CVE-2009-2882

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33106 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33108 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33107 2009-06-24...

CVE-2009-3513

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33121 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33120 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33119...

CVE-2009-0714

creationtimestamp| type| source ---|---|--- 2009-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9007 2009-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9006...

CVE-2009-4690

creationtimestamp| type| source ---|---|--- 2009-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33098 2009-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33097...

PHP 5.2.10 safe_mode Bypass

PHP safemode bypass with exec/system/passthru Once again php public new version :php5.2.10 ,and it fix lots of bugs, like this : Bug 45997safemode bypass with exec/system/passthru incorrect fix php5.2.10 ... b = strrchrcmd, PHPDIRSEPARATOR; ifdef PHPWIN32 if b && b == '\' && b == cmd...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:134)

Security vulnerabilities have been discovered and corrected in Mozilla Firefox 3.x : CVE-2009-1392: Firefox browser engine crashes CVE-2009-1832: Firefox double frame construction flaw CVE-2009-1833: Firefox JavaScript engine crashes CVE-2009-1834: Firefox URL spoofing with invalid unicode...

CVE-2009-2286

creationtimestamp| type| source ---|---|--- 2009-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8982 2009-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9302...

CVE-2009-2134

creationtimestamp| type| source ---|---|--- 2009-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8941...

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion Denial of Service !/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploits found with this code can be found at http://www.securityscraper.com/ Released under the VoIPER project Do not hesitate to show enthusiasm and support...

MS09-021: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

The remote host contains a version of Microsoft Excel / Excel Viewer / 2007 Microsoft Office system or the Microsoft Office Compatibility Pack that is affected by several buffer overflow and memory corruption vulnerabilities. If an attacker can trick a user on the affected host into opening a...

KLA10033 Multiple ACE vulnerabilities in Adobe Acrobat & Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat & Reader. getAnnots and customDictionaryOpen methods in JavaScript API can be exploited to cause denial of service or execute arbitrary code through a specially designed pdf file. Original advisories Adobe bulletin Exploitation...

CVE-2009-1140

creationtimestamp| type| source ---|---|--- 2009-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33024...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES...

Microsoft Windows Search Script Injection Vulnerability

Description Microsoft Windows Search is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied input when previewing search results. Successful exploits will cause malicious script code to run in the local context, allowing attackers to steal potentially...

CVE-2009-2016

creationtimestamp| type| source ---|---|--- 2009-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8894...

CVE-2009-2164

creationtimestamp| type| source ---|---|--- 2009-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8884 2009-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8885...

SQL INJECTION VULNERABILITY--LightOpen CMS Devel 0.1-->

--------------------------------------------------------- SQL INJECTION VULNERABILITY--LightOpen CMS Devel 0.1-- --------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/lightopencms/ --DOWNLOAD: http://sourceforge.net/projects/lightopencms...

Online Grades And Attendance 3.2.6 Local File Inclusion

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://www.onlinegrades.org/ | |--DOWNLOAD: http://www.onlinegrades.org/ | |-...

Ewebeditor for the latest vulnerabilities and exploits Daquan[collection]-vulnerability warning-the black bar safety net

Article source: The following article in the collection is reproduced in the network: is a relatively comprehensive ewebeditor editor of the vulnerabilities collected, and now the website most of the ewebeditor editor, So ewebeditor vulnerability to the hazards is still quite large, do a bit of t...

The Twitter worm that isn't

By Roel Schouwenberg On Saturday an alert went out about a new Twitter worm. Could this have been another XSS-Worm? Upon clicking the link users would see the following: However that’s not all that happens. Covertly a connection is made to another server that will result in a malicious PDF being...