Microsoft, Adobe to Address Critical Vulnerabilities in April Patch

Both Microsoft and Adobe are set to ship critical and high-priority patches in the April edition of Patch Tuesday next week. Microsoft published advanced bulletins on six vulnerabilities that could lead to remote code execution and information disclosure. Four of the bugs were rated as critical a...

Template CMS (FCKEditor) File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 »...

Microsoft Releases April Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Internet Explorer, .NET Framework, Office, SQL Server, Server Software, Developer Tools, and Forefront United Access Gateway as part of the Microsoft Security Bulletin Summary for April 2012. These vulnerabilities may...

Cyber Warfare - The Hacker News Magazine April 2012 Edition | Issue 10

Cyber Warfare - The Hacker News Magazine April 2012 Edition Call it Cyber Warfare, Terrorism, Computer Mania this month The Hacker News turns over every leaf of the newest way world citizens are fighting wars and using their keyboards to destroy planet earth. Most call it Cyber Warfare and we are...

Call for Article - THN Magazine "Cyber Warfare" April Issue

Call for Article - THN Magazine "Cyber Warfare" April Issue As we move through March Madness and the recent arrests of our cyber soldiers, it is time for all good Anons and our faithful readers to take keyboards to Word and send in your articles on the topic of CYBER WARFARE. What do you know of...

Oracle Database Multiple Vulnerabilities (April 2006 CPU)

The remote Oracle database server is missing the April 2006 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Replication - Dictionary - Export - Log Miner - ModPL/SQL for Apache - Oracle Enterprise Manager Intelligent Agen...

Oracle Database Multiple Vulnerabilities (April 2007 CPU)

The remote Oracle database server is missing the April 2007 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Adanced Queuing - Advanced Replication - Authentication - Core RDBMS - Oracle Agent - Oracle Data Capture CDC - Oracle...

Oracle Database Multiple Vulnerabilities (April 2008 CPU)

The remote Oracle database server is missing the April 2008 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Queuing - Audit - Authentication - Change Data Capture - Core RDBMS - Data Pump - Export - Oracle Enterprise...

Oracle Warehouse Builder SQL Injection

Added: 08/01/2011 CVE: CVE-2011-0799 BID: 47431 OSVDB: 71956 Background Oracle Warehouse Builder OWB is an ETL tool produced by Oracle that offers a graphical environment to build, manage and maintain data integration processes in business intelligence systems. Problem A SQL injection vulnerabili...

Word List Builder 1.0 Buffer Overflow Exploit (MSF)

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Threat Outbreak Alert: Fake Electronic Payment Cancellation Email Messages on April 8, 2014

Medium Alert ID: 23517 First Published: 2011 June 29 14:00 GMT Last Updated: 2014 April 10 13:53 GMT Version: 80 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an electronic payment cancellation for the recipient. The text in the e-ma...

Oracle Database Multiple Vulnerabilities (April 2011 CPU)

The remote Oracle database server is missing the April 2011 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Oracle Warehouse Builder CVE-2011-0792, CVE-2011-0799 - Oracle Security Service CVE-2009-3555 - Application Service Level...

Mozilla Releases Firefox updates

Mozilla has released Firefox 4.0.1, 3.6.17, and 3.5.19 to address multiple vulnerabilities. The impact of these vulnerabilities includes arbitrary code execution, privilege escalation, directory traversal, and information disclosure. US-CERT encourages users and administrators to review the Mozil...

Description of the cumulative update for Lync Server 2010, Conferencing Server: April 2011

Describes the bug that is resolved in the April, 2011 cumulative update package for Lync Server 2010, Conferencing Server.Summary This article describes the Microsoft Lync Server 2010 issue that is fixed in the cumulative update for Lync Server 2010, Conferencing Server that is dated April, 2011...

Description of the cumulative update for Lync Server 2010: April 2011

Describes the bug that is resolved in the April, 2011 cumulative update package for Lync Server 2010.Summary This article describes the Microsoft Lync Server 2010 issue that is fixed in the cumulative update for Lync Server 2010 that is dated April, 2011. This article describes the following item...

Description of the cumulative update for Lync Server 2010, Web Conferencing Server: April 2011

Describes the cumulative update for Lync Server 2010, Web Conferencing Server that is dated April 2011.SummaryThis article describes the Microsoft Lync Server 2010, Web Conferencing Server issue that is fixed in the cumulative update for Lync Server 2010, Web Conferencing Server that is dated...

CVE-2011-0808

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the...

CVE-2011-0794

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5.0 allows local users to affect confidentiality, integrity, and availability, related to File ID SDK. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not...

CVE-2011-0808

CVE-2011-0808 is part of Oracle Outside In vulnerabilities affecting Oracle Fusion Middleware (Outside In Technology). IBM and Cisco/Oracle notes tie CVE-2011-0808 to the Lotus 123 parser (along with CVE-2011-2264 and CVE-2011-0794) and describe potential arbitrary-code execution when processing ...

CVE-2011-0794

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5.0 allows local users to affect confidentiality, integrity, and availability, related to File ID SDK. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not...