Apple Fixes 13 Bugs in Major OS X Patch Release

Apple released a patch Tuesday that fixes more than a dozen bugs, including a critical remote code-execution flaw in Apple Type Services. The patch release also includes a fix for a flaw in CFNetwork that enabled an attacker to intercept user credentials and other sensitive data silently on a...

Directory Traversal Vulnerability in TurboFTP Server

Vulnerability ID: HTB22514 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinturboftpserver.html Product: TurboFTP Server Vendor: TurboSoft, Inc http://turboftp.com/ Vulnerable Version: 1.20 Build 745 and Probably Prior Versions Vendor Notification: 19 July 2010...

ZDI-10-148: Microsoft Cinepak Codec CVDecompress Remote Code Execution Vulnerability

ZDI-10-148: Microsoft Cinepak Codec CVDecompress Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-148 August 10, 2010 -- CVE ID: CVE-2010-2553 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Microsoft -- Affected Products: Microsoft File Format...

FTP Explorer 10.5.19.1 Directory Traversal

Vulnerability ID: HTB22524 Reference: http://www.htbridge.ch/advisory/directorytraversalinftpexplorer.html Product: FTP Explorer Vendor: FTPx Corp http://www.ftpx.com/ Vulnerable Version: 10.5.19.1 for Windows and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type:...

Directory Traversal Vulnerability in FTP Commander Deluxe

Vulnerability ID: HTB22513 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpcommanderdeluxe.html Product: FTP Commander Deluxe Vendor: InternetSoft Corporation http://www.internet-soft.com/ftpcomm.htm Vulnerable Version: 9.20 and Probably Prior Versions Vendor...

Directory Traversal Vulnerability in TurboFTP 6 Client

Vulnerability ID: HTB22509 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinturboftp6client.html Product: TurboFTP 6 Client Vendor: TurboSoft, Inc http://www.turboftp.com/ Vulnerable Version: 6.30.806 32 and 64 bit and Probably Prior Versions Vendor Notification: 19 Jul...

Directory Traversal Vulnerability in 32bit FTP Client

Vulnerability ID: HTB22512 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityin32bitftpclient.html Product: 32bit FTP Client Vendor: ElectraSoft http://www.electrasoft.com/32ftp.htm Vulnerable Version: 10.07.09 and Probably Prior Versions Vendor Notification: 19 July 2010...

Turbo FTP 1.20 Build 745 Directory Traversal

Vulnerability ID: HTB22514 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinturboftpserver.html Product: TurboFTP Server Vendor: TurboSoft, Inc http://turboftp.com/ Vulnerable Version: 1.20 Build 745 and Probably Prior Versions Vendor Notification: 19 July 2010...

FTP Commander 8.02 Directory Traversal

Vulnerability ID: HTB22510 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpcommander.html Product: FTP Commander Vendor: InternetSoft Corporation http://www.internet-soft.com/ftpcomm.htm Vulnerable Version: 8.02 and Probably Prior Versions Vendor Notification: 19 Ju...

EasyFTP Server <= 1.7.0.11 MKD Command Stack Buffer Overflow

$Id: easyftpmkdfixret.rb 9935 2010-07-27 02:25:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

EasyFTP Server <= 1.7.0.11 list.html path Stack Buffer Overflow

$Id: easyftplist.rb 9936 2010-07-27 03:14:46Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

В Швеции появится первый в мире пиратский провайдер

Пиратская партия Швеции станет первым в мире "пиратским" интернет-провайдером, пишет TorentFreak. Партнером Пиратской партии по организации доступа пользователей в Сеть станет провайдер ViaEuropa. Предполагается, что новая компания PirateISP, во главе которой находится член Пиратской партии Густа...

EasyFTP Server 1.7.0.11 - 'MKD' (Authenticated) Remote Buffer Overflow

!/usr/bin/python import socket,sys Tested on XP Pro SP2 Eng and XP Pro SP3 Eng print """ Easy FTP Server v1.7.0.11 MKD Remote BoF Exploit Post Authentication Author / Discovered by : Karn Ganeshen Date : July 5, 2010 KarnGaneshen aT gmail d0t com http://ipositivesecurity.blogspot.com """ if...

Researchers Go Anonymous, Form 'Microsoft-Spurned Researcher Collective'

An anonymous group of security researchers last week published information about an unpatched Windows bug, saying that they were disclosing the vulnerability because of the way Microsoft treated a colleague. The flaw in Windows Vista and Server 2008 could be used by attackers to gain unauthorized...

ZDI-10-115: Adobe Flash Player AVM newFrameState Integer Overfow Remote Code Execution Vulnerability

ZDI-10-115: Adobe Flash Player AVM newFrameState Integer Overfow Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-115 June 25, 2010 -- CVE ID: CVE-2010-2160 -- Affected Vendors: Adobe -- Affected Products: Adobe Flash Player -- TippingPointTM IPS Customer...

500page.jsp Improvements

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-19601. panel Some further improvements to the 500page.jsp: The following should not appear if there is no stack trace: quote Cau...

EasyFTP Server 1.7.0.11 - 'CWD' Stack Buffer Overflow (Metasploit)

$Id: easyftpcwdfixret.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

LaNewsFactory Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ============================================= LaNewsFactory Multiple Remote Vulnerabilities ============================================= LaNewsFactory Multiple Remote Vulnerabilities...

lanewsfactory - Multiple Vulnerabilities

LaNewsFactory Multiple Remote Vulnerabilities http://www.salvatorefresta.net/files/adv/LaNewsFactory%20Multiple%20Remote%20Vulnerabilities-19042010.txt Name LaNewsFactory Vendor Christophe Brocas Versions Affected = 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.n...

EasyFTP Server <= 1.7.0.2 CWD Command Stack Buffer Overflow

Exploit Title: EasyFTP Server 'EasyFTP Server %q This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.2. EasyFTP fails to check input size when parsing 'CWD' commands, which allows for easy stack based buffer overflow exploitation. EasyFTP allows anonymous access by default;...