VUPEN Security Research - Microsoft Office Excel RealTimeData Array Indexing Vulnerability (CVE-2010-3240)

VUPEN Security Research - Microsoft Office Excel RealTimeData Array Indexing Vulnerability CVE-2010-3240 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Excel is a powerful tool you can use to create and format spreadsheets, and analyze and share...

VUPEN Security Research - Microsoft Office Word Document Invalid Pointer Vulnerability (CVE-2010-3217)

VUPEN Security Research - Microsoft Office Word Document Invalid Pointer Vulnerability CVE-2010-3217 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability ...

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability (CVE-2010-2750)

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability CVE-2010-2750 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability t...

Exploit Hub Aims to be iTunes for Exploits

It’s been tried before, but NSS Labs founder Rick Moy says his company’s new Exploit Hub – a store front for exploit code – can work. In an interview with Threatpost.com, he explains why the current market for exploits doesn’t work for the good guys, and why zero day exploits don’t help anyone...

Oracle Fixes 29 Bugs in Huge Java Update

Oracle has released a slew of patches for its Java platform, fixing a total of 29 bugs in Java SE and Java for Business. Several of the flaws allow a remote attacker to take complete control of a vulnerable machine. Java is among the more widely deployed technologies on the Web and it is now a...

CVE-2010-4371

creationtimestamp| type| source ---|---|--- 2010-10-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15248 2010-10-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15287 2010-10-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15312...

Collabtive Cross Site Scripting and HTML Injection Vulnerabilities

Collabtive is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the...

Microsoft Word Record Value Parsing (CVE-2010-3221) Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Imageview <= 6.x Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================ Imageview = 6.x Multiple Remote Vulnerabilities ================================================ || || | || o,7 || . o7 || 4||| ow, : / /...

Adobe Details Reader Protected Mode Sandbox

Adobe officials have said that the next version of Reader, one of the more popular and oft-targeted applications on the Internet right now, will have a sandboxing feature, and now the company is providing a detailed description of the new Protected Mode addition. Adobe’s Brad Arkin, the director ...

Default Password (nagiosxi) for 'root' Account

It is possible to SSH into the remote Nagios XI virtual machine appliance by providing default credentials. A remote attacker could exploit this to gain complete control of the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

RHEL 4 : kernel (RHSA-2010:0718)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0718 advisory. - kernel: 64-bit Compatibility Mode Stack Pointer Underflow CVE-2010-3081 Note that Nessus has not tested for this issue but has instead relied only ...

Security B-Sides

Various Cities Springing up in the shadow of larger, fatter, richer security shows like RSA and Black Hat, the Security B-Sides is more like a security-focused salon than a traditional conference. A movable feast of some of the top security minds, it combines rapid fire presentations on threats a...

Source Conferences

Boston, Massachusetts and Barcelona, Spain Somewhere between DEFCON and RSA, you find the Source Conferences. A relative newcomer to the security scene, these multi-track annual shows in Boston and Barcelona blend industry focused sessions from venture capitalists and executives with presentation...

Windows 7 Microsft Power Point 2007 DLL Hijacking Exploit

Exploit for windows platform in category local exploits...

CVE-2010-2553

creationtimestamp| type| source ---|---|--- 2010-09-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15112 2010-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15122...

CVE-2010-1248

creationtimestamp| type| source ---|---|--- 2010-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15019 2010-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15065...

AContent 1.0 - Cross-Site Scripting HTML Injection

AContent 1.0 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/43238/info AContent is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically...

Proventia Network Mail Security System CRLF Injection

Security Advisory: MVSA-10-009 / CVE-2010-0155 Vendor: IBM Products: Proventia Network Mail Security System Vulnerabilities: CRLF Injection Risk: Medium Attack Vector: From Remote Authentication: Required Reference: http://www.ventuneac.net/security-advisories/MVSA-10-009 Description Web-based...

MS10-061: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290) (EMERALDTHREAD)

The version of the Print Spooler service on the remote Windows host is affected by a service impersonation vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code on a Windows XP system to escalate privileges on all other supported Windows systems. EMERALDTHREAD is...