3693 matches found
Adobe Flash Player ActionScript2 Stack Buffer Overflow (APSB11-28; CVE-2011-2457)
A stack buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a memory allocation issue while handling malformed ShockWave files SWF. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded...
Adobe Flash Player Action Tag Buffer Overflow (APSB11-28; CVE-2011-2454)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking while checking the payload contents of an ActionDefineFunction2 tag. A remote attacker could exploit this vulnerability by enticing a user to open a web page...
Flash Player for Mac <= 10.3.183.10 / 11.0.1.152 Multiple Vulnerabilities (APSB11-28)
According to its version, the instance of Flash Player installed on the remote Mac OS X host is 10.x equal to or earlier than 10.3.183.10 or 11.x equal to or earlier than 11.0.1.152. It is therefore reportedly affected by several critical vulnerabilities : - Several unspecified memory corruption...
Adobe Flash Player跨域安全限制绕过漏洞
BUGTRAQ ID: 50629 CVE ID: CVE-2011-2458 Adobe Flash Player是一个集成的多媒体播放器。 Adobe Flash Player在实现上存在安全限制绕过漏洞，远程攻击者可利用此漏洞绕过某些同源策略限制。 Adobe Flash Player 9.x Adobe Flash Player 10.x Adobe AIR 3.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-28）以及相应补丁: APSB11-28：Security update available for Adobe Flash...
flash-plugin: mulitple code execution flaws (APSB11-28)
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a...
DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal [CVE-2011-1359]
Title ----- DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal CVE-2011-1359 Severity -------- High Date Discovered --------------- July 28, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Javier Castro,...
Unfixed XSS vulnerability at www.zsecure.net
Security researcher watt, has submitted on 28/10/2011 a cross-site-scripting XSS vulnerability affecting www.zsecure.net, which at the time of submission ranked 821534 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is currently...
Joomla Simple File Lister module <= 1.0 Directory Traversal Vulnerability
No description provided by source. Exploit Title: Joomla Simple File Lister module = 1.0 Directory Traversal Vulnerability Google Dork: "Simple File Lister v1.0" "Files in directory" Date: 2011-08-28 Author: evilsocket evilsocket at gmail dot com Software Link:...
Joomla Simple File Lister 1.0 Directory Traversal
Exploit Title: Joomla Simple File Lister module = 1.0 Directory Traversal Vulnerability Google Dork: "Simple File Lister v1.0" "Files in directory" Date: 2011-08-28 Author: evilsocket evilsocket at gmail dot com Software Link:...
Symantec System Center Alert Management System (xfr.exe) Arbitrary Command Execution
$Id: amsxfr.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Unfixed XSS vulnerability at www.redscan.com
Security researcher Megid, has submitted on 28/07/2011 a cross-site-scripting XSS vulnerability affecting www.redscan.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...
Unfixed Redirect vulnerability at www.olleh.com
Security researcher d3vbit3, has submitted on 28/07/2011 a Redirect vulnerability affecting www.olleh.com, which at the time of submission ranked 4480 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed. If you...
Braden Fleischer SQL injection Vulnerability
Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : Braden Fleischer..SQL injection Vulnerability + Date : 28/07/2011 + Author : k's0uR! + Category : WebApps + d0rk : "site by: Braden Fleischer" + Faceb00k :...
Mozilla Releases Firefox updates
Mozilla has released Firefox 4.0.1, 3.6.17, and 3.5.19 to address multiple vulnerabilities. The impact of these vulnerabilities includes arbitrary code execution, privilege escalation, directory traversal, and information disclosure. US-CERT encourages users and administrators to review the Mozil...
NetOp Remote Control Client 9.5 Buffer Overflow
This module exploits a stack-based buffer overflow in NetOp Remote Control 9.5. When opening a .dws file containing a specially crafted string longer then 520 characters will allow an attacker to execute arbitrary code. Module Options msf use exploit/windows/fileformat/netop msf undefinednetop sh...
WordPress Plugin BackWPup - Remote Code Execution Local Code Execution
WordPress Plugin BackWPup - Remote Code Execution Local Code Execution Sense of Security - Security Advisory - SOS-11-003 Release Date. 28-Mar-2011 Last Update. - Vendor Notification Date. 25-Mar-2010 Product. Wordpress Plugin BackWPup Platform. Independent Affected versions. 1.6.1 verified,...
Fedora 13 : firefox-3.6.16-1.fc13 / galeon-2.0.7-39.fc13 / gnome-python2-extras-2.25.3-28.fc13 / etc (2011-3917)
Update to Firefox 3.6.16 and rebuilds of dependent packages. This erratum blacklists a small number of HTTPS certificates. BZ689430 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...
Linux Kernel < 2.6.37-rc2 - 'TCP_MAXSEG' Kernel Panic (Denial of Service) (2)
/ TCPMAXSEG Kernel Panic DoS for Linux include include include include include int main struct sockaddrin laddr; memset&laddr, 0, sizeofladdr; laddr.sinfamily = AFINET; laddr.sinaddr.saddr = inetaddr"127.0.0.1"; laddr.sinport = htons31337; int listener = socketPFINET, SOCKSTREAM, IPPROTOTCP; if...
Hyena Cart (index.php) SQL Injection Vulnerability
Exploit for php platform in category web applications .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://hyenacart.com/ .:. Dork : "This store is powered by Hyena Cart" .:. Home : http://www.sec-risk.com/vb/ === Exploit === www.site.com/index.php?info=nullSql...
