The Coming Wave of Mobile Attacks

The pace of innovation on mobile phones and other smart wireless devices has accelerated greatly in the last few years, adding features, speed and computing power. But now the attackers are beginning to outstrip the good guys on mobile platforms, developing innovative new attacks and methods for...

Ingres Database iidbms Heap Overflow

Ingres Database is a relational database product available for both Windows and Unix-like platforms. A vulnerability has been reported in Ingres Database that could be exploited by remote attackers to compromise a vulnerable system. The vulnerability is due to insufficient boundary checking in th...

Slooze 0.2.7 Command Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\Remote Command Execution Vulnerability 0 0 // 1 1 1 0 0 1 1 0 0 1 1 0 Sn!pEr Team 1 1 0...

Slooze PHP Web Photo Album 0.2.7 - Command Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\Remote Command Execution Vulnerability 0 0 // 1 1 1 0 0 1 1 0 0 1 1 0 Sn!pEr Team 1 1 0...

GnuTLS library buffer overflow

Buffer overflow in gnutlsx509crtgetserial function on big-endian platforms...

browsers Crash Exploit(Mozilla Firefox/Internet Explorer/Google Chrome/Netscape/Opera)

No description provided by source. @Title: All browsers 0day Crash Exploit @Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ - @Exploit for all browsers Tested on: Mozilla Firefox // Internet Explorer // Google Chrome // Netscape // Opera: body...

Burning Board Lite 1.0.2 - Arbitrary File Upload

======================================================================================== | Title : Burning Board Lite 1.0.2 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by Burning Board Lite 1.0.2 | Tested on: windo...

clipak - Arbitrary File Upload

clipak - Arbitrary File Upload ======================================================================================== | Title : clipak Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix...

Wireshark: Null-ptr dereference in the InfiniBand dissector

Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote attackers to cause a denial of service crash via unknown vectors...

PhpMesFilms 1.8 - SQL Injection

======================================================================================== | Title : PhpMesFilms 1.8 SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubunt...

JDK unspecified vulnerability in JavaWS/Plugin component

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect availability via unknown vectors...

velBox 1.2 Insecure Cookie Handling

======================================================================================== | Title : velBox v1.2 Insecure Cookie Handling Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site : http://dl.p30vel.ir/scripts/velBox-cms-p30vel.zip |...

BitComet 1.19 - Remote Denial of Service

BitComet 1.19 - Remote Denial of Service !/bin/sh BitComet = 1.19 Remote DOS Exploit Pierre Nogues - http://www.indahax.com/ Description: BitComet is a torrent client BitComet doesn't handle malicious DHT packet with an invalid bencoded message. Affected versions : BitComet = 1.19 Plateforms :...

CVE-2010-0731: Improper Restriction of Operations within the Bounds of a Memory Buffer

The gnutlsx509crtgetserial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1readvalue with a pointer to the wrong data type and the wrong length value, which allows remote attackers to bypass the certificate revocation list CRL check and cau...

Search Ads Distributing Malware

Malware that exploits holes in popular applications is being delivered by big ad delivery platforms including those run by Yahoo, Fox, and Google, according to researchers. Read the full article. CNet...

CVE-2010-0104

Unspecified vulnerability in the Broadcom Integrated NIC Management Firmware 1.x before 1.40.0.0 and 8.x before 8.08 on the HP Small Form Factor and Microtower platforms allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2010-0969

Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

CVE-2010-0969

Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

CVE-2010-0969

Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

Moderate: Red Hat Security Advisory: cpio security update

An updated cpio package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A heap-based buffer overflow fla...