.4.228. Such versions are potentially affected by security issue in the following components : - CORBA - Deployment - Deployment Toolkit - Java 2D - Java Web...