CVE-2012-1664

creationtimestamp| type| source ---|---|--- 2012-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37039 2012-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37040 2012-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37041 2012-04-04...

Infographic: Infections from 25K Sites Hit 10M Victims in February

Over 10 million people were hit by exploits served up by 25,000 of the most popular websites in the world in February, according to a new study released by Barracuda Labs. Using an internal tool, Barracuda analyzed Alexa’s list of the most popular websites to determine whether each URL was servin...

w3infotech Multiple Sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: w3infotech Multiple Sql Injection Vulnerability Author: Caddy-Dz Facebook Page: http://www.facebook.com/ALG.Cyber.Army E-mail: email protected Category:: webapps Vendor: http://www.w3infotech.com Google Dork: intext:"Powered by...

FlatnuX CMS - Cross-Site Request Forgery (Add Admin)

source: https://www.securityfocus.com/bid/52846/info Flatnux is prone to multiple security vulnerabilities: 1. An HTML-injection vulnerability 2. A cross-site request-forgery vulnerability 3. A directory-traversal vulnerability Successful exploits will allow attacker-supplied HTML and script code...

CVE-2012-4889

creationtimestamp| type| source ---|---|--- 2012-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37029 2012-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37030 2012-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37031 2012-04-01...

IBM Report: Mobile Attacks, Phishing Attacks Mount in 2011

Spam volume is down, there are fewer unpatched software holes and oftware application developers did a better job of writing secure code over the last year. But IBM’s X-Force Trend and Risk Report still found plenty to worry about in 2011, according to a copy of the report released this week...

CVE-2012-1469

creationtimestamp| type| source ---|---|--- 2012-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37000 2012-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36999...

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities A free framework for bug hunters to find vulnerabilities, write proof-of-concept exploits and play in Android. Use dynamic analysis on Android applications and devices for quicker security assessments. Share publicly known...

Adobe Photoshop 12.1 - '.tiff' Parsing Use-After-Free

Application: Adobe Photoshop 12.1 Tiff Parsing Use-After-Free Platforms: Windows PRL: 2012-07 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1...

VUPEN Security Research - Adobe Flash Player "Matrix3D" Remote Memory Corruption (CVE-2012-0768)

VUPEN Security Research - Adobe Flash Player "Matrix3D" Remote Memory Corruption APSB12-05 / CVE-2012-0768 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Adobe Flash Player is a cross-platform browser-based application...

FastWeb2 - XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Microsoft Denies Reports of Exploits For Critical Windows RDP Hole

Microsoft said that it has not seen any evidence that hackers have figured out a way to take advantage of a critical vulnerability in the Windows Remote Desktop Protocol RDP that the company disclosed and patched on Tuesday. The statement comes in the wake of unconfirmed reports of working exploi...

Microsoft adds Enhanced Memory Protections in IE10

Microsoft adds Enhanced Memory Protections in IE10 Internet Explorer 10, the next version of the popular browser from Microsoft will incorporate new protections in terms of memory management. French security firm VUPEN has managed to hack Microsoft's Internet Explorer 9 on a fully patched Windows...

Microsoft Remote Desktop Protocol Service CVE-2012-0152 Denial of Service Vulnerability

Description Microsoft Remote Desktop Protocol is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...

CVE-2012-2099

creationtimestamp| type| source ---|---|--- 2012-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36947 2012-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36948...

Google Hands out $60k Reward for Full Chrome Compromise in Pwnium Contest

VANCOUVER–Well, that didn’t take long. Before the first session of the CanSecWest conference here even started on Wednesday, a researcher had already succeeded in scoring a full compromise of Google Chrome, using two distinct bugs, and earning himself a $60,000 reward as part of the company’s...

Jhwebstudio Cross Site Scripting

Exploit Title : jhwebstudio Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.jhwebstudio.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork...

CVE-2012-1110

creationtimestamp| type| source ---|---|--- 2012-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36899 2012-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36898 2012-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36900...

CVE-2012-1039

creationtimestamp| type| source ---|---|--- 2012-02-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36889 2012-02-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36890 2012-02-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36888 2012-02-29...

Google Withdraws Pwn2Own Sponsorship, Sets Aside $1 Mil. For Prizes

Google threw down the gloves on their Chromium Blog yesterday with an announcement that they would pay out up to $1 million in prize money for Chrome exploits at CanSecWest this year. The blogpost also announces that Google will no longer sponsor or officially participate in Pwn2Own because of a...