Researchers uncovered new malware used by Chinese cyber criminals

Trend Micro researchers have uncovered a new backdoor pieces of malware from the Winnti family, which are mainly used by a Chinese cyber criminal group to target South East Asian organizations from the video gaming sector. Winnti malware used by hackers to hijack control of web users systems usin...

Cisco Network Admission Control Manager SQL Injection Vulnerability

Cisco Network Admission Control NAC Manager contains a vulnerability that could allow an unauthenticated remote attacker to execute arbitrary code and take full control of the vulnerable system. A successful attack could allow an unauthenticated attacker to access, create or modify any informatio...

Microsoft Visio Viewer Tree Object Type Confusion Code Execution (MS13-023; CVE-2013-0079)

A remote code execution vulnerability has been reported in Microsoft Visio Viewer.The vulnerability is due to an error in the way Visio Viewer handles memory when parsing specially crafted Visio files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially...

Adobe Flash Player malformed FLV file Flash memory corruption vulnerability (APSB13-05; CVE-2013-0638)

A memory corruption vulneriability has been reprted in Adobe Flash Player. the vulnerability is due to an error while handling specially crafted FLV files. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an embedded malformed FLV file with...

linux-flashplugin -- multiple vulnerabilities

Adobe reports: These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system...

Security Update for Microsoft .NET Framework 4.5 on Windows 8 and Windows Server 2012 for x64-based Systems (KB2789649)

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...

Adobe Releases Security Advisory for Adobe Flash Player

Adobe has released a security advisory for Adobe Flash Player to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to cause a denial-of-service condition or take control of the affected system. Adobe has released updates for the following versions: Adob...

Security Update for Windows 8 (KB2757638)

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...

FreeBSD : linux-flashplugin -- multiple vulnerabilities (1657a3e6-4585-11e2-a396-10bf48230856)

Adobe reports : These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXM...

linux-flashplugin -- multiple vulnerabilities

Adobe reports: These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system...

Microsoft .Net Framework Web Proxy Auto-Discovery Code Execution (MS12-074; CVE-2012-4776)

A remote code execution vulnerability has been reported in the Microsoft .Net Framework. The vulnerability is due to an error in the way the .Net Framework retrieves the default web proxy settings. A remote attacker can exploit this issue by enticing a victim to use a malicious proxy auto...

linux-flashplugin -- multiple vulnerabilities

Adobe reports: These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system...

Vulnerabilities in SumatraPDF Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of multiple vulnerabilities affecting SumatraPDF Reader software version 2.0.1 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor...

Adobe Flash Player Font Parsing Code Execution Vulnerability - (Linux)

This host is installed with Adobe Flash Player and is prone to unspecified code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashplayerfontparsingcodeexecvulnlin.nasl 5940 2017-04-12 09:02:05Z teissa $ Adobe Flash Player Font Parsing Code Execution Vulnerability - Linux Author...

Adobe Flash Player Font Parsing Code Execution Vulnerability - (Windows)

This host is installed with Adobe Flash Player and is prone to unspecified code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashplayerfontparsingcodeexecvulnwin.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Font Parsing Code Execution Vulnerability - Windows...

IBM Rational AppScan 8.x/7.x 多个安全漏洞

CVE ID:...

linux-flashplugin -- multiple vulnerabilities

Adobe reports: These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system...

McAfee WebShield UI Authentication Bypass (SB10026)

The version of the McAfee WebShield UI hosted on the remote web server is affected by an authentication bypass vulnerability. It is possible to get a valid session ID as the administrative user by making a specially crafted request to /cgi-bin/localadmin. A remote, unauthenticated attacker can...

Adobe Releases Security Bulletins for Multiple Products

Adobe has released security bulletins to alert users of critical vulnerabilities in multiple products. The following products are affected: Adobe Illustrator CS 5.5 and earlier versions for Windows and Macintosh Adobe Photoshop CS 5.5 and earlier versions for Windows and Macintosh Adobe Flash...

Cisco Linksys PTZ Internet Video Camera PlayerPT ActiveX Overflow

Added: 04/19/2012 BID: 52673 OSVDB: 80297 Background The Cisco WVC200 Wireless-G PTZ Internet Video Camera sends live video through the Internet to a web browser anywhere in the world. Viewers can access the video stream through an HTTP service, which requires an ActiveX client to be installed in...