CVE-2011-3957

Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF documents...

Anonymous Hack Syrian President's Emails with Password "12345"

Anonymous Hack Syrian President's Emails with Password "12345" Hundreds of emails from Syrian President Bashar Assad's office were leaked on Monday after an attack by the hacker group Anonymous. The target was the mail server of the Syrian Ministry of Presidential Affairs and about 78 inboxes of...

Apple OS X multiple security vulnerabilities

Graphics, Video, Audio and documents parsing vulnerabilities. Information leakage, code execution via DNS resolver. Privilege escalation. Vulnerabilities in 3rd party packages...

t1lib: Invalid pointer dereference via crafted Type 1 font

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf...

t1lib: Use-after-free via crafted Type 1 font

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service application crash via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different...

PT-2012-2239 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A remote code execution issue exists due to an incomplete blacklist vulnerability in the Windows Packager configuration. This allows remote attackers to execute arbitrary code...

Sql injection

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to login.php, 3 the filter parameter to widget.dokumentilista.php, and 4 the finnalogid parameter to nalozinaslov.php...

Hackers from China Target, Hit U.S. Chamber of Commerce

A band of hackers from China was able to gain access to the U.S. Chamber of Commerce and retrieve information on the organization’s employees for over a year before they were discovered in May 2010, according to a report in the Wall Street Journal today. The hackers infiltrated Chamber of Commerc...

Microsoft Office Remote Code Execution Vulnerability (2590602)

This host is missing an important security update according to Microsoft Bulletin MS11-089. OpenVAS Vulnerability Test $Id: secpodms11-089.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Remote Code Execution Vulnerability 2590602 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod...

CVE-2011-3908

Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3911

Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

Out-of-bounds

Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

Out-of-bounds

Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3911

Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

Combination of Eyes and Algorithms Wins $50K Prize In DARPA's Shredder Challenge

Scientists for the Pentagon’s far-out research branch, DARPA, weren’t sure that anyone would be able to collect the $50,000 prize when they announced their Shredder Challenge to find ways to reassemble shredded documents just over a month ago. This week – just 33 days later – they had a winner...

SuSE Update for acroread SUSE-SA:2011:044

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2011:044 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Computershare Says No Customer Data Exposed In Breach

The investor services company told Threatpost that an investigation has determined that data stolen by a rogue employee didn’t contain shareholder data. However, the company still hasn’t retrieved two USB drives containing company email and documents that outline some of Computershare’s closely...

acroread: multiple code execution flaws (APSB11-16)

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers to execute arbitrary code via a crafted document, related to a "cross document script execution vulnerability."...

VulnCheck KEV: CVE-2011-3402

Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page...

Japanese Parliament Struggling To Address Hack, Data Theft

The fallout from a targeted attack on computers belonging to members of the Japanese House of Representatives continued on Tuesday, with claims that both servers and PCs on the House network were infected with a password stealing Trojan, and reports that House members had taken to storing sensiti...