CVE-2010-1199

creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34192 2010-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14949...

CVE-2010-2439

creationtimestamp| type| source ---|---|--- 2010-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13934 2010-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13942 2010-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14397...

VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities (CVE-2010-2167)

VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities CVE-2010-2167 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Flash Player is a cross-platform browser-based application runtime that delivers uncompromised viewin...

CVE-2010-5045

creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13880...

Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

Tool Expoits Data Flaws in JavaServer Faces

Researchers have released software that exposes private information and executes arbitrary code on sensitive websites by exploiting weaknesses in the widely used web development technology JavaServer Faces. Read the full article. The Register...

SAP NetWeaver Workflow Modeler - Multiple XSS

Application: SAP NetWeaver Workflow Modeler Versions Affected: SAP NetWeaver NW2004s SP6 Workflow Modeler Vendor URL: http://www.sap.com Bugs: XSS Exploits: YES Reported: 06.08.2010 Vendor response: 07.08.2010 Date of Public Advisory: 12.02.2014 Reference: SAP Security Note 1860923 Author:...

MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow

This module exploits a vulnerability found in Excel 2002 of Microsoft Office XP. By supplying a .xls file with a malformed OBJ recType 0x5D record an attacker can get the control of the execution flow. This results in arbitrary code execution under the context of the user. Module Options msf use...

SAP Crystal Reports 2008 — Multiple XSS

Application: SAP Crystal Report Server 2008 Versions Affected: AP Crystal Report Server 2008 Vendor URL: http://www.sap.com Bugs: Linked XSS Vulnerability Exploits: YES Reported: 06.08.2010 Vendor response: 07.08.2010 Date of Public Advisory: 09.03.2011 Author: Dmitriy Chastuhin Description...

Anatomy of the Eleonore Exploit Kit

LIMASSOL, CYPRUS–When an unknown attacker compromised three domains belonging to the U.S. Bureau of Engraving and Printing last month, it became big news, mainly for the brazenness of the attack against a federal Web site. The bigger news, however, turned out to be that the attack involved the us...

clickartweb Design - SQL Injection

clickartweb Design SQL Injection Vulnerability Vendor: http://www.clickartweb.com Discovered by : cyberlog Site : Sekuritionline.net Channel : SekuritiOnline Now Just My Bot :P Dork : "diseño y programación Clickart" Exploit : site/quisom.php?id=SQL Injection site/eobregrupolleal.php?id= SQL...

DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera

No description provided by source. Advisory: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ----------------------------- URL: http://websecurity.com.ua/4248/ ----------------------------- Affected products: Mozilla Firefox, Internet Explorer 6, Internet Explorer 8, Google...

SyncBack Profile File Remote Buffer Overflow

The remote Windows host contains a version of SyncBack that is earlier than 3.2.21. Such versions are prone to a remote buffer overflow attack. An attacker may exploit this issue to execute arbitrary code in the context of the vulnerable application by tricking the user into importing a malicious...

(Gabriel's FTP Server) Open & Compact FTP Server 1.2 - 'PORT' Remote Denial of Service

============================================================================= Tilte: Open&Compact Ftp Server 1.2 "PORT" command Remote Denial of Service. ============================================================================= Date....................: 22-05-2010 Author..................:...

Q&A: HD Moore on Metasploit, Disclosure and Ethics

We conducted our third live chat this week, this one with HD Moore, the founder of the Metasploit Project and the CSO of Rapid7. Moore got a lot of great questions on a wide variety of topics, so if you weren’t able to join us, here’s a full transcript of the chat. Dennis Fisher: Hi everyone, and...

CVE-2010-2126

creationtimestamp| type| source ---|---|--- 2010-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34016 2010-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34017...

LinksAutomation Multiple Remote Vulnerabilities

----------------In The Name Of God------------ LinksAutomation Multiple Remote Vulnerabilities AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Google D0rk: "Powered By LinksAutomation" Sql Injection: --------- Exploit=...

Miniwebsvr 0.0.10 Directory Traversal

miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of the application available...

CVE-2005-3294

creationtimestamp| type| source ---|---|--- 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12604 2010-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15860...

VMware View Portal 3.1 - Cross-Site Scripting

VMware View Portal 3.1 - Cross-Site Scripting DSECRG-09-058 Vmware View - XSS vulnerability Source:http://www.dsecrg.com/pages/vul/show.php?id=158 Linked XSS in VMware Portal Digital Security Research Group DSecRG Advisory DSECRG-09-058 Application: VMware View Portal Versions Affected:...