SuSE 11 Security Update : Firefox (SAT Patch Number 1340)

This update brings Mozilla Firefox from the 3.0 stable branch to the current stable branch version 3.5.3. It also fixes various security issues : - / / CVE-2009-3075: Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in Firefox and oth...

SuSE 11 Security Update : Mozilla (SAT Patch Number 1328)

This update brings the Mozilla XULRunner engine to the 1.9.0.14 stable release. It also fixes various security issues : - / CVE-2009-30 /. MFSA 2009-47 / CVE-2009-3069 / CVE-2009-3070 / CVE-2009-3071 / CVE-2009-3072 / CVE-2009-3073 - Mozilla developers and community members identified and fixed...

HEAT Call Logging 8.01 SQL Injection

= ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=- http://www.frontrange.com/heat.aspx -=attack=- U:' OR HEATPass IS NOT...

HEAT Call Logging 8.01 - SQL Injection

HEAT Call Logging 8.01 - SQL Injection = ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=-...

HEAT Call Logging 8.01 SQL Injection

No description provided by source. = ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=- http://www.frontrange.com/heat.asp...

HEAT Call Logging 8.01 SQL Injection

Exploit for unknown platform in category web applications ==================================== HEAT Call Logging 8.01 SQL Injection ==================================== -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a...

HEAT Call Logging 8.01 - SQL Injection

= ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=- http://www.frontrange.com/heat.aspx -=attack=- U:' OR HEATPass IS NOT...

Dogrobot Malware Penetrates System Restore on Windows

GENEVA — Cyber crime gangs in China are penetrating the hard disk recovery cards on computers in Internet cafes and using a combination of zero-day flaws, rootkits and ARP spoofing techniques to steal billions of dollars worth of online gaming credentials. According to Microsoft anti-virus...

ZDI-09-066: Adobe RoboHelp Server Arbitrary File Upload and Execute Vulnerability

ZDI-09-066: Adobe RoboHelp Server Arbitrary File Upload and Execute Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-066 September 23, 2009 -- CVE ID: CVE-2009-3068 -- Affected Vendors: Adobe -- Affected Products: Adobe RoboHelp Server -- TippingPointTM IPS Customer Protection:...

Microsoft Excel BIFF format Qsir record memory corruption

Added: 09/11/2009 CVE: CVE-2009-1134 BID: 35246 OSVDB: 54958 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user closes a spreadshee...

ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability

ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-064 September 10, 2009 -- CVE ID: CVE-2009-2798 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Microsoft Excel BIFF format Qsir record memory corruption

Added: 09/11/2009 CVE: CVE-2009-1134 BID: 35246 OSVDB: 54958 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user closes a spreadshee...

Mozilla Foundation Security Advisory 2009-49

Mozilla Foundation Security Advisory 2009-49 Title: TreeColumns dangling pointer vulnerability Impact: Critical Announced: September 9, 2009 Reporter: TippingPoint ZDI Products: Firefox Fixed in: Firefox 3.5.3 Firefox 3.0.14 Description An anonymous security researcher, via TippingPoint's Zero Da...

ZDI-09-062: Microsoft Internet Explorer JScript arguments Invocation Memory Corruption Vulnerability

ZDI-09-062: Microsoft Internet Explorer JScript arguments Invocation Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-062 September 8, 2009 -- CVE ID: CVE-2009-1920 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- TippingPointTM...

Microsoft Confirms IIS FTP Zero-Day Flaw

Microsoft late Tuesday confirmed the publication of exploit code for a serious code execution vulnerability in the File Transfer Protocol FTP Service in Microsoft Internet Information Services IIS 5.0, 5.1, and 6.0. A security advisory from Redmond warned that the vulnerability could allow remote...

Discuz! Plugin Crazy Star < = 2.0 Sql injection Vulnerability-vulnerability warning-the black bar safety net

========================Author============================ + Founded : ZhaoHuAn + Contact : ZhengXingatshandagamesdotcom + Blog : http://www.patching.net/zhaohuan/ + Date : August, 26th 2 0 0 9 Double Seventh Festival ========================Soft Info========================= Software: Discuz!...

Discuz! Plugin Crazy Star <= 2.0 (fmid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Discuz! Plugin Crazy Star = 2.0 fmid SQL Injection Vulnerability ===================================================================...

Discuz! Plugin Crazy Star 2.0 - 'fmid' SQL Injection

============================================================ Discuz! Plugin Crazy Star = 2.0 Sql injection Vulnerability ============================================================ ========================Author============================ + Founded : ZhaoHuAn + Contact :...

Microsoft Office Web Components OWC.Spreadsheet BorderAround vulnerability

Added: 08/24/2009 CVE: CVE-2009-2496 BID: 35991 OSVDB: 56915 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A heap corruption vulnerability in the OWC10.Spreadsheet ActiveX control allows command execution when a user opens a web...

ZDI-09-058: Oracle Secure Backup Administration Server Authentication Bypass Vulnerability

ZDI-09-058: Oracle Secure Backup Administration Server Authentication Bypass Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-058 -- CVE ID: CVE-2009-1977 -- Affected Vendors: Oracle -- Affected Products: Oracle Secure Backup -- Vulnerability Details: This vulnerability allows...