Adobe Photoshop 12.1 - '.tiff' Parsing Use-After-Free

Application: Adobe Photoshop 12.1 Tiff Parsing Use-After-Free Platforms: Windows PRL: 2012-07 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1...

FastWeb2 - XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Microsoft Denies Reports of Exploits For Critical Windows RDP Hole

Microsoft said that it has not seen any evidence that hackers have figured out a way to take advantage of a critical vulnerability in the Windows Remote Desktop Protocol RDP that the company disclosed and patched on Tuesday. The statement comes in the wake of unconfirmed reports of working exploi...

Microsoft adds Enhanced Memory Protections in IE10

Microsoft adds Enhanced Memory Protections in IE10 Internet Explorer 10, the next version of the popular browser from Microsoft will incorporate new protections in terms of memory management. French security firm VUPEN has managed to hack Microsoft's Internet Explorer 9 on a fully patched Windows...

Microsoft Remote Desktop Protocol Service CVE-2012-0152 Denial of Service Vulnerability

Description Microsoft Remote Desktop Protocol is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...

CVE-2012-2099

creationtimestamp| type| source ---|---|--- 2012-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36947 2012-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36948...

Google Hands out $60k Reward for Full Chrome Compromise in Pwnium Contest

VANCOUVER–Well, that didn’t take long. Before the first session of the CanSecWest conference here even started on Wednesday, a researcher had already succeeded in scoring a full compromise of Google Chrome, using two distinct bugs, and earning himself a $60,000 reward as part of the company’s...

CVE-2012-1110

creationtimestamp| type| source ---|---|--- 2012-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36899 2012-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36898 2012-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36900...

Jhwebstudio Cross Site Scripting

Exploit Title : jhwebstudio Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.jhwebstudio.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork...

CVE-2012-1039

creationtimestamp| type| source ---|---|--- 2012-02-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36889 2012-02-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36890 2012-02-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36888 2012-02-29...

Google Withdraws Pwn2Own Sponsorship, Sets Aside $1 Mil. For Prizes

Google threw down the gloves on their Chromium Blog yesterday with an announcement that they would pay out up to $1 million in prize money for Chrome exploits at CanSecWest this year. The blogpost also announces that Google will no longer sponsor or officially participate in Pwn2Own because of a...

CVE-2012-1188

creationtimestamp| type| source ---|---|--- 2012-02-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36894 2012-02-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36893...

Google предлагает вознаграждение за эксплойты $20000-$60000

Компания Google объявила о расширении программы вознаграждений Chromium Security Rewards. В частности, предлагается премия за 0-day эксплойты Chrome, Flash, Windows и др. За них будут платить от $20K до $60K. Программа Chromium Security Rewards предполагает выплату вознаграждения за найденные...

CVE-2012-4923

creationtimestamp| type| source ---|---|--- 2012-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36831 2012-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36832 2012-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36833...

Endian Firewall 2.4 - 'dnat.cgi?createrule' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52076/info Endian Firewall is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal...

New Version of Flashback Mac Trojan Found Using Java Exploits

A new version of the Flashback Trojan that targets Macs has appeared, and this one uses a drive-by download technique to attempt exploits of two Java vulnerabilities. The Flashback.G malware also tries to trick users into accepting a fake digital certificate, which will install the malware if the...

Metasploit Framework 4.2.0 : IPv6, VMware, and Tons of Modules!

Metasploit Framework 4.2.0 : IPv6, VMware, and Tons of Modules! Since last release in October, Metasploit added 54 new exploits, 66 new auxiliary modules, 43 new post-exploitation modules, and 18 new payloads. Metasploit 4.2 now ships with thirteen brand new payloads, all added to support opening...

The Uploader 2.0.4 (English/Italian) - Arbitrary File Upload / Remote Code Execution (Metasploit)

require 'msf/core' class Metasploit3 'The Uploader 2.0.4 Eng/Ita Remote File Upload', 'Description'= %q This module exploits various flaws in The Uploader to upload a PHP payload to target system. When run with defaults it will search possible URIs for the application and exploit it automatically...

Call for Paper - DEF CON Rajasthan March 2012 Meet

Call for Paper - DEF CON Rajasthan March 2012 Meet DEF CON Rajasthan - March 2012 Jaipur Meet, Call For Papers is now officially Open and will close on March 10, 2012. DEF CON Rajasthan DC91141 is a DEF CON Registered group of people interested in exploring technology and it implications in...

FreePBX gen_amp_conf.php Information Disclosure

By requesting the 'admin/modules/framework/bin/genampconf.php' script directly, an unauthenticated, remote attacker can discover all the configuration parameters, including the admin password, for the FreePBX installed on the remote host, thereby gaining administrative access to it. %NASLMINLEVEL...