CVE-2011-3025

CVE-2011-3025 affects Google Chrome prior to 17.0.963.56; the issue is a parsing vulnerability in H.264 data that can cause a remote denial of service via an out-of-bounds read. No exploitation details are provided in the sources beyond this description. A fix is available in Chrome 17.0.963.56 a...

CVE-2011-3025

Removed by vendor...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 105803 High CVE-2011-3015: Integer overflows in PDF codecs. Credit to Google Chrome Security Team scarybeasts. 106336 Medium CVE-2011-3016: Read-after-free with counter nodes. Credit to miaubiz. 108695 High CVE-2011-3017: Possible use-after-free in database handlin...

Chrome Stable Update

The Chrome Stable channel has been updated to 17.0.963.56 on Windows, Mac, Linux and Chrome Frame. This release fixes a number of stability and security issues in Chrome, and also includes a new version of Flash. More info on the Flash update is available from Adobe. Security fixes and rewards:...

CVE-2012-0851

The ffh264decodeseqparameterset function in h264ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via ...

Australian Nokia Sub Domain Defaced by Hackers

Australian Nokia Sub Domain Defaced by Hackers Latest News coming from Zone-H that Australian Nokia Sub Domain Defaced by Hacker going with codename - "aldyfrz" an Indonesian hacker. Reason of Hacking is Unclear and Security Breach possibly just Damage the Site. The Hacker Sub domain of Nokia is ...

CVE-2011-3448

Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

Heap overflow

Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

CVE-2011-3448

CoreMedia in Apple Mac OS X is affected by a heap-based buffer overflow prior to 10.7.3, exploitable via a crafted H.264 movie file and potentially enabling remote code execution or a denial of service. The issue is addressed by OS X 10.7.3 / Security Update 2012-001 (Mac OS X Lion 10.7.3 and rel...

CVE-2011-3448

Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

VebTek CMS LFD Vulnerability

Exploit for php platform in category web applications Name: VebTek CMS LFD Vulnerability Google Dork: intext:"Hosted by VebTek" Type: PHP Date: 2012-01-27 Author: BHG Security Center Discovered by: Mr.XHat Home: Black-HG.org/cc/ Tested On: Linux Apache Demo:...

Video Conferencing Systems Vulnerable To Hackers

Video Conferencing Systems Vulnerable To Hackers According to a story published earlier this week by the New York Times, A security expert at Rapid 7 found that common videoconferencing equipment could give hackers access to company conference rooms and boardrooms. An investigation led by chief...

Parallels H Sphere 3.3 P1 Cross Site Scripting

Title: ====== Parallels H Sphere v3.3 P1 - Multiple Persistent Vulnerabilities Date: ===== 2012-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=392 VL-ID: ===== 392 Introduction: ============= Parallels H-Sphere delivers a multi-server hosting automation solution...

Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities

Document Title: =============== Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=392 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities

Document Title: =============== Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=392 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Data Stealing Malware on Internal Computer of Japan Space Agency

Data Stealing Malware on Internal Computer of Japan Space Agency Japan Aerospace Exploration Agency JAXA announce that their computer has been infected with a virus, leading to a possible leak of data on its H-II Transfer Vehicle HTV the craft popularly known as Konotori that hauls cargo for the...

Cisco IOS Software Network Address Translation Vulnerabilities (cisco-sa-20100922-nat)

The Cisco IOS Software Network Address Translation functionality contains three denial of service DoS vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol SIP packets, the second vulnerability in the translation of H.323 packets and the third vulnerability...

WordPress Comment Rating Cross Site Scripting / SQL Injection

Exploit Title: Wordpress comment rating plugin multiple Vulnerabilities Google Dork: 1- inurl:"/wp-content/plugins/comment-rating/" 2- inurl:"/ck-processkarma.php?id=" Date: 2/1/2012 Author: The Evil Thinker Contact : [email protected] Software Link: www.wordpress.com Vulnerable plugin: Comme...

Unbreakable Enterprise kernel security and bug fix update

2.6.32-300.3.1.el6uek - proc: fix oops on invalid /proc/ /maps access Linux Torvalds - Revert 'capabilities: do not grant full privs for setuid w/ file caps + no effective caps' Joe Jin - mm: Use MMFCOMPAT instead ia32compat to prevent kabi be broken Joe Jin - proc: enable writing to /proc/pid/me...

H.323 Version Scanner

Detect H.323 Version. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'H.323 Version Scanner', 'Description' = 'Detect H.323 Version.', 'Author' = 'hdm', 'License' = MSFLICENSE registeroptions...