what you don't know can hurt you
Showing 1 - 25 of 38 RSS Feed

Files Date: 2010-09-03

Microsoft Internet Explorer 8 Forced Tweeting
Posted Sep 3, 2010
Authored by Chris Evans

Microsoft Internet Explorer 8 suffers from a vulnerability that allows an arbitrary web site the ability to force a victim to make tweets.

tags | advisory, web, arbitrary
MD5 | 51e26942b1d61bf8696ece2a57b00b66
SMBind 0.4.7 SQL Injection
Posted Sep 3, 2010
Authored by IHTeam

SMBind versions 0.4.7 and below suffer from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection
MD5 | c49af99187546a30749f3a3a4ba5cc44
Pligg 1.0.4 SQL Injection
Posted Sep 3, 2010
Authored by Bogdan Calin | Site acunetix.com

Pligg version 1.0.4 suffers from additional remote SQL injection vulnerabilities outside of the previously discovered findings.

tags | exploit, remote, vulnerability, sql injection
MD5 | 3162841c2d8bfcfec785cce729b0412b
Month Of Abysssec Undisclosed Bugs - Trend Micro
Posted Sep 3, 2010
Authored by Abysssec, Shahin | Site abysssec.com

Month Of Abysssec Undisclosed Bugs - Trend Micro Internet Security Pro 2010 suffers from an Active-X extSetOwner remote code execution vulnerability.

tags | advisory, remote, code execution, activex
MD5 | 81b892dac8eb292ac0b50174b0d75657
Month Of Abysssec Undisclosed Bugs - Visinia 1.3 XSRF / LFI
Posted Sep 3, 2010
Authored by Abysssec, Shahin | Site abysssec.com

Month Of Abysssec Undisclosed Bugs - Visinia version 1.3 suffers from cross site request forgery and local file inclusion vulnerabilities.

tags | advisory, local, vulnerability, file inclusion, csrf
MD5 | 619881b402da33983acd8bed63e7fe1d
Google Chrome Focus Processing Memory Corruption
Posted Sep 3, 2010
Authored by Matthieu Bonetti | Site vupen.com

VUPEN Vulnerability Research Team discovered a high risk vulnerability affecting Google Chrome. The vulnerability is caused by a memory corruption error when processing focus events, which could be exploited by remote attackers to potentially execute arbitrary code by tricking a user into visiting a specially crafted web page. Google Chrome versions prior to 6.0.472.53 are affected.

tags | advisory, remote, web, arbitrary
MD5 | d7bb1c9543aec34baff17e3f886116fb
Month Of Abysssec Undisclosed Bugs - Visinia 1.3 XSRF / LFI
Posted Sep 3, 2010
Authored by Abysssec, Shahin | Site abysssec.com

Month Of Abysssec Undisclosed Bugs - Visinia version 1.3 suffers from cross site request forgery and local file inclusion vulnerabilities.

tags | exploit, local, vulnerability, file inclusion, csrf
MD5 | 4f2cdbb83c685adb6510a897eaeaaf25
Month Of Abysssec Undisclosed Bugs - Trend Micro
Posted Sep 3, 2010
Authored by Abysssec, Shahin | Site abysssec.com

Month Of Abysssec Undisclosed Bugs - Trend Micro Internet Security Pro 2010 suffers from an Active-X extSetOwner remote code execution vulnerability.

tags | exploit, remote, code execution, activex
MD5 | bc9e1d9b0e93b3baf3ad0e4ace4f8ce6
Debian Linux Security Advisory 2102-1
Posted Sep 3, 2010
Authored by Debian | Site debian.org

Debian Linux Security Advisory 2102-1 - It has been discovered that in barnowl, a curses-based instant-messaging client, the return codes of calls to the ZPending and ZReceiveNotice functions in libzephyr were not checked, allowing attackers to cause a denial of service (crash of the application), and possibly execute arbitrary code.

tags | advisory, denial of service, arbitrary
systems | linux, debian
advisories | CVE-2010-2725
MD5 | de4af2887f97b53bbc11ac63308a1a5c
HP Security Bulletin HPSBMA02572 SSRT100082
Posted Sep 3, 2010
Authored by Hewlett Packard | Site hp.com

HP Security Bulletin - A potential security vulnerability has been identified with HP Operations Agent running on Windows. The vulnerabilities could be exploited locally resulting in an elevation of privileges and remotely allowing execution of arbitrary code.

tags | advisory, arbitrary, vulnerability
systems | windows
advisories | CVE-2010-3004, CVE-2010-3005
MD5 | 3a249f396673948dfc9c54350c90b961
Secunia Security Advisory 41167
Posted Sep 3, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been discovered in KeePass Password Safe, which can be exploited by malicious people to compromise a user's system.

tags | advisory
MD5 | 163237b1ab6ae4dd4d0b1a3cae3f6128
Secunia Security Advisory 41280
Posted Sep 3, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - SUSE has issued an update for the kernel. This fixes some vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and gain escalated privileges and by malicious people to cause a DoS.

tags | advisory, denial of service, kernel, local, vulnerability
systems | linux, suse
MD5 | 6a8766398ee3ed89ca2d21ede3da5698
Secunia Security Advisory 41266
Posted Sep 3, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been reported in 3Com H3C S9500E switches, which can be exploited by malicious people to cause a DoS (Denial of Service).

