BitDefender IS2011 - FV Buffer Overflow Vulnerability

Document Title: =============== BitDefender IS2011 - FV Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=147 Release Date: ============= 2011-08-29 Vulnerability Laboratory ID VL-ID: ==================================== 147...

CentOS Update for samba CESA-2009:1529 centos4 i386

Check for the Version of samba OpenVAS Vulnerability Test CentOS Update for samba CESA-2009:1529 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Code injection

The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page, which allows remote attackers to have an unspecified impact via a crafted extension...

Fedora 14 : java-1.6.0-openjdk-1.6.0.0-54.1.9.9.fc14 (2011-9523)

PR744: icedtea6-1.10.2 : patching error - PR748: Icedtea6 fails to build with Linux 3.0. - RH718164, CVE-2011-2513: Home directory path disclosure to untrusted applications Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

7000 law enforcement officers details leaked by Anonymous Hackers

7000 law enforcement officers details leaked by Anonymous Hackers AntiSec and Anonymous Hackers announced via Twitter that they absconded with up to 10 Giga Bytes of confidential information, including protected witnesses. They have posted more than 7,000 law enforcement officials' private...

icedtea-web: home directory path disclosure to untrusted applications

The Java Network Launching Protocol JNLP implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader...

Fedora 15 : icedtea-web-1.0.4-1.fc15 (2011-9541)

This security fix that addresses the following issues : - RH718164: Home directory path disclosure to untrusted applications - RH718170: Java Web Start security warning dialog manipulation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Turkish Takedown Thursday - 74 Turkish websites defaced by #Antisec

Turkish Takedown Thursday - 74 Turkish websites defaced by Antisec Once again Antisec strikes. This time the mission was "Turkish Takedown Thursday ". Anonymous hackers deface 74 Turkish websites for the name of Antisec with a message on home page of every website as shown above pic. Hacked 74...

Daemon Tools Lite 4.40.2.0.0131 DLL Hijacking Exploit

Exploit for windows platform in category local exploits Exploit Title : Daemon Tools Lite 4.40.2.0.0131 DLL Hijacking Exploit Software link : http://www.disc-tools.com/download/daemon Version : 4.40.2.0.0131 Tested on : Windows 7 Home Premium x86 Date : 6/07/2011 Author : X-h4ck Website :...

Word List Builder Buffer Overflow Exploit (SEH)

No description provided by source. Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch4m Hicham...

Opera Web Browser 11.11拒绝服务漏洞

Bugtraq ID: 48262 Opera Web Browser是一款开源的WEB服务器。 Opera Web Browser不正确处理特制HTML元素，远程攻击者构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 Opera Web Browser 11.11 厂商解决方案 目前没有详细解决方案提供： http://www.opera.com/ html body iframe src=about:blank id=bo0om style="width:0px;height:0px;border:0px none;"/iframe script...

Opera Web Browser 11.11 Remote Crash

Exploit for windows platform in category dos / poc / Opera 11.11 Remote Crash Software link: http://www.opera.com/download/ Tested on: Win32 xp home sp 3 CVE : null Im too lazy to deep analyze this ,but i thing is just unexploitable crash so fjixvt dla klechis³awa i jego kosiarki :i / var a =...

PHP-Nuke 8.3 - upload.php Arbitrary File Upload (1)

PHP-Nuke 8.3 - upload.php Arbitrary File Upload 1 source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code a...

PHP-Nuke 8.3 - upload.php Arbitrary File Upload (2)

PHP-Nuke 8.3 - upload.php Arbitrary File Upload 2 source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code a...

PHP-Nuke 8.3 - 'upload.php' Arbitrary File Upload (1)

source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process...

Easy Ftp Server v1.7.0.2 Post-Authentication BoF

Exploit for windows platform in category remote exploits !/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF Original Author: dookie2000ca || Windows XP SP3 Professional Author: b33f Windows XP Home SP1 Software link:...

Easy FTP Server 1.7.0.2 Buffer Overflow

!/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF Original Author: dookie2000ca || Windows XP SP3 Professional Author: b33f Windows XP Home SP1 Software link: http://cdnetworks-us-2.dl.sourceforge.net/project/easyftpsvr/easyftpsvr/1.7.0.2-en/easyftpsvr-1.7.0.2.zip import...

A-PDF WAV To MP3 Converter 1.2.0 DEP Bypass

Exploit Title: A-PDF Wav to MP3 Converter v 1.2.0 DEP Bypass Software Link: http://www.a-pdf.com/wav-to-mp3/a-pdf-wtm.exe Version: 1.2.0 Tested on: Win XP SP3 French Date: 12/05/2011 Author: h1ch4m Hicham Oumounid Email: [email protected] Home: http://net-effects.blogspot.com Big thanks to...

A-PDF All to MP3 Converter 2.0.0 - DEP Bypass

A-PDF All to MP3 Converter 2.0.0 - DEP Bypass Exploit Title: A-PDF All to MP3 Converter v.2.0.0 DEP Bypass Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 2.0.0 Tested on: Win XP SP3 French Date: 12/05/2011 Author: h1ch4m Email: [email protected] Home:...

Z-blog 1.8 web path information disclosure vulnerability and fix-vulnerability warning-the black bar safety net

Affected version: Z-blog 1.8 Vulnerability description: Z-blog is based on Asp platform Blog blogweblogprogram Z-blog using the default editor there is a path information disclosure vulnerability Test method:...