[DSECRG-11-005] Oracle Document Capture empop3.dll - insecure method

ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-005 internal DSECRG-00154 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method, File overwriting, File deleting Exploits: YES...

Oracle Document Capture 10.1.3.5 Insecure Method / Buffer Overflow

ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-006 internal DSECRG-09-066 Application: Oracle Document Capture Versions Affected: Oracle Document Capture 10.1.3.5 Vendor URL: http://oracle.com Bugs: Insecure method. Buffer overflow. Exploits...

Oracle Document Capture 10.1.3.5 - Insecure Method Buffer Overflow

Oracle Document Capture 10.1.3.5 - Insecure Method Buffer Overflow Source: http://packetstormsecurity.org/files/view/97871/DSECRG-11-006.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-006 internal DSECRG-09-066 Application: Oracle Docume...

Oracle Document Capture - empop3.dll Insecure Methods

Oracle Document Capture - empop3.dll Insecure Methods Source: http://packetstormsecurity.org/files/view/97868/DSECRG-11-005.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-005 internal DSECRG-00154 Application: Oracle Document Capture...

Oracle - Document Capture Insecure READ Method

Source: http://packetstormsecurity.org/files/view/97872/DSECRG-11-007.txt Digital Security Research Group DSecRG Advisory DSECRG-11-007 Internal DSECRG-00117 Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL:...

CVE-2011-0772

creationtimestamp| type| source ---|---|--- 2011-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35259 2011-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35260...

Oracle Document Capture Actbar2.ocx Insecure Method

ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-00153 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method, File overwriting Exploits: YES Reported: 22.03.2010 Vendor response:...

Cisco: More Threats To Apple, Mobile Devices In 2011

Data suggests that 2010 was a year of “more of the same” when it comes to computer threats, but 2011 likely won’t be, at least according to networking giant Cisco Systems, which released its Annual Security Report on Wednesday. Cisco’s annual report on the state of security reiterated findings fr...

CVE-2011-0646

creationtimestamp| type| source ---|---|--- 2011-01-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16020...

Golden FTP Server 4.70 - Malformed Message Denial of Service

Golden FTP Server 4.70 - Malformed Message Denial of Service source: https://www.securityfocus.com/bid/45924/info Golden FTP Server is prone to a denial-of-service vulnerability. Exploits will cause the application to crash, denying service to legitimate users. Golden FTP Server 4.70 is vulnerabl...

CVE-2011-0645

creationtimestamp| type| source ---|---|--- 2011-01-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35239 2011-01-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16019...

Avira AntiVir Personal - Multiple Code Execution Vulnerabilities (2)

Avira AntiVir Personal - Multiple Code Execution Vulnerabilities 2 source: https://www.securityfocus.com/bid/45807/info Avira AntiVir Personal is prone to multiple code-execution vulnerabilities. Successful exploits may allow an attacker to execute arbitrary code with SYSTEM-level privileges...

Avira AntiVir Personal - Multiple Code Execution Vulnerabilities (1)

// source: https://www.securityfocus.com/bid/45807/info Avira AntiVir Personal is prone to multiple code-execution vulnerabilities. Successful exploits may allow an attacker to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will likely result in denial-of-service...

Exclusive Interview with TiGER-M@TE (Bangladesh Google website Hacker)

Update : Latest Hack by TiGER-M@TE : 700,000 sites on Inmotion Hosting Server hacked in one shot On the morning of Saturday, Jan 8, 2011 the biggest news of cyber world was - Google Bangladesh website Google.com.bd Hacked by TiGER-M@TE . TiGER-M@TE is a Bangladeshi Hacker, He was already connecte...

Researcher Finds Scores of Web Browser Holes

A prominent security researcher has published the results of application tests on prominent Web browsers that he claims has uncovered scores of new, previously unknown security holes. Michal Zalewski is a Poland-based security researcher for Google. In a post on January 1, Zalewski used a blog po...

Announcing cross_fuzz, a potential 0-day in circulation, and more

Hi list, == SUMMARY == I am happy to announce the availability of crossfuzz - an amazingly effective but notoriously annoying cross-document DOM binding fuzzer that helped identify about one hundred bugs in all browsers on the market - many of said bugs exploitable - and is still finding more. Th...

Storm Botnet Returns as Part of New Year's Attacks

A new spam campaign that appeared shortly before the New Year is part of a new effort by the crew behind the Storm/Waledac botnet and is using some rather elementary tactics–in combination with fast-flux–to attempt to compromise unsuspecting users. The new attack emerged late last week and is...

Amoeba CMS 1.01 Shell Upload / SQL Injection

!/usr/bin/python """ Amoeba CMS v1.01 multiple remote vulnerabilities: Vendor: http://www.amoebacms.com/ Found by: mrme Contact date: 20/12/2010 2:37pm EST SQL Injection: ============= There is quite a few instances of pre/post auth SQL Injection in the web application. In one particular SQLi the...

Ignition 1.3 (page.php) Local File Inclusion Vulnerability

Exploit for php platform in category web applications Ignition 1.3 page Local File Inclusion Vulnerability disclosed by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz note: 1. Magicquotesgpc should be turned off in order to exploit this vulnerability 2...

CVE-2010-4693

creationtimestamp| type| source ---|---|--- 2010-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35157 2010-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35156...