Foxit Fixes PDF Executable Problem

Foxit on Friday released an update to fix the problem with PDF readers running executables without users’ permission. The problem, which was identified and publicized by Didier Stevens earlier this week, still exists in Adobe Reader. The Foxit security update fixes a problem in the reader in whic...

Norton Internet Security ActiveX Command Execution (CVE-2004-0364)

Norton Internet Security is a security solution produced by Symantec corporation. There exists a vulnerability within Norton Internet Security that allows a remote attacker to run arbitrary executables on the target system through a malicious call to a certain method of a vulnerable ActiveX...

Linux Daemons with Broken Links to Executables

By examining the '/proc' filesystem on the remote Linux host, Nessus has identified at least one currently-running daemon for which the link to the corresponding executable is broken. This can occur when the executable associated with a daemon is replaced on disk but the daemon itself has not bee...

Mozilla Code *sighs*

Mozilla Code sighs I reported a memory corruption vulnerability in Mozilla Codesighs, a "set of tools to help you determine the code and data size of shared libraries and executables. Once you can measure the code and data size, then you can measure drifts in size as code changes occur". Mozilla...

CVE-2009-4240

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors...

CVE-2009-4240

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors...

U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) privilege escalation

Application executes all executables with predefined names found in system...

Hewlett-Packard OpenView NNM Multiple Command Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard's Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaws exist within Perl CGI executables distributed with Network Node Manager NNM...

Rising Antivirus / Firewall weak security permissions

Weak permissions for program executables and services...

Researcher Finds Twitter Botnet Command Channel

Arbor Networks security researcher Jose Nazario has stumbled upon a crimeware botnet using Twitter as its command-and-control operation. The botnet, which is linked to identity thieves in Brazil, uses Twitter status messages to communicate with bots — sending new links for the infected computers ...

Steam v.54/894 Local Privilege Escalation Vulnerability

No description provided by source. Steam Multiple .exe's Local Privilage Escalation By: MrDoug mrdoug13atgmaildotcom Version Info: Steam windows client Built: Jun 30 2009, at 13:29:32 Steam API: v008 Steam Package versions: 54/894 Greetz: Slappywag, Doomchip, Bolo, Eliwood, and the rest. Special...

Steam Local Privilege Escalation

Steam Multiple .exe's Local Privilage Escalation By: MrDoug mrdoug13atgmaildotcom Version Info: Steam windows client Built: Jun 30 2009, at 13:29:32 Steam API: v008 Steam Package versions: 54/894 Greetz: Slappywag, Doomchip, Bolo, Eliwood, and the rest. Special Thanks: Jeremy Brown and...

Steam 54894 - Local Privilege Escalation

Steam 54894 - Local Privilege Escalation Steam Multiple .exe's Local Privilage Escalation By: MrDoug mrdoug13atgmaildotcom Version Info: Steam windows client Built: Jun 30 2009, at 13:29:32 Steam API: v008 Steam Package versions: 54/894 Greetz: Slappywag, Doomchip, Bolo, Eliwood, and the rest...

Steam 54/894 - Local Privilege Escalation

Steam Multiple .exe's Local Privilage Escalation By: MrDoug mrdoug13atgmaildotcom Version Info: Steam windows client Built: Jun 30 2009, at 13:29:32 Steam API: v008 Steam Package versions: 54/894 Greetz: Slappywag, Doomchip, Bolo, Eliwood, and the rest. Special Thanks: Jeremy Brown and...

Steam v.54/894 Local Privilege Escalation Vulnerability

Exploit for unknown platform in category local exploits ======================================================= Steam v.54/894 Local Privilege Escalation Vulnerability ======================================================= Steam Multiple .exe's Local Privilage Escalation By: MrDoug Version Info:...

Epson Status Monitor weak permissions

Weak permissions for EPSONEBRPCV401 and EPSONPMRPCV401 servicse executables...

Google Chrome Browser 0.2.149.27 Automatic File Download Exploit

No description provided by source. Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only. Use the code it...

google-download.txt

Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only. Use the code it at your own risk. The author will...

Apple Safari for Windows Multiple Vulnerabilities July-08

The host is installed with Apple Safari Web Browser, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplesafarimultvulnjuly08900002.nasl 5375 2017-02-20 16:39:23Z cfi $ Description: Apple Safari for Windows Multiple Vulnerabilities July-08 Authors: Chandan S...

Debian Security Advisory DSA 1616-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1616-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...