XnView 1.92.1 - Command-Line Arguments Buffer Overflow

XnView 1.92.1 - Command-Line Arguments Buffer Overflow // source: https://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may...

Flash Player <= 11.7.700.260 / 12.0.0.43 Unspecified Remote Code Execution (APSB14-04)

According to its version, the instance of Flash Player installed on the remote Windows host is equal or prior to 11.7.700.260 / 11.8.x / 11.9.x / 12.0.0.43. It is, therefore, potentially affected by an unspecified vulnerability that could lead to arbitrary code execution. %NASLMINLEVEL 70300 C...

CVE-2014-1631

creationtimestamp| type| source ---|---|--- 2014-01-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39065 2014-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39066...

CVE-2006-2465

creationtimestamp| type| source ---|---|--- 2014-01-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31220 2014-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32358...

Innominate mGuard OpenSSL HeartBleed Vulnerability

OVERVIEW Researcher Bob Radvanovsky of Infracritical has notified NCCIC/ICS-CERT that Innominate has released a new firmware version that mitigates the OpenSSL HeartBleed vulnerability in the mGuard products. --------- Begin Update A Part 1 of 4 -------- Phoenix Contact branded devices are not...

PHPJabbers Vacation Packages Listing 2.0 - Multiple Vulnerabilities

PHPJabbers Vacation Packages Listing 2.0 - Multiple Vulnerabilities Vacation Packages Listing V2.0 - Multiple Vulnerabilities ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

Adobe Updates Flash, Reader, Acrobat on Patch Tuesday

Adobe has issued security bulletins addressing five critical vulnerabilities in its Flash, Reader and Acrobat Players that could give attackers the ability to cause crashes and wrest control of affected machines. Adobe claims it is not aware of any in-the-wild exploits targeting these bugs...

Event Booking Calendar 2.0 Multiple Vulnerabilities

Event Booking Calendar version 2.0 suffers from cross site request forgery, remote SQL injection, and cross site scripting vulnerabilities. Event Booking Calendar V2.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact...

Dredge School Administration System 1.0 Multiple Vulnerabilities

Dredge School Administration System version 1.0 suffers from backup disclosure, account disclosure, cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities. Dredge School Administration System V1.0 - Multiple Vulnerabilties...

Command School Student Management System - swadmin_sgrades.php?id SQL Injection

Command School Student Management System - swadminsgrades.php?id SQL Injection source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. A cross-site request forger...

SAP NetWeaver - SMB Relay

Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2077260 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...

Command School Student Management System - swadmin_generations.php?id SQL Injection

Command School Student Management System - swadmingenerations.php?id SQL Injection source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. A cross-site request...

CVE-2014-1636

creationtimestamp| type| source ---|---|--- 2014-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38954 2014-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38944 2014-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38949 2014-01-07...

Jacob Appelbaum 2013 30c3 keynote on NSA Surveillance

Cryptographer, developer and activist Jacob Appelbaum took to the pages of Germany’s Der Spiegel and the keynote dais of the 30th Chaos Communication Congress this weekend to deliver a damning expose of the catalog of backdoors, monitoring programs and products that potentially have and could be...

JavaScript Malicious Obfuscation Techniques

Known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Since the exploits are obfuscated they may not be detected by IDS and IPS systems, thus allowing attackers to successfully attack target machines...

SnapChat Vulnerable to Two Exploits

After claiming the makers of SnapChat repeatedly ignored their disclosures over a period of four months, Gibson Security recently published the full details of a pair of bugs in the photo and video sharing application. One could give an attacker the ability to connect phone numbers with usernames...

Malware Infections on the Rise in Turkey

In its latest Security Intelligence Report, the Microsoft Malware Protection Center MMPC determined that the malware encounter rate in Turkey is far greater than that of any other country in the entire world, let alone the other countries among the top 10 in malware infections. Encounter rate, pe...

[Blue|Smash] Bluetooth Penetration Testing Suite

Blue|Smash is a free open source bluetooth pentest suite, powered by python for linux. I built Blue|Smash to aid me in my bluetooth adventures and thought others might benefit from my work :D. Here is a list of some of the tools included. Sorbo's Frontline bluetooth sniffer. A bruteforce scanner...

CVE-2013-7189

creationtimestamp| type| source ---|---|--- 2013-12-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38885 2013-12-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38888 2013-12-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38887 2013-12-15...

Osclass - Multiple Input Validation Vulnerabilities

Osclass - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/64386/info Osclass is prone to the following input-validation vulnerabilities: 1. A cross-site request-forgery vulnerability 2. Multiple directory-traversal vulnerabilities 3. An SQL-injection...