Malware Infested PDFs Ruled 2009 Exploits

A newly released report shows that based on more than a trillion Web requests processed in 2009, the use of malicious PDF files exploiting flaws in Adobe Reader/Adobe Acrobat not only outpaced the use of Flash exploits, but also, grew to 80% of all exploits the company encountered throughout the...

Calendarix 0.8.20071118 - SQL Injection

Calendarix 0.8.20071118 - SQL Injection Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution ...

CVE-2010-0691

creationtimestamp| type| source ---|---|--- 2010-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11445...

Calendarix 0.8.20071118 - SQL Injection

Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution : Update: http://www.calendarix.com/ . :...

CVE-2010-0678

creationtimestamp| type| source ---|---|--- 2010-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11452...

Nokia Symbian S60v3 web browser DoS Exploits

Exploit for unknown platform in category dos / poc ============================================ Nokia Symbian S60v3 web browser DoS Exploits ============================================ This archive has six denial of service exploits that affect the Nokia Symbian S60v3 web browser. Exploits:...

HASHE! Solutions - Multiple SQL Injections

HASHE! Solutions - Multiple SQL Injections HASHE! Multiple Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : HASHE .:. Bug Type : Sql...

MS10-007: Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713)

The ShellExecute API function on the remote host fails to properly validate URLs, which could result in arbitrary code execution. A remote attacker could exploit this by tricking a user into making an application e.g. web browser pass specially crafted data to the vulnerable function, resulting i...

Samba Symlink Directory Traversal Vulnerability (Feb 2010)

Samba is prone to a directory traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Oracle 11g - Multiple Privilege Escalation Vulnerabilities

source: https://www.securityfocus.com/bid/38115/info Oracle Database is prone to multiple remote privilege-escalation issues because it fails to properly restrict access to certain packages. The attacker can exploit these issues to escalate their privileges to DBA or execute arbitrary operating...

The Web Won't Be Safe, Let Alone Secure, Unless We Break It

There are several security issues affecting all major Web browsers that have remained unaddressed for years probably because the bad guys haven’t leveraged them aggressively enough, but the potential is there. The problem is that the only known ways to fix these issues adequately is to “break the...

Tinypug Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Tinypug is a...

Tinypug 0.9.5 Cross Site Request Forgery / Cross Site Scripting

www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Tinypug is a...

Bugzilla Directory Access Information Disclosure Vulnerability

Bugzilla is prone to an information-disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. Versions prior to Bugzilla 3.0.11, 3.2.6, 3.4.5, and 3.5.3 are affected. OpenVAS Vulnerability Test $Id: bugzilla38025.nasl 5245...

Bugzilla Directory Access Information Disclosure Vulnerability

Bugzilla is prone to an information disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. Versions prior to Bugzilla 3.0.11, 3.2.6, 3.4.5, and 3.5.3 are affected. SPDX-FileCopyrightText: 2010 Greenbone AG Some text...

Bugzilla Group Selection During Bug Move Information Disclosure Vulnerability

Bugzilla is prone to an information disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. This issue affects the following: Bugzilla 3.3.1 through 3.4.4 Bugzilla 3.5.1 Bugzilla 3.5.2 SPDX-FileCopyrightText: 2010 Greenbone...

eWebeditor ASP Version - Multiple Vulnerabilities

eWebeditor ASP Version - Multiple Vulnerabilities Application Info: Name: eWebeditor Version: ASP Vulnerability: ======================= Arbitrary File Upload ======================= ======================= Arbitrary File Upload 2 =======================...

Rising AntiVirus 2008/2009/2010 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits...

UGiA PHP UPLOADER 0.2 - Arbitrary File Upload

======================================================================================== | Title : UGiA PHP UPLOADER V0.2 Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home : sourceforge.net/projects/upu/files | Dork : Powered b...

SAP NetWeaver XI SOAP Adapter — XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver XI SOAP Adapter 3.0-7.11 Vendor URL: Bugs: XSS Exploits: YES Reported: 25.01.2010 Vendor response: 25.01.2010 Date of Public Advisory: 09.03.2011 CVE-number: Author: Dmitriy Evdokimov Description SAP Netweaver 70 application XI SOAP...