Internet Security Systems 3.6 ZWDeleteFile Function Arbitrary File Deletion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20546/info Internet Security Systems ISS BlackICE PC Protection is prone to a file-deletion vulnerability. An attacker can exploit this issue to delete arbitrary files within the context of the affected application. This...

Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/20360/info Symantec AntiVirus is prone to a privilege-escalation vulnerability. Local attackers can exploit this issue to corrupt memory and execute arbitrary code with kernel-level privileges. Successful exploits may...

Panda Internet Security/Antivirus+Firewall 2008 - CPoint.sys Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28150/info Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because the application fails to sufficiently validate...

Internet Security Systems 3.6 BlackICE Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19800/info Internet Security Systems ISS BlackICE PC Protection is prone to a local denial-of-service vulnerability because the application fails to properly sanitize user-supplied input. This vulnerability allows local...

Simple PHP Blog 0.5.1 - Local File Inclusion Vulnerability

No description provided by source. Simple PHP Blog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context ...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow

No description provided by source. $Id: nis2004get.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Symantec Norton Internet Security 2003 ICMP Packet Flood DoS

No description provided by source. source: http://www.securityfocus.com/bid/6598/info Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive approximately 65500 or more number of ICMP packet...

AVG Internet Security 2011 Safe Search for IE DoS

No description provided by source. !-- Title : AVG Internet Security 2011 Safe Search for IE DoS Found By : DrIDE COM Object ID : 3CA2F312-6F6E-4B53-A66E-4E65E497C8C0 AVG Safe Search Module for IE COM Object Filename : C:\Program Files\AVG\AVG10\avgssie.dll File Version : 10.0.0.1151 Tested On :...

Internet Security Systems ICECap Manager 2.0.23 Default Username and Password

No description provided by source. source: http://www.securityfocus.com/bid/1216/info ICECap Manager is a management console for BlackICE IDS Agents and Sentries. By default, ICECap Manager listens on port 8081, transmits alert messages to another server on port 8082, and has an administrative...

Kaspersky Internet Security 2013 - Denial of Service Vulnerability

No description provided by source. I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky...

vBulletin DoS - all version

No description provided by source. DOS Vbulletin 92% Works ; Tested on all versions! and can DOS the server Perl Script use Socket; if @ARGV 2 &usage $rand=rand10; $host = $ARGV0; $dir = $ARGV1; $host = s/http:////eg; for $i=0; $i10; $i-- $user=vb.$rand.$i; $data = s= ; $len = length $data; $foo...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

No description provided by source. $Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Trend Micro Internet Security 2010 ActiveX Remote Exploit (UfPBCtrl.DLL)

No description provided by source. !-- Title: Trend Micro Internet Security Pro 2010 ActiveX Unicode Remote Exploit Version: UfPBCtrl.DLL ver 17.50.0.1366 XPSP3 English Version: UfPBCtrl.dll ver 17.50.0.1647 XPSP3 English -- Hotfix release Coded By: DrIDE Credits: Abyssec Tested: XPSP3 English +...

Yahoo Toolbar Vulnerability Triggers Non-Exploitable XSS Payload on All Websites

Yahoo offers a web browser toolbar which includes apps for leading sites like Facebook, Yahoo! Mail, Weather and News. Yahoo Toolbar also known as Y! Toolbar is available for Internet Explorer, Firefox and Google Chrome web browsers. Yahoo Toolbar is one of the most popular and widely installed w...

Easy File Management Web Server v5.3 - UserID Remote Buffer Overflow (ROP)

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Easy File Management Web Server v5.3 - USERID Remote Buffer Overflow ROP Version: 5.3 Date: 2014-05-31 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link:...

Meet myBulletins: an online security bulletin customization service

Microsoft is committed to promoting a safer, more trusted Internet and providing monthly security updates is one of the ways our customers keep their devices and connections to the Internet more secure. Packaging updates together into a monthly bulletin cycle stems from customer feedback and offe...

CVE-2014-3450

Unspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and earlier, Internet Security 2014 19.01.01 and earlier, and AV Pro 2014 13.01.01 and earlier allows local users to gain privileges via unspecified vectors...

Code injection

Unspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and earlier, Internet Security 2014 19.01.01 and earlier, and AV Pro 2014 13.01.01 and earlier allows local users to gain privileges via unspecified vectors...

CVE-2014-3450

CVE-2014-3450 affects Panda Security products for Windows: Panda Gold Protection 2014 (7.01.01), Panda Global Protection 2014 (7.01.01), Panda Internet Security 2014 (19.01.01), and Panda AV Pro 2014 (13.01.01). All are listed as vulnerable to a local privilege escalation (Privilege Escalation Vu...

Threat Outbreak Alert: Fake Security Patch Download Instructions Email Messages on May 20, 2014

Medium Alert ID: 34309 First Published: 2014 May 20 18:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a security update for the recipient. The text in the email message attempts to convince the...