DerbyCon 2011 Security Conference - Louisville, Kentucky

DerbyCon 2011 Security Conference - Louisville, Kentucky Welcome to a new age in security conferences, a new beginning, and a new way to share in the information security space. Our goal is to create a fun environment where the security community can come together and share ideas. Before we even...

XSS vulnerability in GetSimple CMS

Vulnerability ID: HTB22609 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingetsimplecms1.html Product: GetSimple CMS Vendor: Cagintranet Networks http://get-simple.info/ Vulnerable Version: 2.01 and Probably Prior Versions Vendor Notification: 15 September 2010 Vulnerability Type:...

WebSuite SQL Injection

============================================================== WebSuite contentid SQL Injection Vulnerability ============================================================== Exploit Title: WebSuite contentid SQL Injection Vulnerability Date: september 21, 2010 Author: josalijoe Category? : Web App...

Microsoft Releases September Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows and Office as part of the Microsoft Security Bulletin Summary for September 2010. These vulnerabilities may allow an attacker to execute arbitrary code or operate with elevated privileges. US-CERT encourages users and...

MS10-063: Description of the security update for Office 2003: September 14, 2010

None None...

Mozilla Foundation Security Advisory 2010-56

Mozilla Foundation Security Advisory 2010-56 Title: Dangling pointer vulnerability in nsTreeContentView Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...

Mozilla Foundation Security Advisory 2010-57

Mozilla Foundation Security Advisory 2010-57 Title: Crash and remote code execution in normalizeDocument Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonke...

Mozilla Foundation Security Advisory 2010-51

Mozilla Foundation Security Advisory 2010-51 Title: Dangling pointer vulnerability using DOM plugin array Impact: Critical Announced: September 7, 2010 Reporter: Sergey Glazunov Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7...

Stack overflow

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PDF document with a long field in a Smart INdependent...

CVE-2010-2883

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PDF document with a long field in a Smart INdependent...

Microsoft Releases Advance Notification for September Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its September release will contain nine bulletins. Four bulletins will have the severity rating of critical and will be for Microsoft Windows and Office. The remaining five bulletins will have the severity rating of...

EZRecipeZee CMS version 91 File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================= EZRecipeZee CMS version 91 File Inclusion Vulnerability ======================================================= !/usr/bin/perl + Author : kaMtiEz + Date : September 30, 2009 + Homepag...

Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' Remote Code Execution Vulnerability

Microsoft Windows is prone to a remote code-execution vulnerability when processing the protocol headers for the Server Message Block SMB Negotiate Protocol Request. NOTE: Reportedly, for this issue to be exploitable, file sharing must be enabled. An attacker can exploit this issue to execute cod...

MindSculpt CMS - SQL Injection

MindSculpt CMS - SQL Injection MindSculpt's new CMS™ Content Management System SQL injection vulnerability - cid0 Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 23, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9...

Mambo / Joomla Tupinambis SQL Injection

Mambo/Joomla SQL Injection Vulneralbility Component : comtupinambis Release : September 23, 2009 -------------------------------------------------- .---..-..-..-.,-..-..-..-. .---..---..---..----. | |'| || || . | || || | | |- \ \ | |'| || | -' ----'-'-'----'----'---'---' -' ----'...

Joomla Facebook SQL Injection

Joomla Component comfacebook SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 22, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=- INDONESIANCODER -=- Software Information +...

Joomla! Component com_facebook - SQL Injection

Joomla Component comfacebook SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 22, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=- INDONESIANCODER -=- Software Information +...

Joomla / Mambo Tupinambis SQL Injection

Exploit for unknown platform in category web applications ===================================== Joomla/Mambo Tupinambis SQL Injection ===================================== Mambo/Joomla SQL Injection Vulneralbility Component : comtupinambis Release : September 23, 2009...

Aurora CMS 1.0.2 (install.plugin.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Aurora CMS 1.0.2 install.plugin.php Remote File Inclusion Vulnerability =========================================================================...

Aurora CMS 1.0.2 (install.plugin.php) Remote File Inclusion Vulnerability

No description provided by source. --------------------------------------------------------------------------------------------------------------- Aurora Content Management System Enterprise Edition install.plugin.php = Remote File Include Vulnerability...