DSquare Exploit Pack: D2SEC_ZAM

Name| d2seczam ---|--- CVE| CVE-2011-2653 Exploit Pack| D2ExploitPack Description| Novell ZENWorks Asset Management Arbitrary File Upload Remote Code Execution Vulnerability Notes|...

IBM DB2 9.7 < Fix Pack 5 Multiple Denial of Service Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple denial of service vulnerabilities : - On Unix and Unix-like systems with both the Self Tuning Memory Manager STMM feature enabled and the...

IBM WebSphere Application Server JSF应用请求处理信息泄露漏洞

CVE ID：CVE-2011-1368 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 WebSphere Application Server允许远程攻击者获得敏感信息，问题是由于不正确处理JSF应用请求，远程攻击者可未授权查看主机系统上的文件。 IBM WebSphere Application Server 8.0.x 厂商解决方案 IBM WebSphere Application Server 8.0.0 Fix Pack 1...

IBM DB2 9.7 < 9.7 Fix Pack 5 Local DoS

Binary data 6099.prm...

Buffer overflow

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and...

CVE-2011-3330

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and...

IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability

The host is running IBM WebSphere Application Server and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasadminconsolexssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability Authors:...

Is .info the New .cc?

By Kurt Baumgartner In April, the .co.cc and .cz.cc sub-domains were absolutely littered with malware distributing web sites, and the unusually telling DNS registration setup on .co.cc and .cz.cc had forecast the previously upcoming Apple FakeAv. That DNS setup later led to FakeAv downloads for t...

Bleeding Life 2 Exploit Pack Released

Bleeding Life 2 Exploit Pack Released Black Hat Academy releases Bleeding Life 2 exploit pack. This is an exploit pack that affects Windows-based web browsers via Adobe and Java. You can read all about it, and download it for yourself. Statistics are kept based on exploit, browser, and OS version...

Bleeding Life 2 Exploit Pack Released

Bleeding Life 2 Exploit Pack Released Black Hat Academy releases Bleeding Life 2 exploit pack. This is an exploit pack that affects Windows-based web browsers via Adobe and Java. You can read all about it, and download it for yourself. Statistics are kept based on exploit, browser, and OS version...

New 'Nice Pack' Exploit Kit Found, Thousands of Owned Sites Redirecting Users to Attack Site

A new exploit pack has appeared on the scene in the last week or so and it already is causing trouble for users, with thousands of compromised Web sites redirecting users to a page that is hosting the pack and exploiting vulnerabilities on their machines to install malware. The attackers behind t...

Phoenix Exploit's Kit 2.8 mini version

Phoenix Exploit's Kit 2.8 mini version Back in April of this year, we reported the leak of Phoenix Exploit Kit 2.5. The version currently in circulation is 2.8, and despite its lower activity for the last half of this year, it remains one of the preferred exploit packs used by cyber-criminals. In...

Microsoft Windows Media Center Remote Code Execution Vulnerabilities (2604926)

This host is missing an important security update according to Microsoft Bulletin MS11-076. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Exploit Pack - An open source security framework

Exploit Pack - An open source security framework Exploit Pack is an open source security framework developed by Juan Sacco. It combines the benefits of a Java GUI, Python as Engine and well-known exploits on the wild. It has an IDE to make the task of developing new exploits easier, instant searc...

SDP-Downloader

SDP Download from http://sdp.ppona.com/ suffer a Remote Buffer Overflow because it fails while receinv Content-Type: video plus a long name this issue will allow an attacker to execute arbitrary code. Failed exploit attempts will result in a denial-of-service condition. from socket import import...

DSquare Exploit Pack: D2SEC_MANTISBT

Name| d2secmantisbt ---|--- CVE| CVE-2011-3357 Exploit Pack| D2ExploitPack Description| d2secmantisbt Notes|...

DSquare Exploit Pack: D2SEC_WIRESHARK

Name| d2secwireshark ---|--- CVE| CVE-2011-3360 Exploit Pack| D2ExploitPack Description| d2secwireshark Notes|...

IBM WebSphere Application Server 7.0 < Fix Pack 19 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 19 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An open redirect vulnerability exists related to the 'logoutExitPage' parameter. This can allow remote attackers to trick user...

Design/Logic Flaw

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats...

Heap overflow

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which...