Microsoft Excel Malformed Record CVE-2011-1988 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers could exploit this issue by enticing victims to open a maliciously crafted Excel file. Successful exploits will allow attackers to execute arbitrary code with the privileges of the user running the applicatio...

PT-2011-1098 · Samba Team +2 · Cifs-Utils +2

Name of the Vulnerable Software and Affected Versions: Samba versions prior to 3.5.15 Samba version 3.5.6 Samba version 3.5.10 and earlier cifs-utils version 4.8.1 Description: The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotel...

Microsoft Visio CVE-2011-1979 Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Microsoft Internet Explorer 'toStaticHTML' HTML Sanitizing Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability that affects the 'toStaticHTML' API. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Avaya Aura Conferencing 6.0 Standard Avaya...

Microsoft Windows Distributed File System Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. The issue affects the Windows Distributed File System DFS. An attacker can exploit this issue by sending a specially crafted DFS response to the affected application. Successfully exploiting this issue allows an...

Microsoft's Bing And Facebook's Like Button Team Up Against Google !

Microsoft's Bing And Facebook's Like Button Team Up Against Google ! Microsoft has deepened its ties with Facebook by integrating the platform's social network data with the Bing search engine. Under the new partnership, users will be able to view 'likes' and recommendations made by their friends...

Z-blog 1.8 web path information disclosure vulnerability and fix-vulnerability warning-the black bar safety net

Affected version: Z-blog 1.8 Vulnerability description: Z-blog is based on Asp platform Blog blogweblogprogram Z-blog using the default editor there is a path information disclosure vulnerability Test method:...

Microsoft Excel Buffer Allocation Integer Overflow Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability because of an integer-overflow error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits can allow attackers to execute arbitrary code with the...

ICONICS GENESIS32 and BizViz ActiveX Trusted Zone Vulnerability

Overview ICS-CERT has received a report from independent security researchers Billy Rios and Terry McCorkle concerning ICONICS GENESIS32 and BizViz products. This vulnerability involves a design issue in a GENESIS32 ActiveX control that can set an arbitrary domain to the trusted zone. ICONICS has...

RSA Warns Customers Of Targeted Attacks In Wake of Hack

RSA, the security division of EMC Corp. has warned customers to be on the lookout for targeted attacks, including suspicious messages and links sent over social media networks in the wake of a sophisticated attack that spilled confidential information about the workings of the company’s SecurID...

Top security firm RSA Security revealed by extremely sophisticated hack !

Top security firm RSA Security revealed on Thursday that it's been the victim of an "extremely sophisticated" hack. The company said in a note posted on its website that the intruders succeeded in stealing information related to the company's SecurID two-factor authentication products. SecurID ad...

Europe's Cybersecurity Agency Gears Up for War on Botnets !

The European Network and Information Security Agency ENISA, Europe's Cyber security agency, issued a report focused on botnets this week titled, "Botnets: Measurement, Detection, Disinfection and Defence." The report discusses the reliability of botnet size estimates and provides recommendations...

Kunena SQL Injection

Vendor/Product: Kunena Vulnerable Versions: 1.5.14; 1.6.3 Vulnerability Type: SQL Injection & information leakage Risk level: High Vulnerability Details: Because parameterized queries were not used, and adequate input sanitization was not done on the catids parameter on the advanced search page, ...

Microsoft Windows Failover Clustering File Permissions Security Bypass Vulnerability

Description Microsoft Windows Failover Clustering is prone to a security-bypass vulnerability. Local attackers can exploit this issue to perform unauthorized actions against the administrative shares on the failover cluster disk. Technologies Affected Microsoft Windows Server 2008 R2 Itanium...

TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.8.1 and below Vulnerability Type: Cross-Site Scripting Severit...

Microsoft XML Core Service Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability

Description Microsoft XML Core Service is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the currently...

Microsoft Windows Kernel Access Control Lists Local Denial of Service Vulnerability

Description Microsoft Windows is prone to a local denial-of-service vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to cause the system to become unresponsive and automatically restart, resulting in a denial-of-service condition. Technologies Affected Avaya Aur...

phpcms 2 0 0 7 site management system Member. php page SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected version: phpcms 2 0 0 7 GBK Vulnerability description: In the member/member. php line 4, The code is as follows: 1. .............. 2. $m = $db-getone SELECT FROM . TABLEMEMBER. m , . TABLEMEMBERINFO. i WHERE m. userid=i. userid AND m. username= 3. $username 4. , CACHE ,8 6 4 0 0; 5...

PT-2010-1181 · Spring · Spring Framework

Name of the Vulnerable Software and Affected Versions: Spring Framework versions 2.5.x through 2.5.5, 2.5.7 before 2.5.7.SR01, and 3.0.x through 3.0.2 Description: The issue is related to incorrect code generation management in the Spring Framework, allowing remote attackers to execute arbitrary...

Microsoft Excel 'ExternName' Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...