PHPBBMod 1.3.3 PHPInfo Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5942/info phpBBmod ships with a sample script phpinfo.php that may disclosure sensitive information to remote attackers. When this script is accessed, sensitive information about the underlying environment will be reveale...

Digital Scribe 1.4.1 - Multiple SQL Injection Vulnerabilities

No description provided by source. Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities Name Digital Scribe Vendor http://www.digital-scribe.org Versions Affected 1.4.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Da...

Threat Outbreak Alert RuleID10289: Email Messages Distributing Malicious Software on June 10, 2014

Medium Alert ID: 34583 First Published: 2014 June 11 13:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10289 may contain the following files: Name | Siz...

Buffer overflow

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

UBUNTU-CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on May 1, 2014

Medium Alert ID: 34025 First Published: 2014 May 2 15:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample request for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on April 22, 2014

Medium Alert ID: 33888 First Published: 2014 April 22 14:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product request for the recipient. The text in the email message attempts to convince the recipient to open th...

Office”combination”formula exploits the sample analysis-vulnerability warning-the black bar safety net

by hcl, nine8 of code audit labs of vulnhunt.com 1 Overview Online disclosure of a suspected CVE-2 0 1 4-1 7 6 1 RTF sample, hanhai source analysis found that the sample is not a CVE-2 0 1 4-1 7 6 1, but in a RTF sample includes both the two vulnerabilities, respectively, for the CVE-2 0 1 2-0 1 ...

Office modular exploit sample analysis-vulnerability warning-the black bar safety net

1 Overview Online disclosure of a suspected CVE-2 0 1 4-1 7 6 1 RTF sample, hanhai source analysis found that the sample is not a CVE-2 0 1 4-1 7 6 1, but in a RTF sample includes both the two vulnerabilities, respectively, for the CVE-2 0 1 2-0 1 5 8 and CVE-2 0 1 3-3 9 0 6, compare the special...

Threat Outbreak Alert: Fake Sample Order Notification Email Messages on April 15, 2014

Medium Alert ID: 33815 First Published: 2014 April 16 11:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sample order for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on April 3, 2014

Medium Alert ID: 33633 First Published: 2014 April 3 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order request for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Product Sample Order Email Messages on June 23, 2014

Medium Alert ID: 33149 First Published: 2014 March 3 14:49 GMT Last Updated: 2014 June 25 13:05 GMT Version: 20 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample order for the recipient. The text in the email message...

CVE-2014-2097

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

Out-of-bounds

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

CVE-2014-0774: Stack-based Buffer Overflow

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

PT-2014-3836

Name of the Vulnerable Software and Affected Versions Schneider Electric OPC Factory Server OFS versions 3.35 Description The issue is related to a stack-based buffer overflow in the C++ sample client. This can be exploited by local users to gain privileges through vectors involving a malformed...

[Rekall] Memory Forensics Analysis Framework

The Rekall Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated but...

Threat Outbreak Alert: Fake Product Sample Email Messages on January 25, 2014

Medium Alert ID: 32570 First Published: 2014 January 27 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product sample photos for the recipient. The text in the email message attempts to convince the recipient to...