net2ftp 0.98 (stable) - '/admin1.template.php' Local/Remote File Inclusion

source: https://www.securityfocus.com/bid/45312/info The 'net2ftp' program is prone to a local file-include vulnerability and a remote file-include vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to obtain sensitive...

CVE-2010-4513

creationtimestamp| type| source ---|---|--- 2010-12-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35064 2010-12-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35063 2013-09-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28272...

CVE-2010-3850

creationtimestamp| type| source ---|---|--- 2010-12-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15704 2011-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17787...

Adobe Illustrator Path Subversion Arbitrary DLL Injection Code Execution (APSB10-29)

The version of Adobe Illustrator installed on the remote host is earlier than 15.0.2. Such versions insecurely look in their current working directory when resolving DLL and file dependencies, such as for 'aires.dll'. If a malicious DLL with the same name as a required DLL is located in the...

Linksys Router Cross Site Request Forgery

It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I have written additional proof of concept...

Microsoft Research Develops Zozzle JavaScript Malware Detection Tool

As browser-based exploits and specifically JavaScript malware have shouldered their way to the top of the list of threats, browser vendors have been scrambling to find effective defenses to protect users. Few have been forthcoming, but Microsoft Research has developed a new tool called Zozzle tha...

SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 2340)

Oracle has released JRE 6 Update 20 in order to fix potential remote code execution vulnerabilities CVE-2010-0887. Please refer to Oracle's site for more information: http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010 -0886.html %NASLMINLEVEL 70300 C Tenable Network Security,...

Google Adds Flash Sandbox to Chrome Browser

Two weeks after releasing Reader X with its new sandbox security mechanism, Adobe has teamed up with Google to enable a sandboxed version of its Flash software to run in Google Chrome. The two companies said on Wednesday that Google has released a version of Chrome to its developer channel that...

RHEL 6 : wireshark (RHSA-2010:0924)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0924 advisory. - wireshark: stack overflow in BER dissector CVE-2010-3445 - Wireshark: Heap-based buffer overflow in LDSS dissector CVE-2010-4300 Note that...

CVE-2010-3266

creationtimestamp| type| source ---|---|--- 2010-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35031 2010-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15653...

WSN Links SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== WSN Links SQL Injection Vulnerability ===================================== I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injectio...

Foxit PDF Reader v4.1.1 Title Stack Buffer Overflow

$Id: foxittitlebof.rb 11096 2010-11-22 17:43:42Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Anup Ghosh on PDF Exploits and Sandboxes

Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks. Podcast audio courtesy of...

Assessing the Adobe Reader X Sandbox

Over the past few years, malicious PDFs have become common place and a prefered vector for attackers. Last week, Adobe announced the release of Reader X – the much anticipated next major release of their ubiquitous document reader, which includes a new security feature called ”Protected Mode”...

CVE-2010-3888

creationtimestamp| type| source ---|---|--- 2010-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15589 2012-07-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19930 2026-06-19 16:45:39+00:00| exploited|...

Adobe Releases Reader X With Sandbox

Adobe has released the much anticipated new version of its Reader software, Adobe Reader X, which includes the new sandboxing feature meant to prevent exploits against the software from affecting other applications on a PC. The new version of Reader, one of the more widely deployed applications...

[TEHTRI-Security] CVE-2010-1752: Update your MacOSX

Gents, During the 1st HITB Amsterdam 2010, TEHTRI-Security made advisories about security issues on handled devices iPhone, HTC, iPad, BlackBerry, etc. As we made penetration tests for more than 15 years on highly sensitive networks, we were luckily able to find vulnerabilities working on those...

VLC Media Player < 1.1.5 Buffer Overflow

The version of VLC media player installed on the remote Windows host is earlier than 1.1.5. Such versions are vulnerable to a stack smashing attack in the Samba network share access module due to an error in the way VLC calls the Windows API function 'WNetAddConnection2A' when opening 'smb://'...

Drive-By Downloads Still Running Wild

For some time now, the browser has been the most dangerous piece of software on the Web, and to hear researchers tell it, the climate it likely to get far worse before it gets any better. The attack landscape has shifted in a lot of important ways in the last few years, but none of the changes ha...

SAP NetWeaver Administrator Panel ECC 6.0 Cross Site Scripting

Digital Security Research Group DSecRG Advisory Application: SAP NetWeaver Administrator panel Versions Affected: SAP NetWeaver Administrator panel from ECC 6.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 07.09.2009 Vendor response: 08.09.2009 Date of Public Advisory: 09.11.2010...