Adobe Patches DoS Flaw in ColdFusion 10

Adobe has addressed a denial-of-service vulnerability in the ColdFusion platform and an update is available. ColdFusion is Adobe’s platform and application server used by developers to build Web applications. The security hotfix is for ColdFusion 10 Update 1 and above for the Windows operating...

Update: Adobe Working to Confirm New Reader Zero-Day Sandbox-Bypass Exploit

Adobe said today it has been in contact with the Russian security company Group-IB, which discovered a zero-day vulnerability in Adobe Reader and yesterday reported the existance of a pricey exploit circulating on the black market. The exploit, according to Group-IB, bypasses Adobe’s sandbox...

CVE-2012-1846

Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not...

Google Reacts to Google Wallet Security Issues

Google has temporarily disabled the provisioning of prepaid cards as the company deals with the fallout from the discovery of security vulnerabilities affecting Google Wallet. Google Wallet is a mobile payment application that enables users to store information such as credit cards on their mobil...

Sun Java JRE / JDK / Web Start multiple security vulnerabilities

JNLP may overwrite system properties java.home java.ext.dirs user.home Heap overflow and integer overflow on TrueType fonts parsing, memory corruption on GIF parsing, integer overflow on Pack200 decompression. Multiple sendbox protection bypass vulnerabilities...

VMWare sandbox protection bypass

It's possilbe to access phisical memory from guest machine...

Sun Java multiple security vulnerabilities

8 different vulnerabilities, including privilege escalation, sandbox protection bypass and code excutions...

Adobe Flash Player sandbox protection bypass

SecurityErrorEvent can be used for client ports scanning...

Sun JRE / JDK multiple security vulnerabilities

Buffer and integer overflows in JPG and BMP processing, sandbox protection bypass with system classes...

PHP mssql_connect() / mssql_pconnect() functions buffer overflow

Buffer overflow leads to code execution, resulting in sandbox protection bypass...

Sun Java Runtime Environment multiple security vulnerabilities

Multiple vulnerabilities allow sandbox protection bypass and system functions access...

Sun Java sandbox protection bypass

It's possible to bypass sandbox with "reflection" API. This vulnerability can be used for silent trojan installation...

Sun Java JRE sandbox protection bypass

Few vulnerabilities allow applets to write local files and execute applications...

J2SE Java Web Start sandbox protection bypass

By using JLNP files it's possible to manipulate with JAVA virtual machine settings...

Sun Java plugin sandbox protection bypass

It's possible to break sandbox protection and access local files and applications...