AlienVault OSSIM av-centerd Util.pm get_log_line Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AlienVault Ossim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the av-centerd SOAP service. The issue lies in the handling of the getlogline request...

CVE-2014-3450

Unspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and earlier, Internet Security 2014 19.01.01 and earlier, and AV Pro 2014 13.01.01 and earlier allows local users to gain privileges via unspecified vectors...

Code injection

Unspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and earlier, Internet Security 2014 19.01.01 and earlier, and AV Pro 2014 13.01.01 and earlier allows local users to gain privileges via unspecified vectors...

CVE-2014-3450

CVE-2014-3450 affects Panda Security products for Windows: Panda Gold Protection 2014 (7.01.01), Panda Global Protection 2014 (7.01.01), Panda Internet Security 2014 (19.01.01), and Panda AV Pro 2014 (13.01.01). All are listed as vulnerable to a local privilege escalation (Privilege Escalation Vu...

AlienVault OSSIM av-centerd Command Injection

This module exploits a code execution flaw in AlienVault 4.6.1 and prior. The vulnerability exists in the av-centerd SOAP web service, where the updatesysteminfodebianpackage method uses perl backticks in an insecure way, allowing command injection. This module has been tested successfully on...

VideoLAN VLC Media Player 2.1.3 - '.avs' Crash (PoC)

Exploit Title: VLC 2.1.3 WriteAV Vulnerability, Decoders Date: 2014/02/20 Exploit Author: kw4 Software Link: http://www.videolan.org/vlc/index.html Version: 2.1.3 Impact Med/High Tested on: Windows 7 64 bits Memory corruption when VLC tries to load crafted .avs files. 2b10.2750: Access violation ...

DailyMotion Still Serving FakeAV Malware Scam

More than three weeks after notifying video-sharing site DailyMotion that it was compromised, security company Invincea reports the popular website is still infected. A spokesperson told Threatpost that Invincea’s original notification was not acknowledged and the company suspects this is a...

[Weevely v1.1] Stealth tiny PHP web shell

Weevely is a stealth PHP web shell that provides a telnet-like console. It is an essential tool for web application post exploitation , and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones. Weevely is currently included in Backtrack and Backbox...

DailyMotion Hosting Malvertising Leading to Fake AV Attack

Video-sharing site DailyMotion, one of the most popular destinations on the Web, is in the throes of an attack where it is serving malicious ads redirecting users to a fake AV scam. Security firm Invincea reported the issue to the website, and as of 4 p.m. ET, DailyMotion was still serving the fa...

CVE-2012-6618

The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service crash via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."...

Session fixation

IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service WebPlayer Firefox extension crash via a crafted Audio Visual AV session...

Pen Testing Using Live Malware Becoming a Must

BERLIN–Penetration testing has come a long way in the last decade, evolving from a somewhat controversial practice to a de facto best practice in the enterprise market. That evolution hasn’t stopped by any means, and one of the things that experts say must be a part of any comprehensive test now ...

Powershell Payload Web Delivery Vulnerability

This Metasploit module quickly fires up a web server that serves the payload in powershell. The provided command will start powershell and then download and execute the payload. The IEX command can also be extracted to execute directly from powershell. The main purpose of this module is to quickl...

Script Web Delivery

This module quickly fires up a web server that serves a payload. The module will provide a command to be run on the target machine based on the selected target. The provided command will download and execute a payload using either a specified scripting language interpreter or "squiblydoo" via...

CVE-2013-3660

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next...

CVE-2013-3660

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next...

Study Shows Google Better than Bing at Filtering Malicious Web Sites

A German security company spent 18 months analyzing malware among millions of Web sites ranked by the world’s most popular search engines and concluded Google was safer than Bing. More than half of the 40 million Web sites analyzed by the AV-Test Institute in Magdeburg, Germany were provided...

Nitro Pro 8.0.3.1 - Crash (PoC)

Nitro Pro 8.0.3.1 - Crash PoC !C:\Python27\python.exe Exploit Title: Nitro Pro 8.0.3.1 - DoS Date: 2012-10-07 Exploit Author: John Cobb Author Homepage: www.NoBytes.com Vendor Homepage: www.nitropdf.com Version: 8.0.3.1 Tested on: Win7 64bit CVE : None When the Object Index exceeds 10 characters...

Why I decided to uninstall Microsoft Security Essentials Antivirus?

Today I decided to remove Microsoft Security Essentials Antivirus from my system because Security Essentials failed another certification test by independent testing lab, AV-Test Institute. Microsoft's Security Essentials antivirus for Windows XP, Vista, and Windows 7 is a free add-on to Windows...

SumatraPDF 2.1.1MuPDF 1.0 - Integer Overflow

SumatraPDF 2.1.1MuPDF 1.0 - Integer Overflow Sumatra 2.1.1/MuPDF 1.0 Integer Overflow ======================================= There is an integer overflow on the MuPDF in the lexnumber function which can be triggered using a corrupt PDF file with ObjStm. I'm attaching a file that reproduces the...