Mozilla Foundation Security Advisory 2011-07

Mozilla Foundation Security Advisory 2011-07 Title: Memory corruption during text run construction Windows Impact: Critical Announced: March 1, 2011 Reporter: Alex Miller Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Alex Miller reported that wh...

NextGEN Gallery WordPress Plugin 1.7.3 Path Disclosure

Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...

Alex Howard on Government Security, Internet Freedom and Open Gov

In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard @digiphile of O’Reilly Media about the open government and open data movements, how they’re affecting security and the ways in which Internet freedom and privacy play into the current climate online...

Unfixed XSS vulnerability at www.alex-commerce.edu.eg

Security researcher Xacker, has submitted on 02/04/2011 a cross-site-scripting XSS vulnerability affecting www.alex-commerce.edu.eg, which at the time of submission ranked 213715 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/04/2011. It is...

Indian hacker Atul Alex plants back door in Symbian firmware !

Indian hacker Atul Alex has had a look at the firmware for Symbian S60 smartphones and come up with a back door for it. By modifying version 5 of the original software – which runs on such devices as the Nokia 5800, Nokia X6, Nokia 5530XM, Sony Ericsson Satio and Sony Ericsson Vivaz – he has...

Unfixed XSS vulnerability at macquarie.newsweaver.com

Security researcher db, has submitted on 29/11/2010 a cross-site-scripting XSS vulnerability affecting macquarie.newsweaver.com, which at the time of submission ranked 171626 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Alex Hutton on the VERIS Community App and Data Breaches

Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Unfixed XSS vulnerability at www.godsafe.net

Security researcher nullbyt3, has submitted on 11/07/2010 a cross-site-scripting XSS vulnerability affecting www.godsafe.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Alex Hutton on the Verizon Data Breach Investigations Report

Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses. Podcast audio courtesy of sykboy65 Subscrib...

Unfixed XSS vulnerability at www.filtertek.com

Security researcher Syntax3rr0r, has submitted on 24/05/2010 a cross-site-scripting XSS vulnerability affecting www.filtertek.com, which at the time of submission ranked 9146552 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/06/2010. It is...

CA20100304-01: Security Notice for CA SiteMinder

CA20100304-01: Security Notice for CA SiteMinder Issued: March 04, 2010 CA's support is alerting customers to a security risk with CA SiteMinder. Multiple cross site scripting XSS vulnerabilities exist that can allow a remote attacker to potentially gain sensitive information. CA has provided...

Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4

No description provided by source. !/bin/sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 local root exploit March 2010 automated by kingcope Full Credits to Slouching echo Tod Miller Sudo local root exploit echo by Slouching echo automated by kingcope if $ != 1 then echo "usage:...

Microsoft Animated Cursor .ANI Buffer Overflow

MS Animated Cursor .ANI BOF Perl Edition MS07-017 Discovered by Alex Sotirov from Determina,So all rights are reserved to him! Written by Jacky! This exploit is written in Perl , and it's the first MS07-017 exploit As i saw which be written in perl! THIS EXPLOIT IS FOR EDUCATIONAL PURPOSES ONLY !...

Alex Guestbook Multi Vulnerability

Exploit for unknown platform in category web applications ================================== Alex Guestbook Multi Vulnerability ================================== » Script: @lex Guestbook » Language: PHP » Download: http://scripti.org/scriptlex-guestbook61426.html === Exploit And Dork === »...

Alex Guestbook - Multiple Vulnerabilities

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...

Cisco VPN Client 0day Integer Overflow

/ Cisco VPN Client 0day Integer overflow DOS Proof Of Concept Code By Alex Hernandez aka alt3kx c November 2009 This POC is only for test. If an application read a malformed chars file like this POC, the application will be crashed. We tested this code on: Windows Vista Bussines SP1 Spanish Windo...

Alex Howard on Compliance, Breach Notification and the Rockefeller Bill

Dennis Fisher talks with Alex Howard, associate editor of Searchcompliance.com, about the burden compliance places on security staffs, the growing tide of breach notification laws and the misunderstandings surrounding the Rockefeller bill and the Internet kill switch. Download Subscribe to the...

Joomla School Component 1.4 SQL Injection

---------------------------------------------------------------------- Joomla Component comschool classid SQL injection Vulnerability ---------------------------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Group : LatinHackTeam +...

Joomla Component com_school 1.4 (classid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Joomla Component comschool 1.4 classid SQL Injection Vulnerability =====================================================================...

Joomla! Component com_school 1.4 - classid SQL Injection

Joomla! Component comschool 1.4 - classid SQL Injection ---------------------------------------------------------------------- Joomla Component comschool classid SQL injection Vulnerability ---------------------------------------------------------------------- + Author : Chip D3 Bi0s + Email :...