2432 matches found
JVN#34980730: A-Form vulnerable in restricting access
A-Form is a plug-in for Movable Type that adds mail forms and survey forms. A-Form contains a vulnerability in restricting access permissions. Impact Information managed by A-Form may be altered by a user who does not have administrative privileges. Solution Update the Software Update to the late...
Pc Web Agency (prodotto.php?id) Remote SQL injection Vulnerability
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Pc Web Agency prodotto.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.pcwebagency.it/ Persian Gulf 4 Ever! Dork : "Powered by Pc Web Agency"...
Pc Web Agency SQL Injection
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Pc Web Agency prodotto.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.pcwebagency.it/ Persian Gulf 4 Ever! Dork : "Powered by Pc Web Agency"...
SSDownloader : 50 Free Essential Security Tools
SSDownloader : 50 Free Essential Security Tools SSDownloader is an easy-to-use tool which allows you to download up to 50 major security applications in just a few clicks. If you're setting up a new PC, for instance, then normally you might visit the websites of your favourite security vendors,...
FBI Begins Purging Coreflood Infected PCs
The FBI has issued some 19,000 uninstall commands to the computers of 24 individuals infected by the Coreflood botnet, effectively purging their machines of that malware, and leaving behind no unintended consequences thus far according to a report from Brian Krebs. This move was made possible by...
Hyperactive PC Admin Auth Bypass
Exploit for asp platform in category web applications Exploit Title:Hyperactive PC Admin Auth Bypass Date: 17/6/2011 Author: Angel Injection & Noor Al-Iraqia home Page: http://www.club-h.co.cc Email: Angel-Injectionathotmail.com Vendor or Software Link:n/a Version: n/a Category:: webapps Google...
Invisionix Roaming System Remote metasys 0.2 LFI Vulnerability
Exploit for php platform in category web applications Site ................... : http://sourceforge.net/projects/irsr/ Download ............... : http://space.dl.sourceforge.net/project/irsr/irsr/irsr-0.2/irsr-0.2.ZIP Author ................. : Treasure Priyamal Contact ................ :...
Invisionix Roaming System Remote metasys 0.2 - Local File Inclusion
Invisionix Roaming System Remote metasys 0.2 - Local File Inclusion nvisionix Roaming System Remote metasys 0.2 LFI Vulnerability Site ................... : http://sourceforge.net/projects/irsr/ Download ............... : http://space.dl.sourceforge.net/project/irsr/irsr/irsr-0.2/irsr-0.2.ZIP...
CVE-2011-1327
The Keystroke Encryption feature in Trend Micro Internet Security 2009 aka Virus Buster 2009 and PC-cillin 2009 does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger...
Microsoft Reader 2.1.1.3143 - Integer Overflow (2)
Microsoft Reader 2.1.1.3143 - Integer Overflow 2 Source: http://aluigi.org/adv/msreader3-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: = 2.1.1.3143 PC version = 2.6.1.7169 Origami version the non-PC versions have not been tested Platforms: Windows,...
Microsoft Reader 2.1.1.3143 - Null Byte Write
Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: | 8D47 01 |LEA EAX,DWORD PTR DS:EDI+1 ; size at offset 0xbd of the PoC 5FFF634D |. 50 |PUSH EAX 5FFF634E |. E8 2B470000 |CALL ; malloc...
Microsoft Reader 2.1.1.3143 - Heap Overflow
Microsoft Reader 2.1.1.3143 - Heap Overflow Source: http://aluigi.org/adv/msreader2-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: 8B8...
Microsoft Reader 2.1.1.3143 - Array Overflow
Microsoft Reader 2.1.1.3143 - Array Overflow Source: http://aluigi.org/adv/msreader4-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: = 2.1.1.3143 PC version = 2.6.1.7169 Origami version the non-PC versions have not been tested Platforms: Windows,...
Microsoft Reader 2.1.1.3143 - Integer Overflow (1)
Source: http://aluigi.org/adv/msreader1-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: 8B7B 68 MOV EDI,DWORD PTR DS:EBX+68 01083071 |. 8BF7 MOV ESI,EDI 01083073 |. C1E6 04 SHL ESI,4 01083076 |. 837D 08 00...
Mega-D: March, 2010
The takedown of Mega-D, also known as Ozdok, was spearheaded by researchers at anti-botnet firm FireEye. The botnet, a byproduct of PC infections linked to the Mega-D Trojan, comprised tens of thousands of machines and was responsible for sending out a large portion of the spam on the Internet–at...
NetSupport Manager Client Remote Handshake Messages Buffer Overflow (CVE-2011-0404)
NetSupport Manager is a remote PC support and desktop management system which functions on many platforms. It is considered as a replacement for typical remote desktop applications such as Windows Terminal Service. A buffer overflow vulnerability has been reported in NetSupport Manager client...
Microsoft Windows Kernel整数截断本地权限提升漏洞
BUGTRAQ ID: 46136 CVE ID: CVE-2011-0045 Windows是微软发布的非常流行的操作系统。 Windows Kernel在实现上存在本地权限提升漏洞，攻击者可利用此漏洞以内核级别权限执行任意代码，从而完全控制受影响计算机。 此漏洞源于Kernel对跟踪事件的支持。由于畸形转换，Kernel为用户空间中的数据分配使用截断的长度。在填充此缓冲区时，Kernel将使用造成缓冲区溢出的另一个长度。这将造成内存破坏并导致执行任意代码。 Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP...
Microsoft Windows Kernel Integer Truncation Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause a...
[SECURITY] Fedora 14 Update: pcsc-lite-1.6.4-3.fc14
The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...
