Microsoft Releases December 2012 Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Internet Explorer, Microsoft Office, and Microsoft Server Software as part of the Microsoft Security Bulletin summary for December 2012. These vulnerabilities could allow an attacker to bypass security features or...

Microsoft Fixing 11 Vulnerabilities for December Patch Tuesday

Microsoft announced today that it plans on shipping seven bulletins, five critical, two important, for the December edition of its monthly patch Tuesday security bulletin release cycle. The year’s last scheduled batch of patches will address 11 vulnerabilities in all currently supported operating...

Bangladesh military Server and internal network Compromised

Indian Hacker Godzilla aka G.O.D hacked into Bangladesh Army servers, belongs to domain www.army.mil.bd and leak Internal Network Information via a note. Hacker also publicly posted their Cisco Router passwords and Mac-Address of all machines within the network. We talked with the hacker to know...

Description of the update for Lync Server 2010, Web Components Server: December 2011

Describes the update for Lync Server 2010, Web Components Server that is dated December 2011.SummaryThis article describes the update for Microsoft Lync Server 2010, Web Components Server that is dated December 2011. ResolutionMicrosoft Download CenterThe following file is available for download...

Description of the update for Lync Server 2010 Bandwidth Policy Service: December 2011

Describes the update for Lync Server 2010 Bandwidth Policy Service that is dated December 2011.SummaryThis article describes the update for Microsoft Lync Server 2010 Bandwidth Policy Service that is dated December 2011.INTRODUCTIONIssues that this update fixesThis update fixes the following...

MyStore Tienda Virtual SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================================================== | Title : SQL Injection MyStore Tienda Virtual | | Author : Arturo Zamora | | email : email protected | | DAte : 02/01/2012 | | Verified : yes | | Risk :...

krb5: telnet client and server encrypt_keyid heap-based buffer overflow

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

krb5: telnet client and server encrypt_keyid heap-based buffer overflow

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

CVE-2011-4369

Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers ...

Description of the update for Lync Server 2010: December 2011

Describes the update for Lync Server 2010 that is dated December 2011.SummaryThis article describes the update for Microsoft Lync Server 2010 that is dated December 2011. ResolutionMicrosoft Download CenterThe following file is available for download from the Microsoft Download Center:Download th...

MS11-089: Description of the security update for Visio 2010: December 13, 2011

Describes the security update for Microsoft Visio 2010 that was released on December 13, 2011.INTRODUCTIONMicrosoft has released security bulletin MS11-089. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-095: Vulnerability in Active Directory could allow remote code execution: December 13, 2011

Resolves a vulnerability in Active Directory that could allow remote code execution.INTRODUCTIONMicrosoft has released security bulletin MS11-095. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

CVE-2011-2462

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unknown vectors, as exploited in...

CVE-2011-2462

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unknown vectors, as exploited in...

THN December Magazine Released ! Who We are at The Hacker News ?

THN December Magazine Released ! Who We are at The Hacker News ? It is hard to re-cap the past year and all the excitement and hard work we have experienced launching an online magazine. The subject, Hacking, is even more exciting as the technology world awakens to the security issues facing all...

Mariposa: December, 2009

The takedown of the Mariposa botnet is an example of both the possibilities and complications facing law enforcement around the world as they work to stamp out botnets. A cyberlaw enforcement success story, the take down of Mariposa by Spanish authorities in December, 2009, followed months of wor...

Phenotype CMS 3.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability ID: HTB22769 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphenotypecms.html Product: Phenotype CMS Vendor: http://www.phenotype-cms.com http://www.phenotype-cms.com Vulnerable Version: 3.0 Vendor Notification: 21...

Joomla XMovie 1.0 Local File Inclusion

Exploit Title: Joomla Component comxmovie 1.0 Local File Inclusion Vulnerability Author: KelvinX [email protected] Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr Date: December, 24-2010 Location: HCM City, Vietnam ------------------------ Application: comxmovie...

iDevSpot iDevCart 1.10 Multiple Local File Inclusion Vulnerabilities

Exploit for php platform in category web applications Author : v3n0m v3n0m666atlivedotcom Site : http://yogyacarderlink.web.id/ Date : December, 24-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:00 Application : iDevCart Price : $49.95 Version : 1.10 Other versions may also be affected...

Ecava IntegraXor Remote ActiveX Buffer Overflow PoC

Exploit for windows platform in category dos / poc !/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 http://www.integraxor.com/ There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to the...