3591 matches found
Adobe Flash Player Ambiguous Namespace Memory Corruption (APSB11-28; CVE-2011-2455)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference during type lookup by the AVM2. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file...
Flash Player for Mac <= 10.3.183.10 / 11.0.1.152 Multiple Vulnerabilities (APSB11-28)
According to its version, the instance of Flash Player installed on the remote Mac OS X host is 10.x equal to or earlier than 10.3.183.10 or 11.x equal to or earlier than 11.0.1.152. It is therefore reportedly affected by several critical vulnerabilities : - Several unspecified memory corruption...
Adobe Flash Player跨域安全限制绕过漏洞
BUGTRAQ ID: 50629 CVE ID: CVE-2011-2458 Adobe Flash Player是一个集成的多媒体播放器。 Adobe Flash Player在实现上存在安全限制绕过漏洞，远程攻击者可利用此漏洞绕过某些同源策略限制。 Adobe Flash Player 9.x Adobe Flash Player 10.x Adobe AIR 3.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-28）以及相应补丁: APSB11-28：Security update available for Adobe Flash...
flash-plugin: mulitple code execution flaws (APSB11-28)
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a...
DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal [CVE-2011-1359]
Title ----- DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal CVE-2011-1359 Severity -------- High Date Discovered --------------- July 28, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Javier Castro,...
Unfixed XSS vulnerability at www.zsecure.net
Security researcher watt, has submitted on 28/10/2011 a cross-site-scripting XSS vulnerability affecting www.zsecure.net, which at the time of submission ranked 821534 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is currently...
Joomla Simple File Lister module <= 1.0 Directory Traversal Vulnerability
No description provided by source. Exploit Title: Joomla Simple File Lister module = 1.0 Directory Traversal Vulnerability Google Dork: "Simple File Lister v1.0" "Files in directory" Date: 2011-08-28 Author: evilsocket evilsocket at gmail dot com Software Link:...
Joomla Simple File Lister 1.0 Directory Traversal
Exploit Title: Joomla Simple File Lister module = 1.0 Directory Traversal Vulnerability Google Dork: "Simple File Lister v1.0" "Files in directory" Date: 2011-08-28 Author: evilsocket evilsocket at gmail dot com Software Link:...
Symantec System Center Alert Management System (xfr.exe) Arbitrary Command Execution
$Id: amsxfr.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Unfixed Redirect vulnerability at www.olleh.com
Security researcher d3vbit3, has submitted on 28/07/2011 a Redirect vulnerability affecting www.olleh.com, which at the time of submission ranked 4480 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed. If you...
Braden Fleischer SQL injection Vulnerability
Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : Braden Fleischer..SQL injection Vulnerability + Date : 28/07/2011 + Author : k's0uR! + Category : WebApps + d0rk : "site by: Braden Fleischer" + Faceb00k :...
Unfixed XSS vulnerability at www.redscan.com
Security researcher Megid, has submitted on 28/07/2011 a cross-site-scripting XSS vulnerability affecting www.redscan.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...
Mozilla Releases Firefox updates
Mozilla has released Firefox 4.0.1, 3.6.17, and 3.5.19 to address multiple vulnerabilities. The impact of these vulnerabilities includes arbitrary code execution, privilege escalation, directory traversal, and information disclosure. US-CERT encourages users and administrators to review the Mozil...
WordPress Plugin BackWPup - Remote Code Execution Local Code Execution
WordPress Plugin BackWPup - Remote Code Execution Local Code Execution Sense of Security - Security Advisory - SOS-11-003 Release Date. 28-Mar-2011 Last Update. - Vendor Notification Date. 25-Mar-2010 Product. Wordpress Plugin BackWPup Platform. Independent Affected versions. 1.6.1 verified,...
Fedora 13 : firefox-3.6.16-1.fc13 / galeon-2.0.7-39.fc13 / gnome-python2-extras-2.25.3-28.fc13 / etc (2011-3917)
Update to Firefox 3.6.16 and rebuilds of dependent packages. This erratum blacklists a small number of HTTPS certificates. BZ689430 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...
Linux Kernel < 2.6.37-rc2 - 'TCP_MAXSEG' Kernel Panic (Denial of Service) (2)
/ TCPMAXSEG Kernel Panic DoS for Linux include include include include include int main struct sockaddrin laddr; memset&laddr, 0, sizeofladdr; laddr.sinfamily = AFINET; laddr.sinaddr.saddr = inetaddr"127.0.0.1"; laddr.sinport = htons31337; int listener = socketPFINET, SOCKSTREAM, IPPROTOTCP; if...
Hyena Cart (index.php) SQL Injection Vulnerability
Exploit for php platform in category web applications .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://hyenacart.com/ .:. Dork : "This store is powered by Hyena Cart" .:. Home : http://www.sec-risk.com/vb/ === Exploit === www.site.com/index.php?info=nullSql...
CVE-2010-4701
creationtimestamp| type| source ---|---|--- 2010-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15839...
Canada Introduces Bill C-28 to Combat Spam with Hefty Fines
Spam is arguably the most irritating aspect of the internet and email for people globally. However, there is hope in Canada for those who have been targeted by spammers. A new law, Bill C-28, aims to facilitate government efforts in prosecuting and fining individuals and companies guilty of sendi...
J-Integra 2.11 - Remote Code Execution
esp = String100, "B" calc = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%48%49" & unescape"%49%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%68" & unescape"%58%50%30%42%31%42%41%6b%41%41%78%32%41%42%32%42" & unescape"%41%30%42%41%41%58%38%41%42%50%75%59%79%39%6c%4a" &...