Mandriva Linux Security Advisory : nss (MDVSA-2013:257)

A vulnerability has been discovered and corrected in mozilla NSS : Mozilla Network Security Services NSS before 3.15.2 does not ensure that data structures are initialized before read operations, which allow remote attackers to cause a denial of service or possibly have unspecified other impact v...

Adobe RoboHelp 10 Unspecified Memory Corruption (APSB13-024)

The Adobe RoboHelp 10 install on the remote Windows host includes a DLL MDBMS.dll that is earlier than 10.0.1.294. It is, therefore, reportedly affected by an unspecified memory corruption vulnerability. Successful exploitation of this issue could allow an attacker to execute arbitrary code on th...

WordPress LBG Zoominoutslider Cross Site Scripting

Exploit Title : Wordpress lbg zoominoutslider Plugin Cross site scripting Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/lbgzoominoutslider Date: 2013/09/24 Vendor Homepage : http://wordpress.org Tested on: Windows Location:...

PT-2013-3357 · Mozilla +2 · Firefox Esr +6

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 24.0 Firefox ESR versions prior to 17.0.9 Thunderbird versions prior to 24.0 Thunderbird ESR versions prior to 17.0.9 SeaMonkey versions prior to 2.21 Description: The issue allows local users to gain...

Easy Blog by JM LLC - Multiple Vulnerabilities

Exploit for php platform in category web applications ============================================== Easy Blog by JM LLC - Multiple Vulnerabilities ============================================== Software................: Easy Blog Software link...........:...

CVE-2013-2574

creationtimestamp| type| source ---|---|--- 2013-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27076...

Japanese Game maker Club Nintendo's 24,000 accounts Hacked

Japanese video game maker Nintendo recently revealed that one of its main fan sites Club Nintendo got hacked and Out of 15.5 million login attempts in brute-force process, almost 24,000 user accounts have been hijacked early last month. Nintendo said it first became aware of the illicit logins on...

Threat Outbreak Alert: Fake Product Purchase Request Email Messages on June 24, 2013

Low Alert ID: 29758 First Published: 2013 June 24 13:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase request for the recipient. The text in the email message attempts to convince the recipient to op...

CVE-2013-4953

creationtimestamp| type| source ---|---|--- 2013-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26405...

PayPal France SQL Injection

Title: ====== PayPal Bug Bounty 78 FR - SQL Injection Vulnerability Date: ===== 2013-05-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=878 PayPal Security UID: Sbc8fSB VL-ID: ===== 878 Common Vulnerability Scoring System: ==================================== 7.6...

[SECURITY] Fedora 19 Update: gogoc-1.2-24.fc19

TSP is a control protocol used to establish and maintain static tunnels. The gogoCLIENT is used on the host computer to connect to a tunnel broker using the TSP protocol and to get the information for its IPv6 tunnel. When it receives the information for the tunnel, the gogoCLIENT creates the...

PHDays 2013 hackquest

Кто еще не в курсе, вот здесь: hackquest.phdays.com розыгрываются 20 билетов и 20 фирменных футболок PHDays 2013, который пройдет в Москве 23-24 мая Всем удачи!...

[security bulletin] HPSBPV02855 SSRT100512 rev.1 - HP ProCurve 1700-8(J9079A) and 1700-24(J9080A) Switches, Cross Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03699981 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03699981 Version: 1 HPSBPV02855...

CVE-2012-5216

Cross-site request forgery CSRF vulnerability on HP ProCurve 1700-8 aka J9079A switches with software before VA.02.09 and 1700-24 aka J9080A switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Ra1NX PHP Bot Authentication Bypass Remote Code Execution

Exploit Title: "Ra1NX" PHP Bot pubcall Authentication Bypass Remote Code Execution Date: March 24, 2013 Exploit Author: bwall Software Link: https://defense.ballastsecurity.net/decoding/index.php?hash=69401ac90262f3855c23cd143d7d2ae0 Version: v2.0 Tested on: Ubuntu require 'msf/core' class...

vBulletin 5.0.0 Beta 11 < 5.0.0 Beta 28 - SQL Injection

Exploit Title: vBulletin 5 Beta XX SQLi 0day Google Dork: "Powered by vBulletin™ Version 5.0.0 Beta" Date: 24/03/2013 Exploit Author: Orestis Kourides Vendor Homepage: www.vbulletin.com Software Link: Version: 5.0.0 Beta 11 - 5.0.0 Beta 28 Tested on: Linux CVE : None !/usr/bin/perl use...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 24 to the stable channel. Chrome 24.0.1312.52 has been updated for Windows, Mac, Linux, and Chrome Frame. This is the first Stable release with support for MathML, thanks to WebKit volunteer Dave Barton. This release also contains an...

flash-plugin: multiple code-execution flaws (APSB12-24)

Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK...

CVE-2012-5193

creationtimestamp| type| source ---|---|--- 2012-10-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22216...

ViArt Helpdesk - Persistent XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...