Android App Makers Should be Held Accountable

Google’s response to the recent discovery of malicious apps in the Android market place is proof that we’re now entering a new phase in malware mitigation. Can you imagine Microsoft automatically pushing an executable to part of its user-base with no opt-out option? This essay is not about the...

CVE-2010-4425

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2, 10.1.3.4.0, and 10.1.3.4.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Server...

CVE-2010-4427

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.4.0, 10.1.3.4.1, and 11.1.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2, 10.1.3.4.0, and 10.1.3.4.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.4.0, 10.1.3.4.1, and 11.1.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Server...

CVE-2010-4425

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2, 10.1.3.4.0, and 10.1.3.4.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Server...

CVE-2010-4427

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.4.0, 10.1.3.4.1, and 11.1.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Server...

CVE-2010-4425

Technical details for CVE-2010-4425 are not publicly available in the provided documents. Monitor for updates from Oracle security advisories and the CVE entry.

CVE-2010-4427

Technical details for CVE-2010-4427 are not publicly provided in the connected documents you supplied. No concrete affected products, versions, or fixes are listed here. Monitor for updates from official advisories.

CVE-2010-4427: Undefined Security Weakness

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.4.0, 10.1.3.4.1, and 11.1.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Server...

CVE-2010-4425: Undefined Security Weakness

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2, 10.1.3.4.0, and 10.1.3.4.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Server...

PT-2011-1531

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.4.0 through 10.1.3.4.1 Oracle Fusion Middleware version 11.1.1.3 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related ...

PT-2011-1529

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.3.2 through 10.1.3.4.1 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Web Server in the Oracle BI Publish...

Windows Escalate UAC Protection Bypass (In Memory Injection)

This module will bypass Windows UAC by utilizing the trusted publisher certificate through process injection. It will spawn a second shell that has the UAC flag turned off. This module uses the Reflective DLL Injection technique to drop only the DLL payload binary instead of three separate binari...

Windows Escalate UAC Protection Bypass

This module will bypass Windows UAC by utilizing the trusted publisher certificate through process injection. It will spawn a second shell that has the UAC flag turned off. Module Options msf use exploit/windows/local/bypassuac msf undefinedbypassuac show actions ...actions... msf...

Microsoft Office multiple security vulnerabilities

Multiple memory corruptions in Publisher, multiple memory corruptions in graphics filters...

CVE-2010-3954

Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."...

CVE-2010-3955

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...

CVE-2010-2570

Heap-based buffer overflow in pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability."...

CVE-2010-2571

Array index error in pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."...