Mozilla Patches Seven Flaws in Firefox 30

Mozilla has fixed seven security vulnerabilities in Firefox 30, including five critical flaws that could enable remote code execution. Firefox 30 is a relatively minor release of the popular browser, with the most notable change being the addition of a sidebar button that allows users to quickly...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 30, 2014

Medium Alert ID: 34429 First Published: 2014 May 30 19:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 30, 2014

Medium Alert ID: 34405 First Published: 2014 May 29 13:19 GMT Last Updated: 2014 May 31 03:50 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The email message attempts to convince the...

SQL Injection in AdRotate

Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30, 2014 Vendor Patch: January 31, 2014 Public Disclosure: February 20,...

WordPress WP-Affiliate Platform Cross Site Scripting

Wordpress XSS/HTML Injection in Plugin wp-affiliate-platform + Date: 30/04/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage: http://wpaffiliatemanager.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: login.php +...

MozillaThunderbird,seamonkey (important)

Mozilla Thunderbird was updated to 24.4.0. Mozilla SeaMonkey was updated to 2.25. MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 Miscellaneous memory safety hazards MFSA 2014-17/CVE-2014-1497 bmo966311 Out of bounds read during WAV file decoding MFSA 2014-18/CVE-2014-1498 bmo935618...

AuraCMS 2.3 - Multiple Vulnerabilities

AuraCMS 2.3 - Multiple Vulnerabilities Advisory ID: HTB23196 Product: AuraCMS Vendor: AuraCMS Vulnerable Versions: 2.3 and probably prior Tested Version: 2.3 Advisory Publication: January 8, 2014 without technical details Vendor Notification: January 8, 2014 Vendor Patch: January 30, 2014 Public...

CVE-2013-3934

creationtimestamp| type| source ---|---|--- 2013-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29922...

Avira Secure Backup 1.0.0.1 Build 3616 Buffer Overflow

RCE Security Advisory http://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: Avira Secure Backup Vendor URL: www.avira.com Type: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-119 Date found: 2013-10-30 Date published: 2013-11-16 CVSSv2...

Openbravo ERP XXE Arbitrary File Read

The Openbravo ERP XML API expands external entities which can be defined as local files. This allows the user to read any files from the FS as the user Openbravo is running as generally not root. This module was tested against Openbravo ERP version 3.0MP25 and 2.50MP6. This module requires...

CVE-2013-3617

creationtimestamp| type| source ---|---|--- 2013-10-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38818 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/openbravoxxe.rb 2025-02-06 03:13:41+00:00| seen|...

Google Releases Google Chrome 30

Google has released Chrome 30 for Windows, Mac, Linux, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities could allow a remote attacker to cause a denial of service condition, spoof the address bar, or obtain sensitive information. US-CERT encourages users and...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including: Easier searching by image A number of new apps/extension APIs Lots of under the hood change...

DefCamp 2013 - International Hacking and Information Security Conference in Romania

The Fourth Edition of an International Information Security Conference hosted in Romania , The DefCamp 2013 is now open for Call for Papers. Over 300 Security experts, Researchers, and Enthusiasts from Romania and neighboring countries are expected to take part in the event in Bucharest, at the...

DefCamp 2013 - International Hacking and Information Security Conference in Romania

The Fourth Edition of an International Information Security Conference hosted in Romania , The DefCamp 2013 is now open for Call for Papers. Over 300 Security experts, Researchers, and Enthusiasts from Romania and neighboring countries are expected to take part in the event in Bucharest, at the...

Amazon Linux AMI : nginx (ALAS-2011-30)

Heap-based buffer overflow in compression-pointer processing in core/ngxresolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service daemon crash or possibly have unspecified other impact via a long response. C Tenable Network Security, Inc. The descriptive text and...

Intrasrv 1.0 - Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Intrasrv 1.0 Buff...

Linux/x86 - execve(/bin/sh) + Obfuscated Shellcode (30 bytes)

Linux/x86 - execve/bin/sh + Obfuscated Shellcode 30 bytes. Shellcode exploit for Linuxx86 platform / Title : Obfuscated execve /bin/sh 30 bytes Date : 3rd July 2013 Author : Russell Willis System : Linux/x86 SMP Debian 3.2.41-2 i686 To build: gcc -fno-stack-protector -z execstack -o shellcode...

Paypal Bug Bounty #12 - PPM Listing Vulnerability

Document Title: =============== Paypal Bug Bounty 12 - PPM Listing Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=649 Release Date: ============= 2013-05-30 Vulnerability Laboratory ID VL-ID: ==================================== 649 Common...

Mozilla Firefox and others: Update to 20.0/17.0.5 releases (important)

The Mozilla suite received security and bugfix updates: Firefox was updated to version 20.0. Thunderbird was updated to version 17.0.5. Seamonkey was updated to version 2.17 mozilla-nss was updated to version 3.14.3. mozilla-nspr was updated to version 4.9.6. mozilla-nspr was updated to version...