Microsoft Fills Windows, Office Holes with March Patch Release

Microsoft Corp. issued their monthly security bulletins on Tuesday, with fixes for four known vulnerabilities in the company’s Windows operating system, Office suite and Remote Desktop Connection products. The March patch release included three bulletins: MS11-015, 016 and 017. Only one, MS11-015...

ZDI-11-103: Mozilla Firefox JSON.stringify Dangling Pointer Remote Code Execution Vulnerability

ZDI-11-103: Mozilla Firefox JSON.stringify Dangling Pointer Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-103 March 2, 2011 -- CVE ID: CVE-2011-0055 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Mozilla -- Affected Products: Mozilla Firefox -...

Mozilla Foundation Security Advisory 2011-07

Mozilla Foundation Security Advisory 2011-07 Title: Memory corruption during text run construction Windows Impact: Critical Announced: March 1, 2011 Reporter: Alex Miller Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Alex Miller reported that wh...

A letter to all Anonymous from Anonymous Hackers : Operation shutdown !

A letter to all Anonymous from Anonymous Hackers : Operation shutdown ! A letter released by Anonymous Hackers for all Anonymous .... as shown below : Anonymous We are anonymous, and we are Legion, for every one of us you find, and everyone you manage to take down, ten shall take his place, we do...

CVE-2006-6576

creationtimestamp| type| source ---|---|--- 2011-01-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16036 2011-06-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17355 2018-05-29 15:50:33+00:00| seen|...

MVSA-10-002 - Google Message Security SaaS - Multiple XSS vulnerabilities

Security Advisory: MVSA-10-002 Vendor: Google Service: Google Message Security SaaS powered by Postini - Security Console Admin Console - Message Center Classic - Message Center II Vulnerabilities: Multiple Cross-Site Scripting XSS Risk: High Attack Vector: From Remote Authentication: Required...

CVE-2010-1326

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...

CVE-2010-1326

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...

CVE-2010-1326

CVE-2010-1326 affects CVSNT and related CVS Suite components from March Hare: versions 2.0.58, 2.5.01–2.5.03 (before builds 3736), 2.5.04 (before 2862), and CVS Suite 2008/2009 builds (before 3736/3729). The vulnerability allows remote attackers to bypass the permissions check, modify arbitrary m...

OpenJDK ImagingLib arbitrary code execution vulnerability (6914866)

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

OpenJDK JPEGImageReader stepX Integer Overflow Vulnerability (6909597)

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CP...

Mozilla Foundation Security Advisory 2010-19

Mozilla Foundation Security Advisory 2010-19 Title: Dangling pointer vulnerability in nsPluginArray Impact: Critical Announced: March 30, 2010 Reporter: regenrecht via TippingPoint's Zero Day Initiative Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.9 Firefox 3.0.19 SeaMonkey...

Mozilla Foundation Security Advisory 2010-20

Mozilla Foundation Security Advisory 2010-20 Title: Chrome privilege escalation via forced URL drag and drop Impact: Critical Announced: March 30, 2010 Reporter: Paul Stone Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.9 Firefox 3.0.19 SeaMonkey 2.0.4 Description Security...

JDK unspecified vulnerability in ImageIO component

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

OpenJDK Deserialization of RMIConnectionImpl objects should enforce stricter checks (6893947)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March...

Microsoft Releases Advance Notification for Out-of-Band Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that it will be releasing an out-of-band security bulletin. This bulletin will address a vulnerability in Microsoft Internet Explorer 6 and Internet Explorer 7. The notification states that release of this bulletin is...

eDisplay Personal FTP Server 1.0.0 - (Authenticated) Multiple Stack Buffer Overflows (2)

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 24, 2010 Author : Sud0 Version : 1.0.0 OS : Windows...

Smart PC Recorder 4.8 Crash Exploit

Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link: http://www.voiceemotion.com/smartrecorder.htm Version: Current Version: 4.8 Tested on: Windows XP SP3/Windows 7 Cost USD 19.95 !/usr/bin/perl Glory to God Won't Bow to Men, I Defy! print "| Sma...

Smart PC Recorder 4.8 - '.mp3' Local Crash (PoC)

Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link: http://www.voiceemotion.com/smartrecorder.htm Version: Current Version: 4.8 Tested on: Windows XP SP3/Windows 7 Cost USD 19.95 !/usr/bin/perl Glory to God Won't Bow to Men, I Defy! print "| Sma...

Smart PC Recorder 4.8 - .mp3 Local Crash (PoC)

Smart PC Recorder 4.8 - .mp3 Local Crash PoC Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link: http://www.voiceemotion.com/smartrecorder.htm Version: Current Version: 4.8 Tested on: Windows XP SP3/Windows 7 Cost USD 19.95 !/usr/bin/perl Glory ...