Adobe Reader Memory Corruption (APSB14-28: CVE-2014-8460) - ver 2

Adobe Reader is vulnerable to a buffer overflow while parsing the font data. The access violation occurs because the number of subroutines for the embedded font is larger than the size of the subroutine array which leads to a crash...

Adobe Reader Javascript API Information Disclosure (APSB14-28: CVE-2014-8448)

An information disclosure vulnerability has been reported in Adobe Reader. The vulnerability is due to an error in the way Adobe Reader handles specially crafted PDF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...

Threat Outbreak Alert RuleID4400KVR: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 36916 First Published: 2015 January 6 13:54 GMT Last Updated: 2016 February 1 14:04 GMT Version: 82 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4400KV...

Fedora 19 : denyhosts-2.6-28.fc19.1 (2014-17081)

Fix security bug Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

HP Data Protector 8.10 Remote Command Execution

This module exploits a remote command execution on HP Data Protector 8.10. Arbitrary commands can be executed by sending crafted requests with opcode 28 to the OmniInet service listening on the TCP/5555 port. Since there is a strict length limitation on the command, rundll32.exe is executed, and...

Threat Outbreak Alert RuleID12145: Email Messages Distributing Malicious Software on October 28, 2014

Medium Alert ID: 36223 First Published: 2014 October 29 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12145 may contain the following files: Name |...

Threat Outbreak Alert RuleID12142: Email Messages Distributing Malicious Software on October 28, 2014

Medium Alert ID: 36209 First Published: 2014 October 28 15:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12142 may contain the following files: Name |...

skid-row.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-50289 Description| Value ---|--- Affected Website:| skid-row.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

Fedora 21 : bash-4.3.22-3.fc21 (2014-11295) (Shellshock)

Disclosure - http://www.openwall.com/lists/oss-security/2014/09/24/10 Behaviour prior to patch : $ env x=' :;; echo OOPS' bash -c /usr/sbin/nologin OOPS This account is currently not available. Note that Tenable Network Security has extracted the preceding description block directly from the Fedo...

printsearch.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-50034 Description| Value ---|--- Affected Website:| printsearch.de Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerab...

CVE-2014-5465

creationtimestamp| type| source ---|---|--- 2014-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34436...

Threat Outbreak Alert RuleID10817: Email Messages Distributing Malicious Software on July 28, 2014

Medium Alert ID: 35068 First Published: 2014 July 28 20:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10817 may contain the following files: Name | Siz...

search.goodbaby.com XSS vulnerability

Vulnerable URL: http://search.goodbaby.com/?ch=phpcms=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check search.goodbaby.com SSL connection...

Threat Outbreak Alert RuleID10551: Email Messages Distributing Malicious Software on July 28, 2014

Medium Alert ID: 34887 First Published: 2014 July 9 13:16 GMT Last Updated: 2014 July 29 12:21 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10551 and...

HP OpenView OmniBack II Command Execution

No description provided by source. $Id: openviewomnibackexec.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

Joomla Component com_adds Blind SQL Injection Vulnerability

No description provided by source. Title : Joomla Component comadds Blind SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-28 InformatioN Title : Joomla Component comadds Blind SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...

MS Internet Explorer GDI+ - Proof of Concept (MS08-052)

No description provided by source. html head STYLE ef: behavior: urldefaultVML; /STYLE /head body pre ================================================ MS08-052: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer Version: 6.0.2900.2180...

Polaring <= 0.04.03 (general.php) Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '64020' ssvid version = '1.0' author = '皮皮' vulDate = '2006-09-28' createDate = '2015-12-24...

WinRAR Filename Spoofing

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::FILEFORMAT...

J-Integra 2.11 - Remote Code Execution Exploit

No description provided by source. html !-- j-integra v2.11 Remote code execution vulnerability Discovered on: Thursday, October 28, 2010, 10:10:12 PM Download: http://j-integra.intrinsyc.com/ Author: bz1p, [email protected] impact: LOW, due to the object NOT marked safe for scripting Tested on: X...