Adobe Warns of Flash Player Zero-Day Attack

The zero-day hacker attacks against Adobe’s software products are coming fast and furious. Less than a week after the discovery of a sophisticated malware attack against an unpatched security hole in Adobe Reader/Acrobat, the company has issued a new warning for in-the-wild attacks against a...

Stack overflow

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PDF document with a long field in a Smart INdependent...

MS Patch Tuesday: Googler Zero-Day Fixed in 33 Days

Last month, when Google researcher Tavis Ormandy released details on a critical Help and Support Center vulnerability that exposed Windows XP and Windows Server 2003 users to malicious hacker attacks, Microsoft was publicly unhappy with the decision. Ormandy claims he spent five days negotiating...

CVE-2010-1165

Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the 1 attachment aka attachments, 2 index aka indexing, or 3 backup path and then uploading a file, as exploited in the wild in April 2010...

CVE-2010-1165

Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the 1 attachment aka attachments, 2 index aka indexing, or 3 backup path and then uploading a file, as exploited in the wild in April 2010...

Sun About Face: Out-of-Cycle Java Update Patches Critical Flaw

In a sudden about-face, Sun has rushed out a Java update to fix a drive-by download vulnerability that exposed Windows users to in-the-wild malware attacks. The patch comes less than a week after Sun told a Google researcher it did not consider the issue serious enough to warrant an out-of-cycle...

SQL injection vulnerability in wILD CMS

Title: SQL injection vulnerability in wILD CMS Date: 09.03.2010 Author: Ariko-Security Software Link: http://www.wildcms.com/ Version: ALL ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of Software: http://www.wildcms.com...

Microsoft Internet Explorer iepeers.dll use-after-free exploit (meta)

Exploit for unknown platform in category remote exploits ===================================================================== Microsoft Internet Explorer iepeers.dll use-after-free exploit meta ===================================================================== ieiepeerspointer.rb Microsoft...

Memory corruption

Use-after-free vulnerability in the Peer Objects component aka iepeers.dll in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, a...

Microsoft Internet Explorer - iepeers.dll Use-After-Free (Metasploit)

Microsoft Internet Explorer - iepeers.dll Use-After-Free Metasploit ieiepeerspointer.rb Microsoft Internet Explorer iepeers.dll use-after-free exploit for the Metasploit Framework Tested successfully on the following platforms: - Microsoft Internet Explorer 7, Windows Vista SP2 - Microsoft Intern...

Wild CMS SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================== Wild CMS SQL Injection Vulnerability ==================================== ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of...

Wild CMS - SQL Injection

Wild CMS - SQL Injection Title: SQL injection vulnerability in Wild CMS Date: 09.03.2010 Author: Ariko-Security Software Link: http://www.wildcms.com/ Version: ALL ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of Softwar...

Wild CMS - SQL Injection

Title: SQL injection vulnerability in Wild CMS Date: 09.03.2010 Author: Ariko-Security Software Link: http://www.wildcms.com/ Version: ALL ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of Software: http://www.wildcms.com...

WILD CMS SQL Injection

Title: SQL injection vulnerability in wILD CMS Date: 09.03.2010 Author: Ariko-Security Software Link: http://www.wildcms.com/ Version: ALL ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of Software: http://www.wildcms.com...

cPanel - Multiple Cross-Site Request Forgery Vulnerabilities

Create Database: Create New Database New Database: Add Redirect: Type Permanent 301 Temporary 302 http://www.? All Public Domains sEc-r1z.com /...

cPanel Multiple CSRF Vulnerabilities

Exploit for unknown platform in category web applications ==================================== cPanel Multiple CSRF Vulnerabilities ==================================== Create Database: Create New Database New Database: Add Redirect: Type Permanent...

cPanel - Multiple Cross-Site Request Forgery Vulnerabilities

cPanel - Multiple Cross-Site Request Forgery Vulnerabilities Create Database: Create New Database New Database: Add Redirect: Type Permanent 301 Temporary 302 http://www.? All Public Domains sEc-r1z.com...

CVE-2009-4324

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...

Heap overflow

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtaine...

CVE-2009-3459

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtaine...