MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS11-038 Microsof...

acroread: multiple code execution flaws (APSB11-24)

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...

Adobe Acrobat和Reader U3D Tiff远程缓冲区溢出漏洞

BUGTRAQ ID: 49572 CVE ID: CVE-2011-2432 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在包含的libtiff实现上存在堆缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码。 Adobe Reader...

Adobe Reader Image Texture BMP File Memory Corruption (APSB11-24; CVE-2011-2438; CVE-2011-4372)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupt BMP resource. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF...

CVE-2011-3861

creationtimestamp| type| source ---|---|--- 2011-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36184...

Adobe Reader and Acrobat PDF file PICT Memory Corruption (APSB11-24; CVE-2011-2435)

A buffer overflow vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to an error when parsing the header of a PICT image. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file. Successful...

Adobe PDF file PCX Buffer Overflow (APSB11-24; CVE-2011-2437)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to buffer allocation error while parsing a PCX image header. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file...

Adobe Reader and Acrobat PICT Image Heap Buffer Overflow (APSB11-24; CVE-2011-2433; CVE-2011-2434)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an unsanitized loop counter. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file. Successful exploitation would allo...

Adobe Acrobat和Reader远程代码执行漏洞(CVE-2011-2442)

BUGTRAQ ID: 49585 CVECAN ID: CVE-2011-2442 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在实现上存在远程代码执行漏洞，远程攻击者可利用此漏洞执行任意代码。 Adobe Acrobat 10.x Adobe Reader 10.0.x 厂商补丁： Adobe -----...

Stralia Web SQL Injection

+------------------------------------------------------------------------------------------+ |------------------------- Stralia Web SQL Injection Vulnerability ------------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 4804)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

MozillaThunderbird: Update to Thunderbird 3.1.11 (important)

Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues: MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards MFSA 2011-20/CVE-2011-2373 bmo617247 Use-after-fre...

Quram Blins SQL-i Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2011-2956

creationtimestamp| type| source ---|---|--- 2011-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36007...

Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh Attachment)

This module exploits a stack buffer overflow in Lotus Notes 8.5.2 when parsing a malformed, specially crafted LZH file. This vulnerability was discovered binaryhouse.net This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities

Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities Date: 2011-06-22 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-03-24CachelogicExpiredDomainsScript1.0multiplesecurityvulnerabilities/...

DreamBox DM800 Arbitrary File Download Vulnerability

Exploit for hardware platform in category remote exploits Exploit Title: title Date: date Author: ShellVision Version: dm800 / !CDATA / functiontryvar...

Joomla Shop SQL Injection

Exploit Title :Joomla Component comshop SQL Injection Vulnerability Author : ThunDEr HeaD Contact : [email protected] Date : 24-05-2011 HomePage : www.indishell.in Version : Tested on : Live SIte Vulnerability Style : Joomla Component SQLi Vendor: http://www.mudrait.com/...

Unfixed XSS vulnerability at coral-tell.co.il

Security researcher Jonturk75, has submitted on 24/05/2011 a cross-site-scripting XSS vulnerability affecting coral-tell.co.il, which at the time of submission ranked 2815047 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...