tags | advisory, denial of service
MD5 | a03eb0f3504f0294f182299694166fb2
Secunia Security Advisory 41258
Posted Sep 3, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been discovered in PhotoImpact, which can be exploited by malicious people to compromise a user's system.

tags | advisory
MD5 | 5adac5d44791d865de33f975d7f9efb7
Secunia Security Advisory 41277
Posted Sep 3, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - Two vulnerabilities have been reported in HP Operations Agent, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to potentially compromise a vulnerable system.

tags | advisory, local, vulnerability
MD5 | b56d7e7a0f7314cff8328c058e24b509
Secunia Security Advisory 41189
Posted Sep 3, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - Some vulnerabilities have been discovered in Visinia, which can be exploited by malicious people to conduct cross-site request forgery attacks and disclose sensitive information.

tags | advisory, vulnerability, csrf
MD5 | e17cc2cb5a48f2ad1db9a5f7c7ed5fb4
Secunia Security Advisory 41152
Posted Sep 3, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been reported in Roxio MyDVD, which can be exploited by malicious people to compromise a user's system.

tags | advisory
MD5 | 4b2d2f6f6af215fb2fc71c2fe9c29122
Secunia Security Advisory 41278
Posted Sep 3, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been discovered in MantisBT, which can be exploited by malicious people to conduct cross-site scripting attacks.

tags | advisory, xss
MD5 | c133f05d281f713d20145f1cf6c1a74e
Secunia Security Advisory 41254
Posted Sep 3, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been discovered in NuSOAP, which can be exploited by malicious people to conduct cross-site scripting attacks.

tags | advisory, xss
MD5 | 4bfd0b5d1767372156f1dd59027f9826
Mandriva Linux Security Advisory 2010-170
Posted Sep 3, 2010
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-170 - GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a.wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

tags | advisory, remote, arbitrary
systems | linux, mandriva
advisories | CVE-2010-2252
MD5 | 1d5d76c35a7524b8752e4dfab043cf0f
Gentoo Linux Security Advisory 201009-1
Posted Sep 3, 2010
Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201009-1 - An integer overflow vulnerability in wxGTK might enable remote attackers to cause the execution of arbitrary code. wxGTK is prone to an integer overflow error in the wxImage::Create() function in src/common/image.cpp, possibly leading to a heap-based buffer overflow. Versions less than 2.8.10.1-r1 are affected.

tags | advisory, remote, overflow, arbitrary
systems | linux, gentoo
advisories | CVE-2009-2369
MD5 | fdf7e822a65781e0b83fcc9be4491798
OneCMS 2.6.1 Cross Site Scripting
Posted Sep 3, 2010
Authored by anT!-Tr0J4n

OneCMS version 2.6.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss
MD5 | 740f705d0901e689fd0d4c44af86aedf
Whitepaper Called PATH Attacks
Posted Sep 3, 2010
Authored by fred777

Whitepaper called PATH Attacks. Written in German.

tags | paper
MD5 | 7933cf7d3dc0e60c44aa420b47a80c47
Month Of Abysssec Undisclosed Bugs - Apple QuickTime
Posted Sep 3, 2010
Authored by Abysssec, Shahin | Site abysssec.com

Month Of Abysssec Undisclosed Bugs - Apple QuickTime player version 7.6.5 FlashPix NumberOfTiles remote code execution exploit.

tags | advisory, remote, code execution
systems | apple
advisories | CVE-2010-0519
MD5 | e1e2b6f4c40321ac93c73434a39dc229
Month Of Abysssec Undisclosed Bugs - Rainbow Portal 2.0
Posted Sep 3, 2010
Authored by Abysssec, Shahin | Site abysssec.com

Month Of Abysssec Undisclosed Bugs - Rainbow Portal version 2.0 suffers from login weakness, cross site scripting and remote SQL injection vulnerabilities.

tags | advisory, remote, vulnerability, xss, sql injection
MD5 | 12d02297541fb5e8b80004196ffb9094
Page 1 of 2
Back12Next

File Archive:

October 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    24 Files
  • 2
    Oct 2nd
    15 Files
  • 3
    Oct 3rd
    7 Files
  • 4
    Oct 4th
    4 Files
  • 5
    Oct 5th
    10 Files
  • 6
    Oct 6th
    1 Files
  • 7
    Oct 7th
    21 Files
  • 8
    Oct 8th
    19 Files
  • 9
    Oct 9th
    5 Files
  • 10
    Oct 10th
    20 Files
  • 11
    Oct 11th
    17 Files
  • 12
    Oct 12th
    4 Files
  • 13
    Oct 13th
    4 Files
  • 14
    Oct 14th
    15 Files
  • 15
    Oct 15th
    19 Files
  • 16
    Oct 16th
    25 Files
  • 17
    Oct 17th
    17 Files
  • 18
    Oct 18th
    0 Files
  • 19
    Oct 19th
    0 Files
  • 20
    Oct 20th
    0 Files
  • 21
    Oct 21st
    0 Files
  • 22
    Oct 22nd
    0 Files
  • 23
    Oct 23rd
    0 Files
  • 24
    Oct 24th
    0 Files
  • 25
    Oct 25th
    0 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close