Asterisk 1.8.x SIP User Enumeration

Asterisk 1.8.4.4, sip response permit username identification through use INVITE Author: francesco.tornieri "At" verona-wireless.net Summary: Sip responses permit user identification Reference: http://downloads.asterisk.org/pub/security/AST-2011-011.pdf Release Date: 30/06/2011 Criticality level:...

Adobe Device Central CS4 DLL Hijacking Exploit

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Remote Desktop Connection WinXP SP3 DLL Hijacking Exploit

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Avira AntiVir Personal V10.00.12 DLL Hijacking Exploit

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: Photogallery cegallery, SEO Photogallery by Evorion evgallery Release Date: June 14, 2011 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with neither significant...

[SECURITY] Fedora 15 Update: jabberd-2.2.14-1.fc15

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

CVE-2011-1812

Google Chrome before 12.0.742.91 allows remote attackers to bypass intended access restrictions via vectors related to extensions...

CVE-2011-1815

Google Chrome before 12.0.742.91 allows remote attackers to inject script into a tab page via vectors related to extensions...

CVE-2011-1812

Google Chrome before 12.0.742.91 allows remote attackers to bypass intended access restrictions via vectors related to extensions...

Design/Logic Flaw

Google Chrome before 12.0.742.91 allows remote attackers to bypass intended access restrictions via vectors related to extensions...

Code injection

Google Chrome before 12.0.742.91 allows remote attackers to perform unspecified injection into a chrome:// page via vectors related to extensions...

CVE-2011-1815

Google Chrome before 12.0.742.91 allows remote attackers to inject script into a tab page via vectors related to extensions...

Design/Logic Flaw

Google Chrome before 12.0.742.91 allows remote attackers to inject script into a tab page via vectors related to extensions...

CVE-2011-1819

Google Chrome before 12.0.742.91 allows remote attackers to perform unspecified injection into a chrome:// page via vectors related to extensions...

CVE-2011-1815

Google Chrome before 12.0.742.91 allows remote attackers to inject script into a tab page via vectors related to extensions...

CVE-2011-1819

Google Chrome before 12.0.742.91 allows remote attackers to perform unspecified injection into a chrome:// page via vectors related to extensions...

CVE-2011-1819

Removed by vendor...

CVE-2011-1812

Removed by vendor...

CVE-2011-1815

Removed by vendor...

CVE-2011-1812

Google Chrome CVE-2011-1812 affects Chrome pre-12.0.742.91. The vulnerability is an extensions-permission bypass that lets remote attackers bypass access restrictions via extensions. Public details in NVD state the issue; ThreatPost confirms Chrome 12.0.742.91 fixes multiple chrome vulnerabilitie...