Microsoft to Issue Emergency Patch for Critical Windows Flaw

Microsoft will issue an out-of-band patch on Monday for a critical vulnerability in all of the current versions of Windows. The company didn’t identify which flaw it will be patching, but the description of the vulnerability is a close match to the LNK flaw that attackers have been exploiting for...

Joomla Appointinator 1.0.1 SQL Injection

Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities Name Appointinator Vendor http://appointinator.chemeia.info Versions Affected 1.0.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-27 X. INDEX ...

Freeway CMS 1.4.3.210 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= Freeway CMS 1.4.3.210 SQL Injection Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

IBM AIX 5l FTPd Remote DES Hash Exploit

Exploit for aix platform in category remote exploits ======================================= IBM AIX 5l FTPd Remote DES Hash Exploit ======================================= / IBM AIX 5l FTPd Remote DES Hash Exploit -- Advanced 'Datacenter' Edition : Should work on IBM AIX 5.1,5.2,5.3! probably on...

Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution Vulnerability

Description Microsoft Windows is prone to a vulnerability that may allow a file to automatically run because the software fails to properly handle 'LNK' files or 'PIF' files. An attacker may exploit this issue to execute arbitrary code. The attacker must entice a victim to view a specially crafte...

Microsoft: 25,000 Computers Attacked With Latest Windows Zero Day

The Windows Help and Support Center vulnerability that was patched with yesterday’s MS10-042 bulletin was under active attack by malware miscreants, especially in Europe where Microsoft tracked about 25,000 attempts to exploit the vulnerability. According to Microsoft’s Holly Stewart, the attacks...

Log1 CMS 2.0 Cross Site Request Forgery

input type="hidden" name="pass" value="Pa...

Addiction (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= Addiction index.php SQL Injection Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'...

SasCam WebCam Server 2.6.5 - ActiveX Overwrite (SEH)

SasCam WebCam Server 2.6.5 - ActiveX Overwrite SEH 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP Version 5.1.2600 'C Copyright 1985-2001 Microsoft Corp. ' 'C:\Documents and Settings\blake\Desktop...

iScripts EasySnaps 2.0 - Multiple SQL Injections

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities Name iScripts EasySnaps Vendor http://www.iscripts.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-01-07 X. INDEX I. ABOUT THE...

Fedora 11 : java-1.6.0-openjdk-1.6.0.0-34.b17.fc11 (2010-6039)

Add latest security patches. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

US-CERT Technical Cyber Security Alert TA10-159A -- Adobe Flash, Reader, and Acrobat Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA10-159A Adobe Flash, Reader, and Acrobat Vulnerability Original release date: June 08, 2010 Last revised: -- Source: US-CERT Systems Affected Adobe Flash Player 10.0.45.2 and earlier 10.x...

Security Advisory for Flash Player, Adobe Reader and Acrobat

Security Advisory for Flash Player, Adobe Reader and Acrobat Release date: June 4, 2010 Last updated: June 10, 2010 Vulnerability identifier: APSA10-01 CVE number: CVE-2010-1297 Platform: All Summary A critical vulnerability exists in Adobe Flash Player 10.0.45.2 and earlier versions for Windows,...

Adobe Flash Player, Reader, and Acrobat 'authplay.dll' Remote Code Execution Vulnerability

Description Adobe Flash Player, Reader, and Acrobat are prone to a remote code execution vulnerability. Adobe reports that this vulnerability is being exploited in the wild. This vulnerability is present in the following versions: Flash Player 10.0.45.2, 9.0.262, and earlier Flash Player 10.0.x a...

Windows 2000 Flaw Exploited

Online criminals are scanning the Internet and attacking Windows 2000 machines that haven’t had a recent Windows Media Service patch installed, but the damage is limited, said researchers. Read the full article. IDG News Service...

Java for Mac OS X 10.5 Update 7

The remote host is missing Java for Mac OS X 10.5 Update 7. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X : Java for Mac OS X 10.6 Update 2

The remote Mac OS X host is running a version of Java for Mac OS X 10.6 that is missing Update 2. The remote version of this software contains several security vulnerabilities, including some that may allow untrusted Java applets to obtain elevated privileges and lead to execution of arbitrary co...

Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Signedness Error Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Mac OS X 10.6.1 Update

The remote host is missing Mac OS X 10.6.1 Update. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...