Kroger Customer Database Hacked !

Kroger Customer Database Hacked ! The company announced in an e-mail to customers their system has been hacked by someone outside the company. This means the hacker had access to customer names and e-mail addresses contained in the Kroger database. Kroger stresses only the names and e-mail...

GOM Media Player 2.1.6.3499 Denial Of Service

!/usr/bin/perl +Exploit Title: GOM Media Player 2.1.6.3499 0day Buffer overflow/DOS Exploit +Software Link: download.cnet.com/GOM-Media-Player/3000-21394-10701768.html +Software : GOM Media Player +Version : 2.1.6.3499 +Tested On : WIN-XP SP3 + Date : 31.03.2011 + Hour : 3:37 PM Similar Bug was...

Real player 14.0.2.633 - Buffer Overflow (Denial of Service) (PoC)

!/usr/bin/perl +Exploit Title: Real player 14.0.2.633 Buffer overflow/DOS Exploit +Software Link: www.soft32.com/download122615.html +Software: Real player +Version: 14.0.2.633 +Tested On: WIN-XP SP3 + Date : 31.03.2011 + Hour : 13:37 PM Similar Bug was found by cr4wl3r in MediaPlayer Classic...

WESPA PHP Newsletter 3.0 Administrator Password Change

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

Adobe Pushes Critical Patch in Flash Player, Reader, Acrobat

Adobe said it is releasing security updates on Monday to address a critical vulnerability in Adobe Flash Player that is being exploited in the wild and could allow a remote attacker to take control of the affected system. The patch is a follow-up to a March 14 Security Advisory from the company...

CVE-2010-4766

The AgentTicketForward feature in Open Ticket Request System OTRS before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a...

CVE-2008-7280

Affected product: Open Ticket Request System (OTRS) prior to 2.2.7. Component: Kernel/System/EmailParser.pm in PostmasterPOP3.pl. Description of issue: Malformed UTF-8 handling in the email parsing logic can be triggered by crafted messages, allowing remote attackers to cause a denial of service ...

CVE-2008-7280

Removed by vendor...

CVE-2010-4764

Removed by vendor...

CVE-2009-5057

Removed by vendor...

CVE-2010-4766

The AgentTicketForward feature in Open Ticket Request System OTRS before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a...

CVE-2010-4766

Removed by vendor...

Unfixed XSS vulnerability at www.eicesi.fr

Security researcher warvector, has submitted on 17/03/2011 a cross-site-scripting XSS vulnerability affecting www.eicesi.fr, which at the time of submission ranked 1711715 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Microsoft Windows Picture and Fax Viewer Library Vulnerability !

Microsoft Windows Picture and Fax Viewer Library Vulnerability ! I. BACKGROUND The Windows Picture and Fax Viewer "shimgvw.dll" library is used by Windows Explorer to generate thumbnail previews for media files. II. DESCRIPTION Remote exploitation of a buffer overflow vulnerability in multiple...

Majordomo2 directory traversal

Directory traversal on help command processing via e-mail or Web...

Hacker sends teen's half-naked photo to Facebook, e-mail contacts !

BREMERTON — The partially naked photograph of a Bremerton teenager has managed to circulate to her e-mail contacts, teachers and even to colleges where she'd applied to school, according to Bremerton police reports. The girl said she'd sent a picture of herself wearing only underwear to her...

Linux distributor security list destroyed after hacker compromise !

Hackers have compromised a private e-mail list used by Linux and BSD distributors to share information on embargoed security vulnerabilities and used a backdoor to sniff e-mail traffic, according to the moderator of the list. In a note to "Vendor-Sec" members, moderator Marcus Meissner said he...

CVE-2011-0436

The registeruser function in client/newaccountform.php in Domain Technologie Control DTC before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0436

The registeruser function in client/newaccountform.php in Domain Technologie Control DTC before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

TIOD v1.3.3 for iPhone / iPod touch Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: TIOD v1.3.3 for iPhone / iPod touch, Directory Traversal Date: 03/03/2011 Author: email protected, email protected E-Mail : R3dal3rt.team at gmail dot com Twitter : http://twitter.com/R3dAl3rtTeam Software Link:...