Malware Rises With Smartphone Adoption

Researchers are closely watching the rise of malware on Internet-enabled mobile devices. New mobile malware boasts a broad range of functionality, including the capability to download other malicious files, detect internet connections or establish new ones, undertake URL redirection and carry out...

Apple Safari Flaw from 2008 Still Open

After more than two years, Apple’s Safari browser for Macs remains vulnerable to attacks that allow websites to litter a user’s hard drive with thousands of malicious files. The “carpet bomb” vulnerability was publicly disclosed in May 2008 after members of Apple’s security team said they didn’t...

Microsoft Visual Basic for Applications Text Parsing Stack Buffer Overflow Vulnerability

Description Microsoft Visual Basic for Applications VBA is prone to a remote stack-based buffer-overflow vulnerability because of an error related to searching for embedded ActiveX controls within a Microsoft Office document. An attacker could exploit this issue to corrupt stack memory and execut...

Novell ZENworks Configuration Management UploadServlet Remote Code Execution

Added: 05/10/2010 BID: 39114 OSVDB: 63412 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...

[20100423] - Core - Installer Migration Script

The migration script in the Joomla! installer does not check the file type being uploaded. If the installation application is present, an attacker could use it to upload malicious files to a server...

JBS 2.0 Administrative Bypass / File Upload

Administration panel bypass and Malicious File Upload Vulnerability JBS v2.0 JBSX and other Jiro's Products Google Dork: "inurl:/files/redirect.asp" Go to url files/login.asp admin 'or' '=' password 'or' '=' H4ckers may upload malicious files by using upload panel as they have administrator acces...

Multiple Panda Security Products Local Privilege Escalation Vulnerability

No description provided by source. Application: Panda Global Protection 2010 Panda Internet Security 2010 Platforms: Windows XP Professional SP & windows Vista SP1 Exploitation: Local Privilege Escalation Date: 2009-10-27 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical...

Rising Antivirus 2009 Privilege Escalation

No description provided by source. Application: Rising Antivirus 2009 Platforms: Windows XP Professional SP2 Exploitation: Privilege Escalation Date: 2009-10-26 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code N/A =============== 1 Introduction...

Facebook Password-Reset Spam is Botnet Attack

Virus hunters are raising the alarm for a large-scale spam attack that uses fake Facebook password-reset messages to trick PC users into downloading a dangerous piece of malware. The malicious executable is linked to the Bredolab botnet, which has been linked to massive spam runs and identity-the...

Adobe Acrobat Unspecified vulnerability

Adobe Acrobat is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat Unspecified vulnerability

This host has Adobe Acrobat installed which is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbadobeacrobatunspecifiedvuln.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Acrobat Unspecified vulnerability Authors: Nikta MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

MDaemon Content Filter Directory Traversal

MDaemon is a Windows-based email server that provides full mail server functionality. MDaemon supports the SMTP, IMAP and POP3 protocols. MDaemon provides Content Filter functionality to filter incoming email messages based on the headers and message content. RFC 2183 defines header fields in a...

Microsoft GDI+ Malformed Office BMP File Integer Overflow Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes BMP files in Microsoft Office documents. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user...

Zortam MP3 Media Studio 9.40 - Multiple Memory Corruption Vulnerabilities

Zortam MP3 Media Studio 9.40 - Multiple Memory Corruption Vulnerabilities !/usr/bin/perl Title: Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities Product web page: http://www.zortam.com Desc: Zortam MP3 Studio version 9.40 suffers from a memory corruption attack from two...

Trojan: Gen-Trojan.Heur

Gen-Trojan.Heur is a Trojan that creates and downloads malicious files on the victim's machine. It spreads by emails or other Trojans...

Trickler: Trojan.Downloader.Delf.RGL

Trojan.Downloader.Delf.RGL is a Trickler that downloads and installs malicious files and unwanted content from remote servers onto the victim's machine without their consent...

Microsoft Office Works for Windows Document Converters Remote Code Execution Vulnerability

Description Microsoft Office Works for Windows document converters are prone to a remote code-execution vulnerability because the application fails to properly handle specially crafted files. An attacker could exploit this issue by enticing a victim to open a malicious '.wps' file. Successful...

Winds3D Viewer 3 - GetURL() Arbitrary File Download

Winds3D Viewer 3 - GetURL Arbitrary File Download source: https://www.securityfocus.com/bid/35595/info Winds3D Viewer is prone to a vulnerability that can allow malicious files to be downloaded an executed within the context of the affected browser that uses the plugin. Successfully exploiting th...

Microsoft PowerPoint Invalid Record Type Integer Overflow Vulnerability

Description Microsoft PowerPoint is prone to an integer-overflow vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

FeedMon 2.7.0.0 outline Tag Buffer Overflow Exploit PoC

No description provided by source. !usr/bin/perl -w Reference: http://security.bkis.vn/?p=329 http://www.securityfocus.com/bid/33630/info Tested on Windows Server 2003 with FeedMon 2.7.0.0. FeedMon crashes whenever I am trying to Unsubscribe from the maliciousoverlylong feed. Thanx to milw0rm,...