CVE-2011-2990

The implementation of Content Security Policy CSP violation reports in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not remove proxy-authorization credentials from the listed request headers, which allows attackers to obtain sensitive information by...

Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability

Document Title: =============== Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 113 Product & Service Introduction: =============================== Poison Ivy is an advance...

GCI Trader MetaTrader v4.2.x - Null Pointer Vulnerability

Document Title: =============== GCI Trader MetaTrader v4.2.x - Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 111 Product & Service Introduction: =============================== Marktführende Software im...

Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability

Document Title: =============== Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 113 Product & Service Introduction: =============================== Poison Ivy is an advance...

Google Chrome < 13.0.782.107 Multiple Vulnerabilities

Binary data 5998.pasl...

Google Chrome < 13.0.782.107 Multiple Vulnerabilities

Binary data 800963.prm...

Google VPs Discuss Google+ "Real Name" Rapture Fiasco

Call it the Real Name Rapture: the mass disappearance of untold numbers of Google+ users over the weekend for what many outlets reported were violations of Google’s community standards policy. Rather than getting taken up, however, it appears that Google was cracking down – on funky names,...

Researchers Find Browser History-Sniffing Still Ongoing

The practice of history sniffing, which has been seen as out-of-bounds and a serious privacy violation for the better part of a decade now, is still ongoing by some ad networks, researchers have found. A study completed recently by researchers at Stanford University’s Center for Internet and...

Mozilla Firefox 5.0 / Microsoft Internet Explorer 8.0 Denial Of Service

Firefox 5.0 & Internet Explorer 8.0 - Access Violation Exception and Unknown Exception Exploit Title: Firefox 5.0 & Internet Explorer 8.0 - Access Violation Exception and Unknown Exception Google Dork: N/A Date: 7/12/2011 Author: r45c4l Software Link: www.firefox.com and IE is shiped with Windows...

UCLA Health Services Pays $865K, Settles HIPAA Violations

The U.S. Department of Health and Human Services HHS this week announced that the University of California at Los Angeles Health Services UCLAHS has agreed to pay a $865,000 fine and pledged to tweak their infrastructure after potentially breaking the Health Insurance Portability and Accountabili...

ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3...

ZipWiz 2005 5.0 - .zip Buffer Corruption

ZipWiz 2005 5.0 - .zip Buffer Corruption !/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3 Brazilian...

Rockwell RSLogix Overflow Vulnerability

Overview This updated advisory is a follow-up to the Alert titled “ICS-ALERT-11-256-05A—Rockwell RSLogix Overflow Vulnerability” that was published September 13, 2011, on the Industrial Control Systems Cyber Emergency Response Team ICS-CERT web page. ICS-CERT is aware of a public report of an...

Mandriva Update for mozilla MDVSA-2011:111 (mozilla)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Rosoft MediaPlayer v4.4.4 - Buffer Overflow Vulnerability

Document Title: =============== Rosoft MediaPlayer v4.4.4 - Buffer Overflow Vulnerability Release Date: ============= 2011-06-21 Vulnerability Laboratory ID VL-ID: ==================================== 94 Product & Service Introduction: =============================== Ever since we released our ve...

Camtasia Studio v7.0.x - Denial of Service Vulnerability

Document Title: =============== Camtasia Studio v7.0.x - Denial of Service Vulnerability Release Date: ============= 2011-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 158 Product & Service Introduction: =============================== Camtasia Studio ist ein...

Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service (PoC)

Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service PoC Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas ,...

Windows Media Player with K-Lite Codec Pack DoS PoC

Exploit for windows platform in category dos / poc Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas , www.twitter.com/dinosn Version:Window...

Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service (PoC)

Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas , www.twitter.com/dinosn Version:Windows Media Player 12 Tested on: Windows 7 The 3gp...

VideoLAN VLC Media Player 1.1.9 - XSPF Playlist Local File Integer Overflow

TITLE VLC Media Player XSPF Local File Integer overflow in XSPF playlist parser AFFECTED VERSIONS VLC media player 1.1.9 down to 0.8.5 VENDOR VideoLAN Organisation CLASS Denial of Service DoS RESOURCES http://www.videolan.org/security/sa1104.html PRODUCT DESCRIPTION VLC is a free and open source...