Cisco Defines Cybercrime ROI

The Cisco Cybercrime Return on Investment Matrix identifies the innovative and lucrative banking Trojan Zeus, as well as successful Web exploits that have dominated cybercrime as “rising stars.” Read the full article. TechTarget...

CVE-2009-4571

creationtimestamp| type| source ---|---|--- 2009-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10324 2013-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24108...

UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities =========================================================== UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone...

CVE-2009-4231

creationtimestamp| type| source ---|---|--- 2009-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10246...

CVE-2009-4120

creationtimestamp| type| source ---|---|--- 2009-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10224 2009-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33375...

CVE-2009-3576

creationtimestamp| type| source ---|---|--- 2009-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10211 2009-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33273...

CVE-2009-4032

creationtimestamp| type| source ---|---|--- 2009-11-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33374 2009-11-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10234...

CVE-2009-3840

creationtimestamp| type| source ---|---|--- 2009-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10176 2009-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10377...

CVE-2009-4047

creationtimestamp| type| source ---|---|--- 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33355 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33354 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33356 2009-11-16...

Alteon OS BBI (Nortell) - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: Date: Mon, 16 Nov 2009 14:01:04 +0300 Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS an...

Online Ad Site Hacked, Rigged to Serve Exploits

A high-profile online advertising Web site has been hacked and rigged to serve multiple exploits to Microsoft Windows users surfing the net with unpatched third party desktop software. According to a warning issued by Websense Security Labs, the malicious code was found on media-servers.net, whic...

CuteNews 1.4.6 - index.php Multiple Cross-Site Scripting Vulnerabilities

CuteNews 1.4.6 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and...

phpMyAdmin table parameter SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected version: phpMyAdmin phpMyAdmin 3. x phpMyAdmin phpMyAdmin 2.11. x vulnerability describes:BUGTRAQ ID: 3 2 7 2 0 phpMyAdmin is PHP written tool used by the WEB Management of MySQL. phpMyAdmin./ phpmyadmin/libraries/dbtableexists. lib. php file does not properly filter table parameters:...

CuteNews 1.4.6 - result Cross-Site Scripting

CuteNews 1.4.6 - result Cross-Site Scripting source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note...

CVE-2009-4172

creationtimestamp| type| source ---|---|--- 2009-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33340 2009-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10002...

Linux 2.6.x fs/pipe.c local root exploit

No description provided by source. For those who were not yet aware, there is at least 3 public exploits since 11/05/2009 for CVE-2009-3547 targeting all linux kernels from 2.6.0 to 2.6.31 included. Since spender and fotis have already release their own, there is not need for us to keep this on o...

RealNetworks RealPlayer SMIL Cross-Site Scripting (CVE-2003-0726)

SMIL files file extension ".smil" or ".smi" contain XML tags that identify the various multimedia objects to be played. RealPlayer fails to validate the SMIL file's content, and permits objects of type of "javascript", which are then executed in the client. An XSS Cross Site Scripting Vulnerabili...

AWStats migrate Remote Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'AWStats...

Symantec generic PDF detection bypass

No description provided by source. Symantec multiple products - Generic PDF bypass Cheap plug : Speaking of PDF - If you are interested in client-side vulnerabilities visit HACK.LU starting tomorrow 28-30 Oct with : Workshop: Bypassing the Perimeter: Client Side Exploitation - Nitesh Dhanjani,...

McAfee generic PDF detection bypass

No description provided by source. McAfee multiple products - Generic PDF detection bypass Cheap plug : If you are interested in client side vulnerabilities visit HACK.LU starting tomorrow 28-30 Oct with : Workshop: Bypassing the Perimeter: Client Side Exploitation - Nitesh Dhanjani, Billy K Rios...