CVE-2014-1544

CVE-2014-1544 is a use-after-free in CERT_DestroyCertificate in libnss3.so (NSS) that can allow remote code execution when NSSCertificate structures are improperly removed from a trust domain. Affected: Mozilla NSS as used by Firefox before 31.0, Firefox ESR before 24.7, and Thunderbird before 24...

KLA10119 Multiple vulnerabilities in Mozilla

An unspecified vulnerability was found in Clam Anti-virus. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the OLE2 parser via a specially designed file. Below is a complete list of vulnerabilities 1...

程氏CMS v3.5 app/controllers/dance.php SQL注入漏洞

0x01 漏洞详情 漏洞页面 app/controllers/dance.php public function so $data='';$datacontent=''; $fid = $this-security-xssclean$this-uri-segment3; //方式 $key = $this-security-xssclean$this-input-getpost'key', TRUE; //关键字 $page = intval$this-input-get'p', TRUE; //页数 if$page==0 $page=1;...

AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery

Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin password via CSRF 10. + Vendor:...

PHP Ticket System Beta 1 - Cross-Site Request Forgery

PHP Ticket System Beta 1 - Cross-Site Request Forgery 1. 2. 3. + Exploit Title : php ticket system csrf 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = BETA 1 8. + Tested on : windows/internet explorer 9. + Details:...

Linux Kernel 3.0 3.3.5 - CLONE_NEWUSER|CLONE_FS Local Privilege Escalation

Linux Kernel 3.0 3.3.5 - CLONENEWUSER|CLONEFS Local Privilege Escalation / source: https://www.securityfocus.com/bid/58478/info Linux kernel is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain kernel privileges, which will aid in further attacks....

Solaris 10 (sparc) : 149108-01 (deprecated)

SunOS 5.10: libgsf-1.so.1.8.2 patch. Date this patch was last updated by Sun : Dec/07/12 This plugin has been deprecated and either replaced with individual 149108 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 149109-01 (deprecated)

SunOS 5.10x86: libgsf-1.so.1.8.2 patch. Date this patch was last updated by Sun : Dec/07/12 This plugin has been deprecated and either replaced with individual 149109 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...

Oracle Weblogic Apache Connector POST Request Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Solaris 10 (sparc) : 148002-01 (deprecated)

SunOS 5.10: libdbus-1.so.3.4.2 patch. Date this patch was last updated by Sun : May/04/12 This plugin has been deprecated and either replaced with individual 148002 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled o...

Mobile APP Network Forum Hacked, 15000 user accounts leaked

Mobile APP Network Forum Hacked, 15000 user accounts leaked Mobile APP Network Forum is Hacked by "Why So Serious?" hacker. He also hacked VBTeam.info and EA Game - Battlefield Heroes some days before. He leaked over 15.000 accounts of the community Forum on Pastebin in two parts. Part 1 Part 2...

VBulletin Underground Website Hacked By 'Why So Serious'

VBulletin Underground Website Hacked By 'Why So Serious ' Vbteam.info is underground vBulletin Hacking website. It provides free vBulletin. This website is hacked by a new hacker named as "Why So Serious? ". He also hacked EA Game - Battlefield Heroes Accounts. He leaked 1400+ accounts of the...

EA Game - Battlefield Heroes Accounts Hacked by 'Why So Serious?' Albanian Hacker

EA Game - Battlefield Heroes Accounts Hacked by 'Why So Serious?' Albanian Hacker One of the most famous games over the world Battlefield Heroes which is created by EA Games is hacked by a new hacker named "Why So Serious?". The hacker is from Albania. He made a post on Battlefield Heroes site &...

python security, bug fix, and enhancement update

python: 2.6.6-20 Resolves: CVE-2010-3493 2.6.6-19 Resolves: CVE-2011-1015 2.6.6-18 Resolves: CVE-2011-1521 2.6.6-17 - recompile against systemtap 1.4 Related: rhbz569695 2.6.6-16 - recompile against systemtap 1.4 Related: rhbz569695 2.6.6-15 - fix race condition that sometimes breaks the build wi...

Sony Subsidiary ISP Compromised, Virtual Tokens Stolen

Sony’s subsidiary Internet service provider, So-net, was broken into on Friday by an intruder who allegedly made off with some $1200 in virtual tokens, according to a NetworkWorld report. The report claims that the intrusion originated from a single IP address between May 16 and 17, where an...

CVE-2011-0808

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the...

Buffer overflow

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the...

DEBIAN-CVE-2010-3856

ld.so in the GNU C Library aka glibc or libc6 before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LDAUDIT environment variable to reference dynamic shared objects DSOs as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a...

Mandriva Update for kipi-plugins MDVA-2010:220 (kipi-plugins)

Check for the Version of kipi-plugins OpenVAS Vulnerability Test Mandriva Update for kipi-plugins MDVA-2010:220 kipi-plugins Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for kdeplasma-addons MDVA-2010:219 (kdeplasma-addons)

Check for the Version of kdeplasma-addons OpenVAS Vulnerability Test Mandriva Update for kdeplasma-addons MDVA-2010:219 kdeplasma-addons Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...