Mozilla Firefox 3.6.23 - Z0D Code Execution Vulnerability

Document Title: =============== Mozilla Firefox 3.6.23 - Z0D Code Execution Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/329.wmv View: http://www.youtube.com/watch?v=oTx1QP2Msg Release Date: ============= 2011-12-03 Vulnerability Laboratory ID...

Symantec Alert Management System AMSSendAlertAck Buffer Overflow

Added: 12/01/2011 CVE: CVE-2010-0110 BID: 45936 OSVDB: 72623 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager...

Symantec Alert Management System AMSSendAlertAck Buffer Overflow

Added: 12/01/2011 CVE: CVE-2010-0110 BID: 45936 OSVDB: 72623 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager...

KomaMail Local Path Inclusion

Exploit for php platform in category web applications Exploit Title: KomaMail Local Path Inclusion Date: 26/11/2011 Author: SnakingMax WebSite: snakingmax.blogspot.com Software Link: http://www.koma-code.de/ProgsZip/KomaMail.zip Version: 3.82 Category: Local Exploit Tested on: Windows XP SP3 0-Da...

LibLime Koha 4.2 - Local File Inclusion

Exploit Title: Koha Opac Local File Inclusion Google Dork: inurl:koha/opac-main.pl Date: 17.11.2011 Author: Akin TosunlarVigasis Labs Software Link: www.koha.org Version: 4.2 Tested on: LinuxApache 2.2.14 CVE : Vigasis Pentest Team www.vigasis.com 0-Day Exploit Akin Tosunlar Special Thanks to Ozg...

PHP-Nuke 8.1.0.3.5b - Downloads Blind SQL Injection

PHP-Nuke 8.1.0.3.5b - Downloads Blind SQL Injection !/usr/bin/perl 0-Day PHP-Nuke newPOST = $HostName.'modules.php?name=Downloads&dop=Add'; my $Cookies = new HTTP::Cookies; my $UserAgent = new LWP::UserAgent agent = 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, defaultheaders =...

LibLime Koha <= 4.2 Local File Inclusion Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Koha Opac Local File Inclusion Google Dork: inurl:koha/opac-main.pl Date: 17.11.2011 Author: Akin TosunlarVigasis Labs Software Link: www.koha.org Version: 4.2 Tested on: LinuxApache 2.2.14 CVE : Vigasis Pentest Team...

How the Duqu Authors May Have Erred

Duqu has been called the spawn of Stuxnet, or maybe some sort of stepchild or second cousin. That initial analysis came from some similarities in the code of the two attack tools, and now that researchers have had more time to pull Duqu apart and see how it works, it seems more and more likely th...

ZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-329 November 16, 2011 - -- CVE ID: CVE-2011-4052 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - -- Affected...

Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability

Document Title: =============== Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/331.wmv View: http://www.youtube.com/watch?v=viLLpi-i6vk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=330...

Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability

Document Title: =============== Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/331.wmv View: http://www.youtube.com/watch?v=viLLpi-i6vk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=330...

Anonymous Targets Capital One, Wal-Mart, Viral Video Judge William Adams, and More

It was a busy weekend for the shadowy collective of Internet hackers and activists that calls itself Anonymous, with claims by the group to have launched attacks that took down the Web pages of both government- and private sector Web sites as well as public- and Internet personalities, including...

Duqu Analysis and Detection Tool by NSS Labs

Duqu Analysis and Detection Tool by NSS Labs NSS Labs has built a new, free tool that detects known and newly created Duqu drivers that have infiltrated systems, thus allowing security experts to further analyze the "functionality, capabilities and ultimate purpose of DuQu.". The Tool is availabl...

No Fix for Duqu Bug in November Microsoft Patches?

Microsoft plans on shipping four bulletins, of which only one is rated critical, in the November edition of Patch Tuesday. But it looks doubtful that the company will issue a fix for the vulnerability discovered this week being used by the Duqu installer. The patch is set for release on Tuesday,...

php: Crash by converting serial day numbers (SDN) into Julian calendar

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via a large integer in the first argument to the calfromjd function...

CVE-2010-5004

SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...

Microsoft Mum On Duqu Fix In November

Microsoft said that its looking into a reported zero day vulnerability in Windows that was used by the Duqu malware to spread, but isn’t committing to a patch for the problem in time for this months scheduled update. “Microsoft is collaborating with our partners to provide protections for a...

Windows Kernel Zero Day Vulnerability Found in Duqu Installer

Windows Kernel Zero Day Vulnerability Found in Duqu Installer Duqu malware attack exploited a zero-day vulnerability in the Windows kernel, according to security researchers tracking the Stuxnet-like cyber-surveillance Trojan. The vulnerability has since been reported to Microsoft and Microsoft i...

Duqu Installer Contains Windows Kernel Zero Day

A newly discovered installer for the Duqu malware includes an exploit for a previously unknown vulnerability in the Windows kernel that allows remote code execution. Microsoft is working on a fix for the kernel vulnerability right now. The exact location and nature of the flaw isn’t clear right...

ZDI-11-302 : Adobe Reader U3D TIFF Resource Buffer Overflow Remote Code Execution Vulnerability

ZDI-11-302 : Adobe Reader U3D TIFF Resource Buffer Overflow Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-302 October 26, 2011 -- CVE ID: CVE-2011-2432 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Reader -...