IBM WebSphere Application Server 7.0 < Fix Pack 17 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 17 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - Use of an insecure XML encryption algorithm could allow for decryption of JAX-RPC or JAX-WS Web Services requests. PM34841 - A...

CVE-2011-1276

Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cau...

Microsoft Windows VBScript implementation file name disclosure vulnerability

Overview The Microsoft Windows VBScript implementation contains a file name disclosure vulnerability. When VBScript is used to load an image file in Internet Explorer, there is a vulnerability where an unauthenticated attacker may confirm the existence of a particular file. Impact As a step prior...

JVN#72586781: ASP.NET vulnerable to cross-site scripting

ASP.NET contains an issue in the escape processes for string output. Web applications that use ASP.NET may contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the...

Microsoft .NET Framework Remote Code Execution Vulnerability (2538814)

This host is missing a critical security update according to Microsoft Bulletin MS11-044. OpenVAS Vulnerability Test $Id: secpodms11-044.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2538814 Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

JVN#40382909: Microsoft Outlook read receipt function vulnerability

Microsoft Outlook contains a vulnerability in the read receipt function. A read receipt may be sent unintentionally, notifying the sender that the email was received. Impact A spam distributor may use this information to determine whether an email address is valid or not. Solution Upgrade the...

Security Update for the 2007 Microsoft Office System (KB2541012)

A security vulnerability exists in the 2007 Microsoft Office System and the Microsoft Office Compatibility Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Windows Media Player with K-Lite Codec Pack DoS PoC

Exploit for windows platform in category dos / poc Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas , www.twitter.com/dinosn Version:Window...

Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service (PoC)

Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service PoC Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas ,...

Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service (PoC)

Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas , www.twitter.com/dinosn Version:Windows Media Player 12 Tested on: Windows 7 The 3gp...

Design/Logic Flaw

Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors...

CVE-2011-1711

Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors...

CVE-2011-1711

CVE-2011-1711 affects Novell Mobility Pack 1.1.2 and earlier, and Novell Data Synchronizer 1.0.x and 1.1.x up to 1.1.1 build 428. The description indicates an unspecified vulnerability where remote authenticated users can access other accounts via unknown vectors. Connected sources confirm affect...

DSquare Exploit Pack: D2SEC_CISCOANY

Name| d2secciscoany ---|--- CVE| CVE-2011-2040 Exploit Pack| D2ExploitPack Description| Cisco AnyConnect VPN Client Arbitrary Program Execution Vulnerability Notes|...

26 Underground Hacking Exploit Kits available for Download !

List of Hacking Exploit Kits : 1. Unknow 2. Tor 3. Target-Exploit 4. Smart pack 5. RDS 6. My poly sploit 7. multisploit 8. mypack-009 9. mypack-091 10. mypack-086 11. mypack-081 12. Mpack 13. Infector 14. Ice-pack-1 15. Ice-pack-2 16. Ice-pack-3 17. G-pack 18. Fire pack -1 19. Fire Pack -2 20...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814)

This host is missing a critical security update according to Microsoft Bulletin MS11-036. OpenVAS Vulnerability Test $Id: secpodms11-036.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office PowerPoint Remote Code Execution Vulnerabilities 2545814 Authors: Antu Sanadi Copyright: Copyright c...

Microsoft Windows WINS Remote Code Execution Vulnerability (2524426)

This host is missing a critical security update according to Microsoft Bulletin MS11-035. OpenVAS Vulnerability Test $Id: secpodms11-035.nasl 7582 2017-10-26 11:56:51Z cfischer $ Microsoft Windows WINS Remote Code Execution Vulnerability 2524426 Authors: Sooraj KS Copyright: Copyright c 2011...

Immunity Canvas: FIREFOX_CHANNELREDIRECT

Name| firefoxchannelredirect ---|--- CVE| CVE-2011-0065 Exploit Pack| CANVAS Description| Firefox Notes| CVE Name: CVE-2011-0065 Repeatability: Infinite MFSA: http://www.mozilla.org/security/announce/2011/mfsa2011-13.html...

Goal.com Hacked, found to be serving malware !

According to Armorize, soccer news site Goal.com was recently found to be serving malware. "In an analysis of the attack, Armorize researcher Wayne Huang suggests that a hacker specifically targeted and compromised Goal.com through a back-door that allowed the attacker to manipulate the site's...

CVE-2011-1538

Open redirect vulnerability in HP Proliant Support Pack PSP before 8.7 allows remote authenticated users to redirect other users to arbitrary web sites and conduct phishing attacks via unspecified vectors...