CVE-2009-3225

creationtimestamp| type| source ---|---|--- 2009-06-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33117 2009-06-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33116...

Password Stealers Riding Along with DirectShow Exploits

On May 28, our colleagues at The Microsoft Security Response Center released advisory 971778 which elaborated on a new vulnerability in Microsoft DirectShow effecting Windows 2000, Windows XP and Windows Server 2003. You can obtain more details on how to protect your environment from this...

Oracle BI help page - XSS

Application: Oracle Business Intelligence Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: http://www.oracle.com Bugs: XSS/phishing credentials Exploits: YES Reported: 26.06.2009 Vendor response: 27.06.2009 Last response: 30.06.2009 Patched: 16.10.2012 Dat...

PHP Address Book 4.0.x SQL Injection

-------------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --PHP-AddressBook v-4.0.X-- -------------------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/php-addressbook/ --DOWNLOAD:...

AlumniServer 1.0.1 SQL Injection

--------------------------------------------------------- SQL INJECTION VULNERABILITY --AlumniServer v-1.0.1-- --------------------------------------------------------- CMS INFORMATION: --WEB: http://www.alumniserver.net/ --DOWNLOAD: http://www.alumniserver.net/ --DEMO: N/A --CATEGORY:...

AlumniServer 1.0.1 - Authentication Bypass

AlumniServer 1.0.1 - Authentication Bypass || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!...GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH!...

CVE-2009-2882

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33106 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33108 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33107 2009-06-24...

CVE-2009-3513

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33121 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33120 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33119...

CVE-2009-0714

creationtimestamp| type| source ---|---|--- 2009-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9007 2009-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9006...

CVE-2009-4690

creationtimestamp| type| source ---|---|--- 2009-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33098 2009-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33097...

PHP 5.2.10 safe_mode Bypass

PHP safemode bypass with exec/system/passthru Once again php public new version :php5.2.10 ,and it fix lots of bugs, like this : Bug 45997safemode bypass with exec/system/passthru incorrect fix php5.2.10 ... b = strrchrcmd, PHPDIRSEPARATOR; ifdef PHPWIN32 if b && b == '\' && b == cmd...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:134)

Security vulnerabilities have been discovered and corrected in Mozilla Firefox 3.x : CVE-2009-1392: Firefox browser engine crashes CVE-2009-1832: Firefox double frame construction flaw CVE-2009-1833: Firefox JavaScript engine crashes CVE-2009-1834: Firefox URL spoofing with invalid unicode...

CVE-2009-2286

creationtimestamp| type| source ---|---|--- 2009-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8982 2009-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9302...

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion Denial of Service !/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploits found with this code can be found at http://www.securityscraper.com/ Released under the VoIPER project Do not hesitate to show enthusiasm and support...

CVE-2009-2134

creationtimestamp| type| source ---|---|--- 2009-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8941...

MS09-021: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

The remote host contains a version of Microsoft Excel / Excel Viewer / 2007 Microsoft Office system or the Microsoft Office Compatibility Pack that is affected by several buffer overflow and memory corruption vulnerabilities. If an attacker can trick a user on the affected host into opening a...

KLA10033 Multiple ACE vulnerabilities in Adobe Acrobat & Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat & Reader. getAnnots and customDictionaryOpen methods in JavaScript API can be exploited to cause denial of service or execute arbitrary code through a specially designed pdf file. Original advisories Adobe bulletin Exploitation...

CVE-2009-1140

creationtimestamp| type| source ---|---|--- 2009-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33024...

Microsoft Windows Search Script Injection Vulnerability

Description Microsoft Windows Search is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied input when previewing search results. Successful exploits will cause malicious script code to run in the local context, allowing attackers to steal potentially...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES...