CVE-2011-5214

creationtimestamp| type| source ---|---|--- 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36450 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36454 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36451 2011-12-14...

CVE-2011-5213

creationtimestamp| type| source ---|---|--- 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36449 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36448...

Nagios XI - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: www.securityfocus.com/bid/51069/info Nagios XI is prone to an HTML injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the conte...

VxWorks Debugging Service Security Bypass Vulnerability

VxWorks is prone to a remote security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 7398)

The Adobe Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue : - This vulnerability CVE-2011-0609 could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the...

AST-2011-013: Possible remote enumeration of SIP endpoints with differing NAT settings

Asterisk Project Security Advisory - AST-2011-013 Product Asterisk Summary Possible remote enumeration of SIP endpoints with differing NAT settings Nature of Advisory Unauthorized data disclosure Susceptibility Remote unauthenticated sessions Severity Minor Exploits Known Yes Reported On 2011-07-...

CVE-2012-0699

creationtimestamp| type| source ---|---|--- 2011-12-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18230 2012-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18667...

Reports Emerge of New Flash Vulnerabilities

There are multiple reports emerging of two new vulnerabilities in Adobe Flash that could lead to remote code execution. There’s little information about the exact nature of the bugs available right now, and Adobe has not released any advisories or information about them either. The vulnerabilitie...

Android Bloatware, Another Serious Android Privacy Issue

Android Bloatware, Another Serious Android Privacy Issue Researchers have found that some Android smartphones are more vulnerable to attacks than others, thanks to add-on software and skins that get installed by handset makers before they ship their smartphones to subscribers. It's not just Carri...

CVE-2011-4918

creationtimestamp| type| source ---|---|--- 2011-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36407 2011-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36406...

SAP Portal - unauthorized file read

Application: SAP Portal Vendor URL: http://www.sap.com Bugs: Directory traversal Exploits: YES Reported: 12.03.2011 Vendor response: 13.03.2011 Date of Public Advisory: 12.09.2012 Reference: SAP Security Note 1707494 Author: Dmitry Chastukhin ERPScan Description It is possible to read files in...

Java Still a Favorite Target of Attackers

Java has become virtually unavoidable in the last few years, and it’s installed on hundreds of millions of PCs around the world. A huge number of those installations are vulnerable versions of Java, and this fact has not escaped the attention of attackers, who have made the technology one of thei...

CVE-2011-5009

creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36377 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36378...

CVE-2011-5258

creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36380 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36379...

CVE-2011-4712

creationtimestamp| type| source ---|---|--- 2011-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36376...

New Java Vulnerability Coming Bundled With Exploit Kits

A recently discovered Java vulnerability that’s been circulating throughout the hacking underground has begun to show up alongside the BlackHole exploit kit, according to a post on Brian Krebs’ KrebsonSecurity blog. The National Vulnerability Database claims the vulnerability is found in the Java...

CVE-2011-5111

creationtimestamp| type| source ---|---|--- 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36350 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36351...

CVE-2011-5184

creationtimestamp| type| source ---|---|--- 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36354 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36355 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36357 2011-11-24...

CVE-2011-4544

creationtimestamp| type| source ---|---|--- 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36341 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36342 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36343 2011-11-23...

How the Duqu Authors May Have Erred

Duqu has been called the spawn of Stuxnet, or maybe some sort of stepchild or second cousin. That initial analysis came from some similarities in the code of the two attack tools, and now that researchers have had more time to pull Duqu apart and see how it works, it seems more and more likely th...