Oracle Releases Critical Patch for October 2010

Oracle has released its Critical Patch Update for October 2010 to address 85 vulnerabilities across multiple products. This update contains the following security fixes: 7 for Oracle Database Server 8 for Oracle Fusion Middleware 1 for Oracle Enterprise Manager Grid Control 6 for Oracle E-Busines...

MS10-072: Description of the security update for Microsoft Groove Server 2010: October 12, 2010

None None...

Microsoft Releases October Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, .NET Framework, Server Software, Office, and Internet Explorer as part of the Microsoft Security Bulletin Summary for October 2010. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensiti...

Joomla Polix Local File Inclusion

=========================================== Joomla Component compollx LFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 09,2010 + Vendor : N/A + Dork ...

Joomla MGM Remote File Inclusion

=========================================== Joomla Component commgm RFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 09,2010 + Vendor : N/A + Dork :...

Joomla PollXT Remote File Inclusion

=========================================== Joomla Component compollxt RFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 08,2010 + Vendor : N/A + Dork...

Joomla THopper Remote File Inclusion

=========================================== Joomla Component comthopper RFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 08,2010 + Vendor : N/A + Dor...

Oracle Plans Monster Patch Tuesday Release

Oracle will join Microsoft on next week’s Patch Tuesday freight train and it will be another mega-release. The database server giant says in a pre-release announcement that it will patch a whopping 81 vulnerabilities, some serious enough to be remotely exploitable without authentication over a...

Joomla Picasa2 Local File Inclusion

======================================================= Joomla Component comjoomlapicasa2 LFI Vulnerability ======================================================= + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktobe...

Joomla Component com_jeformcr LFI Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Component comjeformcr LFI Vulnerability =============================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail :...

Joomla Component com_lurm RFI Vulnerability

Exploit for php platform in category web applications =========================================== Joomla Component comlurm RFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail :...

Joomla Lurm Remote File Inclusion

======================================================= Joomla Component comlurm RFI Vulnerability ======================================================= + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 07,2010...

Oracle Releases Pre-Release Announcement for October 2010

Oracle has issued a critical patch update pre-release announcement indicating that its October release will contain 81 new vulnerability fixes. Release of the critical patch update is scheduled for Tuesday, October 12, 2010. US-CERT encourages users and administrators to review the pre-release...

Microsoft Releases Advance Notification for October Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its October release will contain sixteen bulletins. Four bulletins will have the severity rating of critical and will be for Microsoft Windows and Internet Explorer. Ten bulletins will have the severity rating of...

(CORE-2010-0701) Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability 1. Advisory Information Title: Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability Advisory Id:...

ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability

ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-193 October 6, 2010 -- CVE ID: CVE-2010-3632 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Acrobat --...

Day-Con

Dayton, Ohio When I say “Dayton,Ohio,” what image comes to mind? Hacking, right? If not, then you’ve never been to Day-Con, the annual Ohio-based hacker con now in its fourth year. This year’s Day-Con is scheduled for October 22nd and 23rd, with three days of training preceding the main conferenc...

PHP Category SQL Injection

======================================================= PHP Category categoryid SQL Injection Vulnerability ======================================================= Exploit Title: PHP Category categoryid SQL Injection Vulnerability Date: oktober 02, 2010 Author: josalijoe Category? : PHP Category...

New Adobe PDF Zero-Day Flaw Under Attack

Adobe today sounded an alarm for a new zero-day flaw in its PDF Reader/Acrobat software, warning that hackers are actively exploiting the vulnerability in-the-wild. Details on the vulnerability are not yet public but the sudden warning from Adobe is a sure sign that rigged PDF documents are being...

Hijacked Brands Grew in 2009 Phishing Attacks

The Anti-Phishing Working Group APWG released its Q4, 2009 Phishing Activity Trends Report, which reveals that eCrime syndicates are expanding the base of brands they exploit for online fraud far beyond major financial institutions and online merchants, with the number of hijacked brands reaching...