F5 BIG-IP - SLOTH: TLS 1.2 handshake vulnerability CVE-2015-7575

The remote host is missing a security patch. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

Microsoft Visio Remote Code Execution Vulnerability (3124585)

This host is missing a critical security update according to Microsoft Bulletin MS16-004 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Xion Audio Player 1.5 build 155 - Stack Buffer Overflow

Xion Audio Player 1.5 build 155 - Stack Buffer Overflow Exploit Title: Xion Audio Player build 155 Stack Based BOF. Date: 8/19/2015 Exploit Author: UnN0n Software Vendor : http://www.xionplayer.com Software Link: http://www.xionplayer.com/page/download Version: 1.5 Build 155 Tested on: Windows 7...

Oracle CSO: You 'Must Not Reverse Engineer Our Code'

UPDATE–Oracle, never the most researcher-friendly software vendor, has taken its antagonism to another level after publishing a blog post by CSO Mary Ann Davidson that rails against reverse engineering and saying that the company has no need for researchers to look at Oracle’s code for...

Mini-stream Ripper v2.7.7.100 Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: Mini-sream Ripper v2.7.7.100 Local Buffer Overflow + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

Zeuscart 4.0 - Multiple Vulnerabilities

Advisory: Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities in Zeuscart v.4 Advisory ID: SROEADV-2015-12 Author: Steffen Rösemann Affected Software: Zeuscart v.4 Vendor URL: http://zeuscart.com/ Vendor Status: pending CVE-ID: will asked to be assigned after release on...

M/Monit 3.2.2 Cross Site Request Forgery

Application: M/Monit 3.2.2 Author: Dolev Farhi @dolevff Date: 13.9.2014 Relevant CVEs: CVE-2014-6409, CVE-2014-6607 Vulnerable version: CSRF poc M/monit 3. Mitigation Software vendor confirmed the issue, and a fix might be released in the future. 4. Time line: 15.9 - Found vulnerabilities 15.9 -...

Wordpress User Meta 1.1.1 - Arbitrary File Upload Vulnerability

No description provided by source. Exploit Title: Wordpress User Meta Version 1.1.1 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/user-meta/framework/helper/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://user-meta.com/ Software Link:...

Thousands of DHS Personnel Notified of Data Breach

The Department of Homeland Security this week began notifying up to tens of thousands of employees, contractors and others with a DHS security clearance that their personal data may be at risk. The notifications began on Monday, according to an online statement, after officials learned of a...

[SE-2012-01] The "allowed behavior" in Java SE 7 (Issue 54)

Hello All, We decided to release technical details of Issue 54 that was reported to Oracle on Feb 25, 2013 and that was evaluated by the company as the "allowed behavior". As of Mar 18, 2013 we have no information that Oracle treats Issue 54 as a security vulnerability. We believe that 3 weeks fr...

Axous 1.1.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

+-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Travelers Cautioned When Using Hotel Internet Connections Abroad

Travelers abroad should be on alert for malware masquerading as a software update when they attempt to connect to the Internet from their hotel rooms. A warning issued by the Internet Crime Complaint Center says the FBI and other government agencies recently noticed malware that targets guests...

Secunia Research: KDE Okular PDB Parsing RLE Decompression Buffer Overflow

====================================================================== Secunia Research 25/08/2010 - KDE Okular PDB Parsing RLE Decompression Buffer Overflow - ====================================================================== Table of Contents Affected...

LogMeIn Remote Access Utility ActiveX Memory Corruption DoS

No description provided by source. html body pre LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002...

LogMeIn Remote Access Utility ActiveX Memory Corruption DoS

Exploit for unknown platform in category dos / poc =========================================================== LogMeIn Remote Access Utility ActiveX Memory Corruption DoS =========================================================== LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC D...

LogMeIn Remote Access Utility - ActiveX Memory Corruption (Denial of Service)

LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002 ecx=020e9f54 edx=00000011 esi=00000000 edi=00000000...

logmein-activex.txt

LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002 ecx=020e9f54 edx=00000011 esi=00000000 edi=00000000...

LogMeIn Remote Access Utility - ActiveX Memory Corruption (Denial of Service)

LogMeIn Remote Access Utility - ActiveX Memory Corruption Denial of Service LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com...

visualsentinel-cas.txt

VisualSentinel 0.7 Cross Agent Scripting Discovered by: Alfredo Panzera, Opencosmo Security Software vendor: http://www.opencosmo.com Date: 31-05-2008 Vulnerability: The vulnerability consists on inject javascript code falsify the user agent's attacker during an attack and then save in the log th...

Authentium Command Antivirus odapi.dll multiple ActiveX buffer overflows

Overview Authentium Command Antivirus contains multiple ActiveX vulnerabilities, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Authentium Command Antivirus provides multiple ActiveX controls. Many of the ActiveX controls provided ...