Symantec Norton Internet Security 2003 6.0.4 .34 Error Message Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8904/info It has been reported that Symantec Norton Internet Security is prone to a cross-site scripting vulnerability. The issue is reported to exist when the software blocks a restricted website and an error message...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow

No description provided by source. $Id: nis2004get.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Symantec Norton Internet Security 2003 ICMP Packet Flood DoS

No description provided by source. source: http://www.securityfocus.com/bid/6598/info Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive approximately 65500 or more number of ICMP packet...

Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/20360/info Symantec AntiVirus is prone to a privilege-escalation vulnerability. Local attackers can exploit this issue to corrupt memory and execute arbitrary code with kernel-level privileges. Successful exploits may...

Lighttpd <= 1.4.16 FastCGI Header Overflow Remote Exploit

No description provided by source. / Remote Lighttpd + FastCGI + PHP example exploit Tested with Lighttpd 1.4.16 and PHP 5.2.4 To avoid abuse there's a remove me in the code. Example: ./exploit localhost 80 /etc/passwd or wget --referer=?php system'/usr/bin/id'; ? localhost ./exploit localhost 80...

AVG Internet Security 2011 Safe Search for IE DoS

No description provided by source. !-- Title : AVG Internet Security 2011 Safe Search for IE DoS Found By : DrIDE COM Object ID : 3CA2F312-6F6E-4B53-A66E-4E65E497C8C0 AVG Safe Search Module for IE COM Object Filename : C:\Program Files\AVG\AVG10\avgssie.dll File Version : 10.0.0.1151 Tested On :...

Multiple MicroWorld eScan Products Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with...

Avira Internet Security avipbb.sys Filter Bypass and Privilege Escalation

No description provided by source. Exploit Title: Avira internet security avipbb.sys filter bypass and privilege escalation - 0Day Date: 2013-10-17 Exploit Author: Ahmad Moghimi http://mallocat.com http://mallocat.com/, https://twitter.com/mall0cat Vendor Homepage: http://www.avira.com/ Software...

Panda Internet Security/Antivirus+Firewall 2008 - CPoint.sys Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28150/info Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because the application fails to sufficiently validate...

vBulletin DoS - all version

No description provided by source. DOS Vbulletin 92% Works ; Tested on all versions! and can DOS the server Perl Script use Socket; if @ARGV 2 &usage $rand=rand10; $host = $ARGV0; $dir = $ARGV1; $host = s/http:////eg; for $i=0; $i10; $i-- $user=vb.$rand.$i; $data = s= ; $len = length $data; $foo...

Internet Security Systems ICECap Manager 2.0.23 Default Username and Password

No description provided by source. source: http://www.securityfocus.com/bid/1216/info ICECap Manager is a management console for BlackICE IDS Agents and Sentries. By default, ICECap Manager listens on port 8081, transmits alert messages to another server on port 8082, and has an administrative...

SkyBlueCanvas CMS 1.1 r248-03 - Remote Command Execution

No description provided by source. Vulnerability in SkyBlueCanvas CMS Vulnerability Type: Remote Command Injection Version Affected: 1.1 r248-03 and probably prior versions Discovered by: Scott Parish - Center for Internet Security Vendor Information: SkyBlueCanvas is an easy-to-use Web Content...

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow (0day)

No description provided by source. / Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link: http://shop.ca.com/ca/products/internetsecurity/internetsecuritysuite.asp Version: up to...

Trend Micro Internet Security 2010 ActiveX Remote Exploit (UfPBCtrl.DLL)

No description provided by source. !-- Title: Trend Micro Internet Security Pro 2010 ActiveX Unicode Remote Exploit Version: UfPBCtrl.DLL ver 17.50.0.1366 XPSP3 English Version: UfPBCtrl.dll ver 17.50.0.1647 XPSP3 English -- Hotfix release Coded By: DrIDE Credits: Abyssec Tested: XPSP3 English +...

Internet Security Systems 3.6 BlackICE Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19800/info Internet Security Systems ISS BlackICE PC Protection is prone to a local denial-of-service vulnerability because the application fails to properly sanitize user-supplied input. This vulnerability allows local...

Kaspersky Internet Security 2013 - Denial of Service Vulnerability

No description provided by source. I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky...

Yahoo Toolbar Vulnerability Triggers Non-Exploitable XSS Payload on All Websites

Yahoo offers a web browser toolbar which includes apps for leading sites like Facebook, Yahoo! Mail, Weather and News. Yahoo Toolbar also known as Y! Toolbar is available for Internet Explorer, Firefox and Google Chrome web browsers. Yahoo Toolbar is one of the most popular and widely installed w...

Easy File Management Web Server v5.3 - UserID Remote Buffer Overflow (ROP)

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Easy File Management Web Server v5.3 - USERID Remote Buffer Overflow ROP Version: 5.3 Date: 2014-05-31 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link:...

Meet myBulletins: an online security bulletin customization service

Microsoft is committed to promoting a safer, more trusted Internet and providing monthly security updates is one of the ways our customers keep their devices and connections to the Internet more secure. Packaging updates together into a monthly bulletin cycle stems from customer feedback and offe...

CVE-2014-3450

Unspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and earlier, Internet Security 2014 19.01.01 and earlier, and AV Pro 2014 13.01.01 and earlier allows local users to gain privileges via unspecified vectors...