WSN Links SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== WSN Links SQL Injection Vulnerability ===================================== I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injectio...

Foxit PDF Reader v4.1.1 Title Stack Buffer Overflow

$Id: foxittitlebof.rb 11096 2010-11-22 17:43:42Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Anup Ghosh on PDF Exploits and Sandboxes

Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks. Podcast audio courtesy of...

Assessing the Adobe Reader X Sandbox

Over the past few years, malicious PDFs have become common place and a prefered vector for attackers. Last week, Adobe announced the release of Reader X – the much anticipated next major release of their ubiquitous document reader, which includes a new security feature called ”Protected Mode”...

CVE-2010-3888

creationtimestamp| type| source ---|---|--- 2010-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15589 2012-07-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19930 2026-06-19 16:45:39+00:00| exploited|...

Adobe Releases Reader X With Sandbox

Adobe has released the much anticipated new version of its Reader software, Adobe Reader X, which includes the new sandboxing feature meant to prevent exploits against the software from affecting other applications on a PC. The new version of Reader, one of the more widely deployed applications...

[TEHTRI-Security] CVE-2010-1752: Update your MacOSX

Gents, During the 1st HITB Amsterdam 2010, TEHTRI-Security made advisories about security issues on handled devices iPhone, HTC, iPad, BlackBerry, etc. As we made penetration tests for more than 15 years on highly sensitive networks, we were luckily able to find vulnerabilities working on those...

VLC Media Player < 1.1.5 Buffer Overflow

The version of VLC media player installed on the remote Windows host is earlier than 1.1.5. Such versions are vulnerable to a stack smashing attack in the Samba network share access module due to an error in the way VLC calls the Windows API function 'WNetAddConnection2A' when opening 'smb://'...

Drive-By Downloads Still Running Wild

For some time now, the browser has been the most dangerous piece of software on the Web, and to hear researchers tell it, the climate it likely to get far worse before it gets any better. The attack landscape has shifted in a lot of important ways in the last few years, but none of the changes ha...

SAP NetWeaver Administrator Panel ECC 6.0 Cross Site Scripting

Digital Security Research Group DSecRG Advisory Application: SAP NetWeaver Administrator panel Versions Affected: SAP NetWeaver Administrator panel from ECC 6.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 07.09.2009 Vendor response: 08.09.2009 Date of Public Advisory: 09.11.2010...

Joomla Component com_forms Multiple Vulnerabilities

Exploit for php platform in category web applications =================================================== Joomla Component comforms Multiple Vulnerabilities =================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title:...

Barracuda Networks Launches Bug Bounty Program for Security Products

Barracuda Networks announced on Tuesday that it will pay over $3,100 to anyone who can hack into its security products. This bug bounty program is the first of its kind from a pure-play security vendor. “This initiative reflects our commitment to our customers and the security community at large,...

WeBid 0.85P1 - Multiple Input Validation Vulnerabilities

WeBid 0.85P1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/44765/info WeBid is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a local file-include vulnerability a...

Barracuda Networks Launches Bug Bounty Program

Following the lead of Mozilla and Google, Barracuda Networks is launching a bug bounty program that will pay out cash rewards for vulnerabilities found in the company’s own products. The move by Barracuda, a maker of mail security and data protection products, is the first such bug bounty program...

CVE-2010-4412

creationtimestamp| type| source ---|---|--- 2010-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35068 2010-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35070 2010-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35069 2010-11-08...

eLouai's Force Download Script file Parameter File Disclosure

The version of eLouai's Force Download Script hosted on the remote web server does not sanitize user-supplied input to the 'file' parameter before using it to return the contents of a file. An unauthenticated, remote attacker can exploit this issue to disclose the contents of sensitive files on t...

Webmedia Explorer HTML Injection Vulnerability

Webmedia Explorer is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentiall...

WSN Links SQL Injection

'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...

Mongoose Web Server <= 2.11 Multiple Directory Traversal Vulnerabilities

Mongoose Web Server is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Yuvraj Singh's forum was hacked by "Kashmiri Exploits Worms"

Yuvraj Singh's forum was hacked by "Kashmiri Exploits Worms". Indishell is thinking that its hacked by "DJ Haxor". Here is the proof of hacking.... Domain: Zone-H - https://zone-h.com/mirror/id/11899291 Shell Uploaded in Yuvraj Singh's site - Found this article interesting? Follow us on Twitter ...