CVE-2011-0609

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll aka AuthPlayLib.bundle in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windo...

CVE-2010-3962

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets CSS token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption...

Code injection

Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers...

CVE-2010-2884

Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary...

Adobe Warns of Flash Player Zero-Day Attack

The zero-day hacker attacks against Adobe’s software products are coming fast and furious. Less than a week after the discovery of a sophisticated malware attack against an unpatched security hole in Adobe Reader/Acrobat, the company has issued a new warning for in-the-wild attacks against a...

Stack overflow

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PDF document with a long field in a Smart INdependent...

MS Patch Tuesday: Googler Zero-Day Fixed in 33 Days

Last month, when Google researcher Tavis Ormandy released details on a critical Help and Support Center vulnerability that exposed Windows XP and Windows Server 2003 users to malicious hacker attacks, Microsoft was publicly unhappy with the decision. Ormandy claims he spent five days negotiating...

CVE-2010-1165

Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the 1 attachment aka attachments, 2 index aka indexing, or 3 backup path and then uploading a file, as exploited in the wild in April 2010...

CVE-2010-1165

Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the 1 attachment aka attachments, 2 index aka indexing, or 3 backup path and then uploading a file, as exploited in the wild in April 2010...

Sun About Face: Out-of-Cycle Java Update Patches Critical Flaw

In a sudden about-face, Sun has rushed out a Java update to fix a drive-by download vulnerability that exposed Windows users to in-the-wild malware attacks. The patch comes less than a week after Sun told a Google researcher it did not consider the issue serious enough to warrant an out-of-cycle...

Microsoft Internet Explorer iepeers.dll use-after-free exploit (meta)

Exploit for unknown platform in category remote exploits ===================================================================== Microsoft Internet Explorer iepeers.dll use-after-free exploit meta ===================================================================== ieiepeerspointer.rb Microsoft...

SQL injection vulnerability in wILD CMS

Title: SQL injection vulnerability in wILD CMS Date: 09.03.2010 Author: Ariko-Security Software Link: http://www.wildcms.com/ Version: ALL ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of Software: http://www.wildcms.com...

Memory corruption

Use-after-free vulnerability in the Peer Objects component aka iepeers.dll in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, a...

Microsoft Internet Explorer - iepeers.dll Use-After-Free (Metasploit)

Microsoft Internet Explorer - iepeers.dll Use-After-Free Metasploit ieiepeerspointer.rb Microsoft Internet Explorer iepeers.dll use-after-free exploit for the Metasploit Framework Tested successfully on the following platforms: - Microsoft Internet Explorer 7, Windows Vista SP2 - Microsoft Intern...

WILD CMS SQL Injection

Title: SQL injection vulnerability in wILD CMS Date: 09.03.2010 Author: Ariko-Security Software Link: http://www.wildcms.com/ Version: ALL ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of Software: http://www.wildcms.com...

Wild CMS SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================== Wild CMS SQL Injection Vulnerability ==================================== ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of...

Wild CMS - SQL Injection

Wild CMS - SQL Injection Title: SQL injection vulnerability in Wild CMS Date: 09.03.2010 Author: Ariko-Security Software Link: http://www.wildcms.com/ Version: ALL ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of Softwar...

Wild CMS - SQL Injection

Title: SQL injection vulnerability in Wild CMS Date: 09.03.2010 Author: Ariko-Security Software Link: http://www.wildcms.com/ Version: ALL ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of Software: http://www.wildcms.com...

cPanel - Multiple Cross-Site Request Forgery Vulnerabilities

cPanel - Multiple Cross-Site Request Forgery Vulnerabilities Create Database: Create New Database New Database: Add Redirect: Type Permanent 301 Temporary 302 http://www.? All Public Domains sEc-r1z.com...

cPanel Multiple CSRF Vulnerabilities

Exploit for unknown platform in category web applications ==================================== cPanel Multiple CSRF Vulnerabilities ==================================== Create Database: Create New Database New Database: Add Redirect: Type Permanent...