3967 matches found
Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06748)
Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat. An attacker is allowed to construct a malicious PDF file and trick the user into parsing it, which can obtain sensitive memory information...
PHP 5.5.x < 5.5.30 / 5.6.x < 5.6.14 Multiple Vulnerabilities
Binary data 8956.prm...
MS15-078 Microsoft Windows Font Driver Buffer Overflow Exploit
Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'MS15-07...
Microsoft Windows - Font Driver Buffer Overflow (MS15-078) (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'MS15-078 Microsoft Windows Font Driver Buffer Overflow',...
These Top 30 Ashley Madison Passwords are just as Terrible as You'd Think
Yes, you heard it correct! First the Password Cracking Team 'CynoSure Prime' cracked more than 11 Million Ashley Madison’s passwords in just 10 days quite an achievement, though, now a member of the team shares the same list of passwords with few calculations. The calculations are... ...What...
Ashley Madison 2.0 — Hackers Leak 20GB Data Dump, Including CEO's Emails
The Impact Team – Wait, Cheaters! We haven't yet done. The group of hackers behind the breach of Ashley Madison, the popular cheater's dating service, have released a second, even much bigger 'cheat sheet' exposing sensitive materials that include sensitive corporate information. Two days ago, th...
Ashley Madison Hackers Finally Released All the Stolen Data Online
Well, Cheaters are about to have a very Bad Night Today! Hackers who claimed to have stolen customers' data from Ashley Madison, the popular online casual sex and cheating website with a tagline "Life is short. Have an affair," recently leaked nearly 10GB of its users' personal data online. The...
Heze city science and technology information network suffered HackingTeam leakage of 0day vulnerabilities attack-exploit warning-the black bar safety net
For the attacker, the HackingTeam data leak certainly gives them a“spring”. Attackers in the data leak the next day it will be baked 0day vulnerabilities added to the mainstream exploit kits. Copy the leaked 0day attack HackingTeam leakage of various 0day information can be easily reused. In...
Mobile App: Credentials potentially leaked to other configured ownCloud instance
A bug in the ownCloud iOS application below version 3.4.4 may leak credentials as well as cookies used for authentication purposes to other configured ownCloud instances. Specifically, the ownCloud iOS application allows users to connect to multiple ownCloud instances offering an easy way to swit...
Adobe Flash - opaqueBackground Use-After-Free (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash opaqueBackground Use After Free', 'Description' = %q This module exploits an use after free on Adobe Flash Player. The...
Adobe Flash opaqueBackground Use After Free
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash opaqueBackground Use After Free', 'Description' = %q This module exploits an use after free on Adobe Flash Player. The...
Adobe released official patch: fix Hacking Team leaked Flash 0day vulnerability-vulnerability warning-the black bar safety net
Adobe today released Flash Player update patches for the repair of Hacking Team to steal the 400G data is found in the 0day vulnerability. An attacker can use this vulnerability to make the target machine the system crashes and Access Control permissions. Vulnerability This 0day vulnerability by...
UBUNTU-CVE-2015-3114
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to bypass intended access restrictions an...
Adobe today released HackingTeam leaked 0day vulnerability patch-vulnerability warning-the black bar safety net
Spyware vendor Hacking Team is after the invasion, the internal 400GB data stolen and published online, and then, in Flash Player 0dayzero-daysecurity vulnerabilities will be crazy use. And Adobe is planning to release today this 0day vulnerability patch. Hacking Team, one of the world's most...
Adobe Flash Player ByteArray Use After Free Exploit
This Metasploit module exploits a use after free on Adobe Flash Player. The vulnerability, discovered by Hacking Team and made public on its July 2015 data leak, was described as a Use After Free while handling ByteArray objects. This Metasploit module has been tested successfully on: Windows 7 S...
Adobe Flash Player ByteArray Use After Free
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player ByteArray Use After Free', 'Description' = %q This module exploits an use after free on Adobe Flash Player. The...
Adobe Flash opaqueBackground Use After Free
This module exploits an use after free on Adobe Flash Player. The vulnerability, discovered by Hacking Team and made public as part of the July 2015 data leak, was described as an Use After Free while handling the opaqueBackground property 7 setter of the flash.display.DisplayObject class. This...
DEBIAN-CVE-2015-4106
QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service host crash, obtain sensitive information, or possibly have other unspecified impact via unknown vectors...
Microsoft windows DirectWrite Library OpenType Font Handling Sensitive Information Disclosure Vulnerability
Microsoft Windows is a popular operating system. A security vulnerability exists in Microsoft Windows DirectWrite, which allows remote attackers to exploit the vulnerability by failing to properly handle OpenType fonts, allowing them to construct malicious font files that can be parsed by users a...
