2646 matches found
Linux Kernel 2.x - sock_sendpage() Local Root Exploit (Android Edition)
No description provided by source. Source for exploiting CVE-2009-2692 on Android; Hole is closed in Android kernels released August 2009 or later. orig: http://zenthought.org/content/file/android-root-2009-08-16-source back: http://www.exploit-db.com/sploits/android-root-20090816.tar.gz...
Threat Outbreak Alert RuleID10389: Email Messages Distributing Malicious Software on August 19, 2014
Medium Alert ID: 34673 First Published: 2014 June 20 12:52 GMT Last Updated: 2014 August 20 11:48 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10389 and...
CVE-2013-4978
creationtimestamp| type| source ---|---|--- 2013-08-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38742...
Jumping Out of IE's Sandbox With One Click
Software vendors often give intentionally vague and boring names to the updates they use to fix security vulnerabilities. The lamer the name, the less attention it may attract from attackers looking to reverse-engineer the patch. There was one patch in Microsoft’s August Patch Tuesday release...
Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on August 21, 2013
Medium Alert ID: 30479 First Published: 2013 August 21 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a money transfer notification for the recipient. The text in the email message attempts to convince the recipie...
CVE-2013-4888
creationtimestamp| type| source ---|---|--- 2013-08-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38745...
August 2013 Security Bulletin Webcast, Q&A, and Slide Deck
Today we’re publishing the August 2013 Security Bulletin Webcast Questions & Answers page. We fielded 13 questions on various topics during the webcast, with specific bulletin questions focusing primarily on Exchange Server MS13-061 and Windows Kernel MS13-063. There were 3 additional questions...
Fedora Update for chrony FEDORA-2013-14539
Check for the Version of chrony OpenVAS Vulnerability Test Fedora Update for chrony FEDORA-2013-14539 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Mozilla updates August 2013 (important)
This patch contains updates for - Firefox to 23.0 - xulrunner to 17.0.8esr - Thunderbird to 17.0.8 - mozilla-nspr to 4.10 - mozilla-nss to 3.15,1 MFSA 2013-63/CVE-2013-1701/CVE-2013-1702 Miscellaneous memory safety hazards MFSA 2013-64/CVE-2013-1704 bmo883313 Use after free mutating DOM during...
Leaving Las Vegas and the August 2013 security updates
Two weeks ago I, along with 7,500 of my closest friends, attended the Black Hat security conference in Las Vegas, NV. I can’t speak for everyone, but I certainly had a great – if not exhausting – time while there. While there were a lot of great talks, a personal highlight for me each year is the...
Assessing risk for the August 2013 security updates
Today we released eight security bulletins addressing 23 CVE’s. Three bulletins have a maximum severity rating of Critical while the other five have a maximum severity rating of Important. We hope that the table below helps you prioritize the deployment of the updates appropriately for your...
MS13-062: Vulnerability in remote procedure call could allow elevation of privilege: August 13, 2013
None None...
MS13-064: Vulnerability in the Windows NAT driver could allow denial of service: August 13, 2013
None None...
MS13-066: Description of the security update for Active Directory Federation Services 1.x: August 13, 2013
None None...
Advance Notification Service for August 2013 Security Bulletin Release
Today we’re providing advance notification for the release of eight bulletins, three Critical and five Important, for August 2013. The Critical updates address vulnerabilities in Microsoft Windows, Internet Explorer and Exchange. As usual, we’ve scheduled the bulletin release for the second Tuesd...
Fedora Update for icu FEDORA-2013-13479
Check for the Version of icu OpenVAS Vulnerability Test Fedora Update for icu FEDORA-2013-13479 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for fontmatrix FEDORA-2013-13479
Check for the Version of fontmatrix OpenVAS Vulnerability Test Fedora Update for fontmatrix FEDORA-2013-13479 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Firefox onreadystatechange Event DocumentViewerImpl Use After Free
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Firefox...
Firefox onreadystatechange Event DocumentViewerImpl Use After Free
This module exploits a vulnerability found on Firefox 17.0.6, specifically a use after free of a DocumentViewerImpl object, triggered via a specially crafted web page using onreadystatechange events and the window.stop API, as exploited in the wild on 2013 August to target Tor Browser users. This...