How I Got Here: Marc Maiffret

Dennis Fisher talks with Marc Maiffret about his teenage years as a phone phreaker and BBS denizen, the early years of the vulnerability research scene, the Code Red worm and its aftermath and how the security scene has changed in the past 15 years. Download: 10maiffret.mp3...

CentOS Update for ghostscript CESA-2012:1256 centos6

Check for the Version of ghostscript OpenVAS Vulnerability Test CentOS Update for ghostscript CESA-2012:1256 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Moderate: Red Hat Security Advisory: ghostscript security update

Updated ghostscript packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Mozilla Foundation Security Advisory 2011-49

Mozilla Foundation Security Advisory 2011-49 Title: Memory corruption while profiling using Firebug Impact: Critical Announced: November 8, 2011 Reporter: Marc Schoenefeld Products: Firefox, Thunderbird Fixed in: Firefox 8.0 Firefox 3.6.24 Thunderbird 8.0 Thunderbird 3.1.16 Description Marc...

CanadianISP.ca SQL Injection

Title: ====== Canadian ISP Website - SQL Injection Vulnerability Date: ===== 2011-09-23 VL-ID: ===== 282 Reference: ========== http://www.vulnerability-lab.com/getcontent.php?id=282 Introduction: ============= Canadianisp.ca - Is a wholly owned project of Marc Bissonnette / InternAlysis. It was...

Canadian ISP CA Website - SQL Injection Vulnerability

Document Title: =============== Canadian ISP CA Website - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=282 Release Date: ============= 2011-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 282...

Marc Merlin BAPPA Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Joomla! Component com_booklibrary - SQL Injection

Exploit Title: SQL Injection in component combooklibrary for Joomla Date: 17.03.2011 Author: Marc Doudiet Software Link: http://ordasoft.com/Shop/OrdaSoft/BookLibrary/BookLibrary-search-Books-module-version-2.0/flypage.tpl.html Version: Version 2.0 for Joomla 1.5 Tested on: PHP Mysql There is a S...

Webmedia Explorer 6.13.1 Cross Site Scripting

Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor Notification: 19 October 2010...

Webmedia Explorer 6.13.1 - Persistent Cross-Site Scripting

Webmedia Explorer 6.13.1 - Persistent Cross-Site Scripting Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably...

Stored XSS vulnerability in Webmedia Explorer

Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor Notification: 19 October 2010...

Mandriva Update for freetype2 MDVSA-2010:201 (freetype2)

Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2010:201 freetype2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Q&A: Marc Maiffret of eEye

Marc Maiffret, a security researcher known for his controversial opinions on software security and his efforts to get Microsoft specifically to improve the security of its products, is returning to eEye Digital Security, the vulnerability management company he helped found more than a decade ago...

Ubuntu Update for openoffice.org vulnerability USN-949-1

Ubuntu Update for Linux kernel vulnerabilities USN-949-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9491.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for openoffice.org vulnerability USN-949-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu Update for netpbm-free vulnerability USN-934-1

Ubuntu Update for Linux kernel vulnerabilities USN-934-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9341.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for netpbm-free vulnerability USN-934-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

The Lazy Programmer's Guide to Secure Computing

In this Google TechTalk, HP’s Marc Stiegler describes a different approach to security software...

Marc Maiffret at RSA 2010

Dennis Fisher talks with Marc Maiffret of FireEye at RSA Conference 2010 about the lack of sophistication in the Aurora attack and the state of malware attacks on the Web...

Marc Maiffret on Modern Malware, Code Red and the State of Security Research

Dennis Fisher talks with researcher Marc Maiffret of FireEye about the evolution of modern malware, the discovery of the Code Red worm and how far security research has come in the last 10 years. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

FtpXQ 3.0 - (Authenticated) Remote Denial of Service

!/usr/bin/python banner= "\r\n" " Exploit Title: FtpXQ authenticated remote Dos " " trial on http://www.datawizard.net/Products/FtpXQ/Setup.EXE Version 3.0.1 \r\n" " Tested on XP sp2 english" " Needs write access -- vuln on MKD command\r\n" " Vulnerability found by Marc Doudiet\r\n" " For...

[scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation

IBM Lotus Notes 8.5 RSS Widget Privilege Escalation scip AG Vulnerability ID 4021 09/08/2009 http://www.scip.ch/?vuldb.4021 I. INTRODUCTION Lotus Notes is a client-server, collaborative application developed and sold by IBM Software Group. More information is available on the official product web...