CVE-2012-1260

creationtimestamp| type| source ---|---|--- 2012-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18750 2020-01-09 22:32:09+00:00| seen| https://t.me/cibsecurity/9081...

CVE-2012-4330

creationtimestamp| type| source ---|---|--- 2012-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18751 2012-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18765...

CVE-2012-0984

creationtimestamp| type| source ---|---|--- 2012-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37092 2012-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37093 2012-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18753...

ownCloud 3.0.0 - index.php?redirect_url Arbitrary Site Redirect

ownCloud 3.0.0 - index.php?redirecturl Arbitrary Site Redirect source: https://www.securityfocus.com/bid/53145/info ownCloud is prone to a URI open-redirection vulnerability, multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly...

Mandriva Linux Security Advisory : samba (MDVSA-2012:055)

A vulnerability has been found and corrected in samba : The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers ...

Lenovo ThinkManagement Console RunAMTCommand Operation -PutUpdateFileCore Command Parsing Arbitrary File Upload

The version of Lenovo ThinkManagement Console hosted on the remote web server contains a flaw in the 'ServerSetup.asmx' script that allows a remote, unauthenticated attacker to upload and run arbitrary ASP scripts with the privileges of the web user. In addition, this version of Lenovo...

Microsoft .NET Framework Parameter Validation Remote Code Execution Vulnerability

Description The .NET Framework is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will cause denial-of-service conditions. In a web hosting environment,...

Разработка эксплоитов для Linux. Часть 4 – обход ASCII armor и возврат в plt

Автор: sickness Блог автора: Перевод: Gh0St 07.04.2012 Разработка эксплоитов для Linux. Часть 4 – обход ASCII armor и возврат в plt. ПРИМЕЧАНИЕ: Перед чтением данного документа, рекомендуется ознакомиться со следующими работами: Руководство по написанию эксплоитов для Linux. Часть I – переполнени...

No Patch Coming for Newly Announced Vulnerabilities in ABB Legacy Products

Two independent researchers who’ve been warning of the threat of serious attacks against bug-riddled ICS and SCADA systems today issued an alert through ICS-CERT that vulnerabilities in ABB products could lead to DoS attacks or allow an attacker to remotely launch malicious code. No patch is...

CVE-2012-1664

creationtimestamp| type| source ---|---|--- 2012-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37039 2012-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37040 2012-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37041 2012-04-04...

ActivaDigital Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Nor-Rec Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Infographic: Infections from 25K Sites Hit 10M Victims in February

Over 10 million people were hit by exploits served up by 25,000 of the most popular websites in the world in February, according to a new study released by Barracuda Labs. Using an internal tool, Barracuda analyzed Alexa’s list of the most popular websites to determine whether each URL was servin...

w3infotech Multiple Sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: w3infotech Multiple Sql Injection Vulnerability Author: Caddy-Dz Facebook Page: http://www.facebook.com/ALG.Cyber.Army E-mail: email protected Category:: webapps Vendor: http://www.w3infotech.com Google Dork: intext:"Powered by...

CVE-2012-4889

creationtimestamp| type| source ---|---|--- 2012-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37029 2012-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37030 2012-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37031 2012-04-01...

FlatnuX CMS - Cross-Site Request Forgery (Add Admin)

source: https://www.securityfocus.com/bid/52846/info Flatnux is prone to multiple security vulnerabilities: 1. An HTML-injection vulnerability 2. A cross-site request-forgery vulnerability 3. A directory-traversal vulnerability Successful exploits will allow attacker-supplied HTML and script code...

IBM Report: Mobile Attacks, Phishing Attacks Mount in 2011

Spam volume is down, there are fewer unpatched software holes and oftware application developers did a better job of writing secure code over the last year. But IBM’s X-Force Trend and Risk Report still found plenty to worry about in 2011, according to a copy of the report released this week...

CVE-2012-1469

creationtimestamp| type| source ---|---|--- 2012-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37000 2012-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36999...

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities A free framework for bug hunters to find vulnerabilities, write proof-of-concept exploits and play in Android. Use dynamic analysis on Android applications and devices for quicker security assessments. Share publicly known...

VUPEN Security Research - Adobe Flash Player "Matrix3D" Remote Memory Corruption (CVE-2012-0768)

VUPEN Security Research - Adobe Flash Player "Matrix3D" Remote Memory Corruption APSB12-05 / CVE-2012-0768 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Adobe Flash Player is a cross-platform browser-based application...