MS11-072: Vulnerabilities in Microsoft Excel could allow remote code execution: September 13, 2011

Resolves security vulnerabilities in Microsoft Excel that could allow arbitrary code to run when a maliciously modified file is opened.IntroductionMicrosoft has released security bulletin MS11-072. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-070: Vulnerability in WINS could allow elevation of privilege: September 13, 2011

None None...

Did The September 11th Attacks Blind Us To A Digital Pearl Harbor?

It was December 8, 2000 – the waning days of the Clinton Administration. Richard Clarke, a member of President Clinton’s National Security Council, was addressing attendees at SafeNet 2000, a conference sponsored by Microsoft Corp. that brought together computer security experts from around the...

Microsoft Slip Up Spills September Bulletins Early

A rare mistake by Microsoft’s security team resulted in the company’s September software patches to be released to the public days early. Microsoft said on Thursday that it would issue five bulletins in the September edition of Patch Tuesday, September 14. In an unexpected move, however, the...

Microsoft Plans No Critical Patches for September

Microsoft plans on issuing just five bulletins in the September edition of Patch Tuesday. The patch, set to come out September 14, will address vulnerabilities in Microsoft Windows, Office, and Server Software. With all five bulletins receiving ‘important’ ratings, this marks the first time in mo...

PlaySms 0.9.5.2 - Remote File Inclusion

PlaySms 0.9.5.2 - Remote File Inclusion ============================================================================================================= o PlaySMS affected all this files web/plugin/themes/default/pageforgot.php web/plugin/themes/default/pagelogin.php...

Invitation for DEF-CON Chennai (DC602028) Meet

Invitation for DEF-CON Chennai DC602028 Meet We like to invite all the Like Minded People, who are interested in Cyber Security to attend the meet. We are DEF-CON registered Group. Our Group ID is DC602028 Tickets for the Meet We have very limited tickets for the DEF-CON ChennaiDC602028 Meet. For...

DerbyCon 2011 Security Conference - Louisville, Kentucky

DerbyCon 2011 Security Conference - Louisville, Kentucky Welcome to a new age in security conferences, a new beginning, and a new way to share in the information security space. Our goal is to create a fun environment where the security community can come together and share ideas. Before we even...

XSS vulnerability in GetSimple CMS

Vulnerability ID: HTB22609 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingetsimplecms1.html Product: GetSimple CMS Vendor: Cagintranet Networks http://get-simple.info/ Vulnerable Version: 2.01 and Probably Prior Versions Vendor Notification: 15 September 2010 Vulnerability Type:...

WebSuite SQL Injection

============================================================== WebSuite contentid SQL Injection Vulnerability ============================================================== Exploit Title: WebSuite contentid SQL Injection Vulnerability Date: september 21, 2010 Author: josalijoe Category? : Web App...

Microsoft Releases September Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows and Office as part of the Microsoft Security Bulletin Summary for September 2010. These vulnerabilities may allow an attacker to execute arbitrary code or operate with elevated privileges. US-CERT encourages users and...

MS10-063: Description of the security update for Office 2003: September 14, 2010

None None...

Mozilla Foundation Security Advisory 2010-56

Mozilla Foundation Security Advisory 2010-56 Title: Dangling pointer vulnerability in nsTreeContentView Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...

Mozilla Foundation Security Advisory 2010-57

Mozilla Foundation Security Advisory 2010-57 Title: Crash and remote code execution in normalizeDocument Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonke...

Mozilla Foundation Security Advisory 2010-51

Mozilla Foundation Security Advisory 2010-51 Title: Dangling pointer vulnerability using DOM plugin array Impact: Critical Announced: September 7, 2010 Reporter: Sergey Glazunov Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7...

Stack overflow

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PDF document with a long field in a Smart INdependent...

CVE-2010-2883

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PDF document with a long field in a Smart INdependent...

Microsoft Releases Advance Notification for September Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its September release will contain nine bulletins. Four bulletins will have the severity rating of critical and will be for Microsoft Windows and Office. The remaining five bulletins will have the severity rating of...

EZRecipeZee CMS version 91 File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================= EZRecipeZee CMS version 91 File Inclusion Vulnerability ======================================================= !/usr/bin/perl + Author : kaMtiEz + Date : September 30, 2009 + Homepag...

Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' Remote Code Execution Vulnerability

Microsoft Windows is prone to a remote code-execution vulnerability when processing the protocol headers for the Server Message Block SMB Negotiate Protocol Request. NOTE: Reportedly, for this issue to be exploitable, file sharing must be enabled. An attacker can exploit this issue to execute cod...