7089 matches found
Kerio Connect < 7.0.0 Products Administration Console File Disclosure and Corruption Vulnerabilities
According to its banner, the remote host is running a version of Kerio Connect or Kerio MailServer as it was formerly known prior to 7.0.0. Successful exploitation of remote file disclosure and corruption vulnerabilities in the administration console of such versions could allow an attacker to...
Why the Disclosure Debate Doesn't Matter
As the events of recent weeks have shown, there is no better way to start a dumpster fire of an argument among a group of security people than to bring up the hideous, threadbare topic of full disclosure. No one is ambivalent about it; everyone has an opinion, and usually a strong one. But what’s...
CVE-2010-2020
creationtimestamp| type| source ---|---|--- 2010-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14002 2010-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14003...
CVE-2010-1199
creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34192 2010-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14949...
CVE-2010-2439
creationtimestamp| type| source ---|---|--- 2010-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13934 2010-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13942 2010-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14397...
VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities (CVE-2010-2167)
VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities CVE-2010-2167 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Flash Player is a cross-platform browser-based application runtime that delivers uncompromised viewin...
CVE-2010-5045
creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13880...
Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)
The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...
Tool Expoits Data Flaws in JavaServer Faces
Researchers have released software that exposes private information and executes arbitrary code on sensitive websites by exploiting weaknesses in the widely used web development technology JavaServer Faces. Read the full article. The Register...
SAP NetWeaver Workflow Modeler - Multiple XSS
Application: SAP NetWeaver Workflow Modeler Versions Affected: SAP NetWeaver NW2004s SP6 Workflow Modeler Vendor URL: http://www.sap.com Bugs: XSS Exploits: YES Reported: 06.08.2010 Vendor response: 07.08.2010 Date of Public Advisory: 12.02.2014 Reference: SAP Security Note 1860923 Author:...
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
This module exploits a vulnerability found in Excel 2002 of Microsoft Office XP. By supplying a .xls file with a malformed OBJ recType 0x5D record an attacker can get the control of the execution flow. This results in arbitrary code execution under the context of the user. Module Options msf use...
SAP Crystal Reports 2008 — Multiple XSS
Application: SAP Crystal Report Server 2008 Versions Affected: AP Crystal Report Server 2008 Vendor URL: http://www.sap.com Bugs: Linked XSS Vulnerability Exploits: YES Reported: 06.08.2010 Vendor response: 07.08.2010 Date of Public Advisory: 09.03.2011 Author: Dmitriy Chastuhin Description...
Anatomy of the Eleonore Exploit Kit
LIMASSOL, CYPRUS–When an unknown attacker compromised three domains belonging to the U.S. Bureau of Engraving and Printing last month, it became big news, mainly for the brazenness of the attack against a federal Web site. The bigger news, however, turned out to be that the attack involved the us...
clickartweb Design - SQL Injection
clickartweb Design SQL Injection Vulnerability Vendor: http://www.clickartweb.com Discovered by : cyberlog Site : Sekuritionline.net Channel : SekuritiOnline Now Just My Bot :P Dork : "diseño y programación Clickart" Exploit : site/quisom.php?id=SQL Injection site/eobregrupolleal.php?id= SQL...
DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
No description provided by source. Advisory: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ----------------------------- URL: http://websecurity.com.ua/4248/ ----------------------------- Affected products: Mozilla Firefox, Internet Explorer 6, Internet Explorer 8, Google...
SyncBack Profile File Remote Buffer Overflow
The remote Windows host contains a version of SyncBack that is earlier than 3.2.21. Such versions are prone to a remote buffer overflow attack. An attacker may exploit this issue to execute arbitrary code in the context of the vulnerable application by tricking the user into importing a malicious...
(Gabriel's FTP Server) Open & Compact FTP Server 1.2 - 'PORT' Remote Denial of Service
============================================================================= Tilte: Open&Compact Ftp Server 1.2 "PORT" command Remote Denial of Service. ============================================================================= Date....................: 22-05-2010 Author..................:...
Q&A: HD Moore on Metasploit, Disclosure and Ethics
We conducted our third live chat this week, this one with HD Moore, the founder of the Metasploit Project and the CSO of Rapid7. Moore got a lot of great questions on a wide variety of topics, so if you weren’t able to join us, here’s a full transcript of the chat. Dennis Fisher: Hi everyone, and...
CVE-2010-2126
creationtimestamp| type| source ---|---|--- 2010-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34016 2010-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34017...
LinksAutomation Multiple Remote Vulnerabilities
----------------In The Name Of God------------ LinksAutomation Multiple Remote Vulnerabilities AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Google D0rk: "Powered By LinksAutomation" Sql Injection: --------- Exploit=...