Design/Logic Flaw

WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message...

CVE-2009-4170

WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message...

CVE-2009-4169

Cross-site scripting XSS vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sun Java Plug-in Sandbox Security Bypass (CVE-2004-1029)

The Sun Java plug-in is a component of the Java 2 Runtime Environment. Sun's Java plug-in technology creates a connection between a Web browser and the Java platform. This connection enables Java applets, served from a Web site, to be run within a Web browser in a restricted environment, known as...

CVE-2009-3936

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...

Authentication flaw

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...

CVE-2009-3936

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...

CVE-2009-3936

CVE-2009-3555 is a TLS/SSL renegotiation vulnerability (renegotiation not properly associated with the existing connection) that can allow MITM attackers to insert data into HTTPS sessions. Public advisories show this issue across multiple open-source components and distributions, including pound...

Google Updates Chrome with Stability Fixes to Browser

Google has released a new version of Chrome, 3.0.195.32, with a security update that addresses a high risk vulnerability in its WebKit-based browser. In addition to a number of stability fixes, the stable channel update fixes a bug that could lead to possible memory corruption in the Gears plug-i...

CVE-2009-2991

Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-2991

Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-2991

Technical details about CVE-2009-2991 are not publicly provided in the supplied documents. Monitor for updates.

Apple QuickTime Plug-In Security Bypass (CVE-2006-4965; CVE-2007-4673)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying still image files as well as numerous audio and video formats. It also provides libraries and plugins for other applications, such as browsers, to read QuickTime media...

acroread: Multiple arbitrary code execution fixes in 8.1.7 (APSB09-15)

Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors...

BigAnt Server 2.50 Buffer Overflow PoC 2

!/usr/bin/env python BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Plug-In, Add our zip, Boom. buff = "\x41" 10000 f1 = open"BigAntPlugIn.zip","w" f1.writebuff f1.close...

Microsoft Says Google Chrome Frame is IE Security Risk

Google’s decision to introduce a plug-in that runs Google Chrome inside Microsoft’s Internet Explorer isn’t sitting well with the folks at Redmond. The Google Chrome Frame, which is presented as a seamless way to bring Google Chrome’s open web technologies and speedy JavaScript engine to Internet...

SuSE 11 Security Update : Sun JDK 6 (SAT Patch Number 699)

The Sun JDK 6 was updated to Update13 to fix various bugs and security issues. - LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier does not close...

SuSE9 Security Update : IBM Java2 JRE and SDK (YOU Patch Number 12387)

This update brings the IBM Java 1.4.2 JDK and JRE to Service Release 13. It fixes lots of bugs and various security issues : - A security vulnerability in the Java Runtime Environment JRE may allow an untrusted applet or application to list the contents of the home directory of the user running t...

BigAnt Server <= 2.50 SP6 Local (ZIP File) Buffer Overflow PoC #2

No description provided by source. !/usr/bin/env python BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Plug-In, Add our zip, Boom. buff = "\x41" 10000 f1 = open"BigAntPlugIn.zip","w" f1.writebuff f1.close...

BigAnt Server 2.50 SP6 - .zip Local Buffer Overflow (PoC) (2)

BigAnt Server 2.50 SP6 - .zip Local Buffer Overflow PoC 2 !/usr/bin/env python BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Plug-In, Add our zip, Boom. buff = "\x41" 10000 f1 = open"BigAntPlugIn.zip","w" f1.writebuff...