On This Year's CanSecWest, Pwn2Own and the Latest Firefox Zero-day

Dennis Fisher and Ryan Naraine preview this year’s CanSecWest conference, the Pwn2Own contest and talk about the recent zero-day flaw in Firefox. Subscribe to the News Wrap podcast on Podcast audio courtesy of The New Radio Tough Road Ahead for Adobe on Security...

Mozilla Acknowledges Critical Zero Day Flaw in Firefox

A month after an advisory was published detailing a new vulnerability in Firefox, Mozilla said it has received exploit code for the flaw and is planning to patch the weakness on March 30 in the next release of Firefox. Mozilla officials said Thursday that the vulnerability, which was disclosed...

Mplayer 4.4.1 NULL Pointer Dereference

Exploit Title: mplayer : push %ebp 0x081176d1 : mov %esp,%ebp 0x081176d3 : fld1 0x081176d5 : mov 0x8%ebp,%eax 0x081176d8 : mov %eax,%eax == mplayer tries to dereference eax, which is a NULL pointer!!! 0x081176da : lea 0x0%esi,%esi 0x081176e0 : fmull 0x28%eax 0x081176e3 : mov 0x18%eax,%eax...

ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability

ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-032 March 16, 2010 -- Affected Vendors: SAP -- Affected Products: SAP MaxDB -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been...

ZDI-10-031: Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability

ZDI-10-031: Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-031 March 16, 2010 -- Affected Vendors: Apple -- Affected Products: Apple WebKit -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have...

Oracle DB 10gR2, 11gR1/R2 DBMS_JVM_EXP_PERMS OS Command Execution

This module exploits a flaw 0 day in DBMSJVMEXPPERMS package that allows any user with create session privilege to grant themselves java IO privileges. Identified by David Litchfield. Works on 10g R2, 11g R1 and R2 Windows only This module requires Metasploit: https://metasploit.com/download...

Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Execution

This module exploits a flaw 0 day in DBMSJVMEXPPERMS package that allows any user with create session privilege to grant themselves java IO privileges. Identified by David Litchfield. Works on 11g R1 and R2 Windows only. This module requires Metasploit: https://metasploit.com/download Current...

ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability

ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-027 March 11, 2010 -- Affected Vendors: Skype -- Affected Products: Skype -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers hav...

Samagraph CMS SQL Injection / Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================================= Samagraph CMS SQL Injection / Authentication Bypass Vulnerability ================================================================= Title : Sql injection in samagraph produc...

Samagraph CMS SQL Injection

Title : Sql injection in samagraph product Date : 11-03-2010 Author : K053 Vendor : http://www.samagraph.com/ Cms is fully vulnerable, but just enjoy this zer0day flaw : ------------------------------------------------------------- Dork : inurl:"fa/inside.aspx?g=" list :...

[security bulletin] HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02033170 Version: 1 HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands NOTICE: The information in this Security Bulletin should be acted upon as soon a...

Exploit Code Published for Latest IE Zero-Day

Using obvious clues from a McAfee blog post, an Israeli hacker was able to pinpoint the latest Internet Explorer zero-day vulnerability and create working exploit code. The exploit code, which provides a clear roadmap to launch drive-by download attacks against IE 6 and IE 7 users, is being fitte...

CVE-2009-4685

Cross-site scripting XSS vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inject arbitrary web script or HTML via the day parameter...

ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability

ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-025 March 9, 2010 -- CVE ID: CVE-2010-0263 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- Vulnerability Details: This...

Microsoft Warns of New IE Zero Day Attacks

A zero-day unpatched vulnerability in Microsoft’s Internet Explorer is being exploited in the wild, the company warned in an advisory issued today. On the same day it issued software fixes as part of its Patch Tuesday schedule, Microsoft released a pre-patch advisory to warn of the risk of remote...

Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow

Added: 03/04/2010 CVE: CVE-2010-0033 BID: 38107 OSVDB: 62241 Background Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself. Problem A stack overflow vulnerability in the handling of TextBytesAtom...

ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities

ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-10-022 March 1, 2010 -- CVE ID: CVE-2009-2753 -- Affected Vendors: IBM -- Affected Products: IBM Informix -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability

ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-024 March 2, 2010 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have be...

Hacker Report 'High Risk' Flaws in Safari Browser

Over the last two weeks, security researchers have reported eight different zero-day vulnerabilities in Apple’s Safari browser. Details of these vulnerabilities, all rated “high risk,” have been sold to Tippingpoint’s Zero Day Initiative ZDI, a program that purchases the rights to vulnerability...

UBUNTU-CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...