CVE-2015-5554

creationtimestamp| type| source ---|---|--- 2015-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37876...

CVE-2015-4432

creationtimestamp| type| source ---|---|--- 2015-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37879...

World’s First 200GB microSD Card Arrives

There isn't any troll in the title. The "World's Largest microSD" card sized at 200GB is now officially available for purchasing from Amazon and number of retailers. So, Is your 16GB, or 32GB, or even 64GB smartphone not enough to store all your data in one place? Order a Sandisk's new...

CVE-2015-2844

creationtimestamp| type| source ---|---|--- 2015-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36807...

CVE-2015-2098

creationtimestamp| type| source ---|---|--- 2015-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36606 2015-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36603...

PHP calendar extension integer overflow vulnerability

PHP is a popular programming language. Multiple integer overflow vulnerabilities in the PHP calendar extension allow remote attackers to cause a denial of service attack by passing a specially crafted year value to the GregorianToSdn or JulianToSdn functions...

CVE-2015-0565

creationtimestamp| type| source ---|---|--- 2015-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36311 2015-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36310 2020-02-25 22:28:10+00:00| seen| https://t.me/cibsecurity/10080...

CVE-2015-1372

creationtimestamp| type| source ---|---|--- 2015-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35914...

Certificate Transparency Moves Forward With First Independent Log

The Certificate Transparency scheme proposed by Google engineers has taken a couple of significant steps forward recently, with the approval of the first independent certificate log and the passing of a deadline for all extended validation certificates to be CT-compliant or lose the green indicat...

WordPress 'year' Cross-Site Scripting (XSS)

...

Threat Outbreak Alert RuleID10778: Email Messages Distributing Malicious Software on July 27, 2014

Medium Alert ID: 35054 First Published: 2014 July 29 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10778 may contain the following files: Name | Siz...

phpfreeBB 1.0 - Remote BLIND SQL Injection Vulnerability

No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || phpfreeBB 1.0 Remote BLIND SQL Injection Vulnerability Discovered By : Moudi Contact : [email protected]...

VirtualDJ Trial 6.0.6 "New Year Edition" - .m3u Exploit (0day)

No description provided by source. /VirtualDJ Trial v6.0.6 New Year Edition PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ includestdio.h includewindows.h includestring.h includegetopt.h includeunistd.h /----prototypes---/ int...

OpenSSL issued a warning: memory 1 0 years of vulnerability may be hackers for“man in the middle”attack-vulnerability warning-the black bar safety net

On Thursday, the OpenSSL Foundation issued a warning that one already exists 1 0 years of the vulnerabilities could lead to hackers through the use of OpenSSL to encrypt the traffic to launch“man in the middle”attack. Information security experts are still trying to solve the OpenSSL encryption...

Dennis Fisher and Mike Mimoso Discuss Edward Snowden, NSA and the new OpenSSL Vuln

Dennis Fisher and Mike Mimoso discuss the changes in the year since the first stories broke regarding Edward Snowden and the NSA and the new OpenSSL vulnerability.​ Download: digitalunderground155.mp3 Music by Chris Gonsalves...

CVE-2013-0173

Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack...

Jigowatt PHP Event Calendar "year" SQL注入漏洞

Jigowatt PHP Event Calendar是一款日历WEB应用程序。 Jigowatt PHP Event Calendar calendar/dayview.php不正确过滤"year"参数数据，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 Jigowatt PHP Event Calendar 2.x 目前没有详细解决方案： http://codecanyon.net/item/php-event-calendar/47723...

CVE-2014-100012

creationtimestamp| type| source ---|---|--- 2014-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31898...

CVE-2014-1204

creationtimestamp| type| source ---|---|--- 2014-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31578...

HackInTheBox Quartal Magazine - eZine Issue 10

Document Title: =============== HackInTheBox Quartal Magazine - eZine Issue 10 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/hitbez10.pdf Original: https://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-010.pdf Release Date: ============= 2014-01-31...