| |
|
Packet Storm Security Last 20
Last Downloaded: Sat, 04 Sep 2010 12:33:04 GMT. |
 |
 |
|
| |
ie8-forcedtweet.txt Microsoft Internet Explorer 8 suffers from a vulnerability that allows an arbitrary web site the ability to force a victim to make tweets. |
| |
smbind-sql.txt SMBind versions 0.4.7 and below suffer from a remote SQL injection vulnerability that allows for authentication bypass. |
| |
pligg104-sql.txt Pligg version 1.0.4 suffers from additional remote SQL injection vulnerabilities outside of the previously discovered findings. |
| |
moaub03-trendmicro.pdf Month Of Abysssec Undisclosed Bugs - Trend Micro Internet Security Pro 2010 suffers from an Active-X extSetOwner remote code execution vulnerability. |
| |
moaub03-visinia.pdf Month Of Abysssec Undisclosed Bugs - Visinia version 1.3 suffers from cross site request forgery and local file inclusion vulnerabilities. |
| |
googlechrome-corruption.txt VUPEN Vulnerability Research Team discovered a high risk vulnerability affecting Google Chrome. The vulnerability is caused by a memory corruption error when processing focus events, which could be exploited by remote attackers to potentially execute arbitrary code by tricking a user into visiting a specially crafted web page. Google Chrome versions prior to 6.0.472.53 are affected. |
| |
moaub-visinia.txt Month Of Abysssec Undisclosed Bugs - Visinia version 1.3 suffers from cross site request forgery and local file inclusion vulnerabilities. |
| |
moaub-trendmicro.txt Month Of Abysssec Undisclosed Bugs - Trend Micro Internet Security Pro 2010 suffers from an Active-X extSetOwner remote code execution vulnerability. |
| |
dsa-2102-1.txt Debian Linux Security Advisory 2102-1 - It has been discovered that in barnowl, a curses-based instant-messaging client, the return codes of calls to the ZPending and ZReceiveNotice functions in libzephyr were not checked, allowing attackers to cause a denial of service (crash of the application), and possibly execute arbitrary code. |
| |
HPSBMA02572-SSRT100082.txt HP Security Bulletin - A potential security vulnerability has been identified with HP Operations Agent running on Windows. The vulnerabilities could be exploited locally resulting in an elevation of privileges and remotely allowing execution of arbitrary code. |
| |
MDVSA-2010-170.txt Mandriva Linux Security Advisory 2010-170 - GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a.wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory. |
| |
glsa-201009-01.txt Gentoo Linux Security Advisory 201009-1 - An integer overflow vulnerability in wxGTK might enable remote attackers to cause the execution of arbitrary code. wxGTK is prone to an integer overflow error in the wxImage::Create() function in src/common/image.cpp, possibly leading to a heap-based buffer overflow. Versions less than 2.8.10.1-r1 are affected. |
| |
onecms-xss.txt OneCMS version 2.6.1 suffers from a cross site scripting vulnerability. |
| |
path-attacks.txt Whitepaper called PATH Attacks. Written in German. |
| |
moaub02-apple.pdf Month Of Abysssec Undisclosed Bugs - Apple QuickTime player version 7.6.5 FlashPix NumberOfTiles remote code execution exploit. |
| |
moaub02-rainbow.pdf Month Of Abysssec Undisclosed Bugs - Rainbow Portal version 2.0 suffers from login weakness, cross site scripting and remote SQL injection vulnerabilities. |
| |
webmanagerpro-sql.txt CMS WebManager-Pro suffers from a remote SQL injection vulnerability. |
| |
suricata-1.0.2.tar.gz Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools. |
| |
checksum-shellcode.txt This shellcode is an egg hunter checksum routine. |
| |
USN-982-1.txt Ubuntu Security Notice 982-1 - It was discovered that Wget would use filenames provided by the server when following 3xx redirects. If a user or automated system were tricked into downloading a file from a malicious site, a remote attacker could create the file with an arbitrary name (e.g. .wgetrc), and possibly run arbitrary code. |
