Microsoft PowerPoint Sound Data (CVE-2009-1128) Multiple Remote Code Execution Vulnerabilities

Description Microsoft PowerPoint is prone to multiple remote code-execution vulnerabilities An attacker could exploit these issues by enticing a victim to open a malicious PowerPoint file. Successfully exploiting these issues would allow the attacker to execute arbitrary code in the context of th...

IceWarp Merak Mail Server 9.4.1 - 'Forgot Password' Input Validation

source: https://www.securityfocus.com/bid/34827/info IceWarp Merak Mail Server is prone to an input-validation vulnerability because it uses client-supplied data when performing a 'Forgot Password' function. Attackers can exploit this issue via social-engineering techniques to obtain valid users'...

windows Driver vulnerability discovery and use-vulnerability and early warning-the black bar safety net

Information source: evil octal information security teamwww.eviloctal.com to Article author: Anibal Sacco Translation author: r! usksk（springs brother: http://riusksk.blogbus.com to Note: this article starting the hackers Defense of, after the translation the original author of friendship submitt...

e107 Plugin userjournals_menu (blog.id) SQL Injection Vulnerability

No description provided by source. e107 Plugin userjournalsmenu blog.id SQL injection vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Remote SQL-injection Google Dork : inurl:"userjournals.php?blog." -------------------------------------------------- ! Product...

How to break Web software

In this Google Tech Talk, Mike Andrews, a security consultant from Foundstone, discusses common techniques for exploiting weak spots in Web applications. Running time: 1:26...

Cybercrime profits running into trillions of dollars

By David Neal, vnunet.com A recent warning from AT&T’s chief security officer, Edward Amoroso, that the cost of cyber crime is running into trillions of dollars vnunet.com has been confirmed by security firm Finjan. Earlier this month Amoroso and a panel of security experts told a US Senate...

The Ryan & Roel Show Episode 8

The Kido Worm Attack – Fri, Jan. 23 2009 Ryan and Roel discuss the propagation techniques behind the Kido/Conficker worm attack and make important recommendations around protection and mitigation. Download episode...

BBC paid 'a few thousand dollars' for botnet

In a statement on Monday, the BBC said that its decision to purchase and use a botnet to espose the malware epidemic had been “in the public interest”. “It was not our intention to break the law,” the BBC told ZDNet UK on Monday. “There is a powerful public interest in demonstrating the ease with...

Penetration of the underlying routing techniques-vulnerability warning-the black bar safety net

Source: Huaxia hacking Union Master scan the underlying routing can greatly facilitate invasion within the network,such as enterprise,company,school, etc..if thorough techniques can intercept sensitive information,simplifying the invasion process,and obtain a routing privilege,it can be prepared...

Nine strokes breakthrough IDS-vulnerability warning-the black bar safety net

Intrusion detectionsystem, The English abbreviation for the IDS, as the name implies, it is used in real time to detect attacks and report the attack. If the firewall than for guarding the network the door the doorman, then theintrusion detectionsystem IDS is proactively looking for criminals in...

The use of injection techniques to attack the mail server and defenses(a)-vulnerability warning-the black bar safety net

This article will detail through the talk to mail server communication of a Web application, i.e., the webmail application to inject some mail protocolsIMAP and SMTP Protocolcommands to attack a mail server of the principles, methods and defenses. A Webmail application role Webmail app through IM...

GR Blog 1.1.4 Upload / Bypass

GR Blog v1.1.4 Upload/Bypass Multiple Remote Vulnerabilities Author: Jose Luis Gongora Fernandez a.k.a JosS Web: http://hack0wn.com/ // TEST ON VERSION GR Blog v1.1.4, in my localhost Download : http://sirini.net/grboard/board.php?id=grblog&articleNo=43 // + Remote File Upload:...

Constructed of no-man's environment: Exploiting the Realtek RTL8139 single-chip Ethernet Controller-vulnerability warning-the black bar safety net

Author: Azy Finish: 2008-10-22 Excellent rootkit hereinafter abbreviated as rk usually should have hidden a stable communication function. As good programmers have been pursuing with the most simple code to complete the functional requirements of the same, excellent rk coder also has been adherin...

sniffer-detect NSE Script

Checks if a target on a local Ethernet has its network card in promiscuous mode. The techniques used are described at . Example Usage nmap -sV --script=sniffer-detect Script Output Host script results: | sniffer-detect: Likely in promiscuous mode tests: "11111111" Requires nmap stdnse string tabl...

PowerTCP FTP Module - Multiple Techniques (SEH HeapSpray)

PowerTCP FTP Module - Multiple Techniques SEH HeapSpray !-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE...

PowerTCP FTP Module - Multiple Techniques (SEH HeapSpray)

!-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE7 . then I wrote my own expl with HeapSpray technique ,...

NIDS evasion

This plugin configures the scanner for NIDS evasion see the SPDX-FileCopyrightText: 2008 Michel Arboi / Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only The HTTP IDS...

Analysis of intrusion detection systems vulnerability awareness of hacking techniques-vulnerability warning-the black bar safety net

This article forintrusion detectionthe system's vulnerability to hacking intrusion techniques. Once the installation of the networkintrusion detectionsystem, the networkintrusion detectionthe system will be for you to analysis out online hack attack, and you can use thisintrusion detectionthe...

InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUMMARY InstallShield Update Agent - Remote "Rule Script" Code Execution Vulnerability. OVERVIEW InstallShield Update Agent uses insecure methods of retrieving operational script code from unauthenticated, unverified external sources over HTTP...

Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution

Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution Felipe Andres Manzano [email protected] updates in http://felipe.andres.manzano.googlepages.com/home ''' Sumary: ======= The libpoppler pdf rendering library, can free uninitialized pointers, leading to arbitrary code...