Gmail Checker Plus Chrome Extension Cross Site Scripting / Cross Site Request Forgery

Gmail Checker plus Chrome extension XSS/CSRF II extension: https://chrome.google.com/extensions/detail/gffjhibehnempbkeheiccaincokdjbfe advisore:http://lostmon.blogspot.com/2010/06/gmail-checker-plus-chrome-extension.html Exploit available:yes vendor notify: NO So in this case "Google Mail Checke...

TJX Browser Exploit Accomplice Gets Probation

A computer security professional who sold Internet Explorer exploit code to credit card hacker Albert Gonzalez was sentenced Tuesday to three years probation and a $10,000 fine. Jeremy Jethro, 29, was paid $60,000 by Gonzalez for a zero-day exploit against Microsoft’s browser, “the purpose and...

Change parameter "wide links" to default to "no";

Description The problem comes from a combination of two features in Samba, each of which on their own are useful to Administrators, but in combination allow users to access any file on the system that their logged in username has permissions to read this is not a privilege escalation problem. By...

In-depth research on the recent PDF zero-day exploit (CVE-2009-3459)

Hi there, Just want to let you know, the Fortinet's FortiGuard Global Security Research Team has provided an in-depth research on the recent PDF zero-day exploit CVE-2009-3459. http://www.fortiguard.com/analysis/pdfanalysis.html "Taking a look back over this 0-day attack as a whole, each single...

appleiphoto-dos.txt

A little zero-day exploit in memory of Dude VanWinkle. Apple iPhoto v4.0.3 DPAP Digital Photo Access Protocol Server Denial of Service Exploit. Other versions may be vulnerable too; the current version should not be vulnerable. The server process catches the exception, exits cleanly, but does not...

CVE-2007-0671

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks...

Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit

No description provided by source. This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! http://www.milw0rm.com/sploits/skinhead.rar 171 Ko index.html ----------- html head /head frameset rows=",1" framespacing="0" border="0"...

Local root vulnerability in most used Linux kernels

There is a zeroday exploit for kernel in hands of scriptkiddies. After they rooted locally 2 system which I've intrest and did dd if=/dev/zero of=/dev/hda1 & on both, I spended 7 hours to finding fragments we really need easies tools LDE with GUI block search capabilities This with help of Peter ...