'Protected Mode' Brings Sandbox to Adobe Reader

The next major version of Adobe’s PDF Reader will feature new sandboxing technology aimed at curbing a surge in malicious hacker attacks against the widely deployed software. The security feature, called “Protected Mode,” is similar to the Google Chrome sandbox and Microsoft Office 2010 Protected...

CVE-2010-1214

creationtimestamp| type| source ---|---|--- 2010-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34358 2010-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15027...

CVE-2010-3187

creationtimestamp| type| source ---|---|--- 2010-07-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14409 2010-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14456...

Malware-Spiked Spam Uses Amazon.com Lure

A currently spamvertised malware campaign is brand-jacking Amazon.com, in an attempt to trick end users into visiting a client-side exploits serving URL. Read the full article. ZDNet...

MS Windows Token Kidnapping Problems Resurface

Microsoft’s problems with Token Kidnapping .pdf on the Windows platform aren’t going away anytime soon. More than a year after Microsoft issued a patch to cover privilege escalation issues that could lead to complete system takeover, a security researcher plans to use the Black Hat conference...

ASX to MP3 Converter 3.1.2.1 - Multiple OS ASLR + DEP Bypass (SEH) (Metasploit)

ASX to MP3 Converter 3.1.2.1 - Multiple OS ASLR + DEP Bypass SEH Metasploit Exploit Title: ASX to MP3 Converter v3.1.2.1 SEH Exploit Multiple OS, DEP and ASLR Bypass Date: July 13, 2010 Author: Node Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: Mini-Stream...

Elite CMS 1.01 Cross Site Request Forgery / Cross Site Scripting

Name: Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities Author: 10n1z3d Date: Sat 10 Jul 2010 08:05:44 PM EEST Vendor: http://elitecms.net/ Download: http://elitecms.net/download.php?download=eliteCMS -= CSRF PoC 1 - Change Admin Password =- Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities - Chang...

PHP Bible Search 'bible.php' SQL Injection and Cross Site Scripting Vulnerabilities

PHP Bible Search is prone to SQL injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Joomla! Component Rapid-Recipe - HTML Injection

source: https://www.securityfocus.com/bid/41531/info Joomla! Rapid-Recipe component is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and...

Softwex CMS SQL Injection

+Title: Softwex CMS newsdetails.php SQL Injection Vulnerability + About : ============================================================================== Author : GlaDiaT0R Contact: thegl4di4t0rAThotmailDOTcom or berrahal.ryadhATgmailDOTcom Team : Tunisian Power Team Greetz : ALLAH ! ,...

2RSTUDIO SQL Injection

+Title: 2RSTUDIO Multiple SQL Injection Vulnerability + About : ============================================================================== Author : GlaDiaT0R Contact: thegl4di4t0rAThotmailDOTcom or berrahal.ryadhATgmailDOTcom Team : Tunisian Power Team Greetz : ALLAH ! , Boomrangvictim,...

RSP MP3 Player OCX 3.2 ActiveX Buffer Overflow

Exploit for windows platform in category remote exploits...

CVE-2010-0832

creationtimestamp| type| source ---|---|--- 2010-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14273 2010-07-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14339 2026-06-05 11:01:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87411...

CVE-2010-2701

creationtimestamp| type| source ---|---|--- 2010-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14269 2010-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14539...

CVE-2010-2627

creationtimestamp| type| source ---|---|--- 2010-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14267...

New Firefox Plug-In Will Defeat Flash Attacks

For years now, Adobe Flash files have been a very useful attack vector for hackers and a serious security problem for end users and IT departments. Now, a German researcher is planning to unveil a new browser plug-in designed to prevent many common types of Flash attacks. The plug-in, called...

Zylone IT (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Zylone IT index.php Blind SQL Injection Vulnerability ======================================================= +Title: Zylone IT index.php Blind SQL Injection Vulnerability + About :...

PMS (pvt) CMS Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== PMS pvt CMS Multiple SQL Injection Vulnerability ================================================== +Title: PMS pvt CMS Multiple SQL Injection Vulnerability + About :...

HYM (news_details.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== HYM newsdetails.php SQL Injection Vulnerability ================================================== +Title: HYM newsdetails.php SQL Injection Vulnerability + About :...

2RSTUDIO SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================== 2RSTUDIO SQL Injection Vulnerability ==================================== +Title: 2RSTUDIO Multiple SQL Injection Vulnerability + About :...