KLA10356 Multiple vulnerabilities in pcAnywhere

Multiple serious vulnerabilities have been found in Symantec products. Malicious users can exploit these vulnerabilities to obtain access to client information or cause denial of service. Below is a complete list of vulnerabilities 1. lack of client state control can be exploited remotely by...

CVE-2012-5322

creationtimestamp| type| source ---|---|--- 2012-02-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36866 2012-02-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36865...

CVE-2012-2986

creationtimestamp| type| source ---|---|--- 2012-02-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18893 2012-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18901...

CVE-2012-4362

creationtimestamp| type| source ---|---|--- 2012-02-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18893 2012-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18901...

Armitage Update : Graphical cyber attack management tool for Metasploit

Armitage Update : Graphical cyber attack management tool for Metasploit Armitage is a graphical cyber attack management tool for Metasploit that visualizes your targets, recommends exploits, and exposes the advanced capabilities of the framework. Armitage aims to make Metasploit usable for securi...

CVE-2012-0996

creationtimestamp| type| source ---|---|--- 2012-02-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36785 2012-02-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36784...

LEPTON 1.1.3 - Cross-Site Scripting

LEPTON 1.1.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/52026/info LEPTON is prone to multiple input-validation vulnerabilities, including: 1. A cross-site scripting vulnerability 2. An SQL-injection vulnerability 3. A local file-include vulnerability 4. Multiple...

Bloody Valentine For Critical Infrastructure: EtherNet/IP Exploit Could Crash Devices

Security researchers made good on a promise to release new exploits for programmable logic controllers PLCs. The exploits include one targeting a flaw in the implementation of the EtherNet/IP Industrial Protocol used in many IP-enabled PLCs. The security hole, if left unaddressed, could enable a...

Microsoft Silverlight & .NET Framework Heap Corruption Remote Code Execution Vulnerability

Description Microsoft Silverlight and Microsoft .NET Framework are prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely result in a denial-of-service...

LuraWave JP2 ActiveX Control < 2.1.5.11 jp2_x.dll Remote Buffer Overflow

The version of the LuraWave JP2 ActiveX control installed on the remote Windows host reportedly contains a stack-based buffer overflow vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage this issue to execute arbitrar...

Security advisory for Bugzilla 4.2rc2, 4.0.4, 3.6.8 and 3.4.14

Summary ======= Bugzilla is a Web-based bug-tracking system used by a large number of software projects. The following security issues have been discovered in Bugzilla: When a user creates a new account, Bugzilla doesn't correctly reject email addresses containing non-ASCII characters, which coul...

CVE-2012-1199

creationtimestamp| type| source ---|---|--- 2012-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36725 2012-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36713 2012-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36716 2012-02-11...

MachForm 2.4 Remote File Inclusion

=============================== MachForm.v2.4 RFI Vulnerability =============================== Vendor: http://canopus.oron.com/i755lr7evek7np4dpndrvbqcqhs3uj4igorbmlhaqwglgek3qc2old7whll7z4mlrtcyk73t/MachForm.v2.4.PHP.NULL-DGT.zip Date: 2012-1-27 Author : indoushka Exploit By indoushka...

Adobe's Security Chief Talks About Driving Up The Cost of Exploits

Threatpost editor Paul Roberts talks with Adobe’s Senior Director of Product Security and Privacy, Brad Arkin on patch management, driving up the cost of exploits and the amount of manpower that goes into recovering from zero days...

CVE-2012-0865

creationtimestamp| type| source ---|---|--- 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36687 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36686 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36685...

CVE-2012-1226

creationtimestamp| type| source ---|---|--- 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18480 2012-02-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36873...

Attackers Using Fake Google Analytics Code to Redirect Users to Black Hole Exploit Kit

Injecting malicious code into the HTML used on legitimate Web sites is a key part of the infection lifecycle for many attack crews, and they often disguise and obfuscate their code to make it more difficult to analyze or so it appears to be legitimate code. The latest instance of this technique h...

D-Link ShareCenter Products - Multiple Remote Code Execution Vulnerabilities

D-Link ShareCenter Products - Multiple Remote Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/51918/info D-Link ShareCenter products are prone to multiple remote code-execution vulnerabilities. Successful exploits will result in the execution of arbitrary code in the...

CVE-2012-1049

creationtimestamp| type| source ---|---|--- 2012-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36667 2012-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36666...

CVE-2012-1029

creationtimestamp| type| source ---|---|--- 2012-02-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18466 2012-02-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36790...