Haihaisoft Universal Player ActiveX Control Remote Buffer Overflow PoC

30 november, 2009

Target: Haihaisoft Universal Player 1.4.8.0
Impact: Denial of service

Haihaisoft-expl.htm

National Vulnerability Database

15 March

CVE-2010-0054

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execu ...

CVE-2010-0053

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execu ...

CVE-2010-0052

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execu ...

CVE-2010-0051

WebKit in Apple Safari before 4.0.5 does not properly validate the cross-origin loading of styleshee ...

CVE-2010-0050

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execu ...

Viruses

16 March

W32.Qakbot!gen2

W32.Qakbot!gen2 is a heuristic detection used to detect threats associated with the W32.Qakbot famil ...

14 March

Trojan.ADH

Trojan.ADH is a detection for files that may be malicious.

Heuristic.ADH

Heuristic.ADH is a detection for files that may be malicious.

12 March

Trojan.Pidief.I

Trojan.Pidief.I is a Trojan horse that exploits the Adobe Acrobat and Reader CVE-2010-0188 Unspecifi ...

11 March

Bloodhound.Exploit.317

Bloodhound.Exploit.317 is a heuristic detection for potentially malicious files that may exploit the ...

Red Hat

[RHSA-2010:0130-01] Moderate: java-1.5.0-ibm security update

Red Hat Security Advisory - Moderate: java-1.5.0-ibm security update

03 march, 2010

[RHSA-2010:0129-01] Moderate: cups security update

Red Hat Security Advisory - Moderate: cups security update

03 march, 2010

[RHSA-2010:0126-01] Important: kvm security and bug fix update

Red Hat Security Advisory - Important: kvm security and bug fix update

01 march, 2010

PoC

Microsoft Windows 2000/XP CHM Notepad Remote Code Execution PoC

Target: Microsoft Windows 2000/XP
Impact: Denial of service

РоС 12 march, 2010

Microsoft Internet Explorer iepeers.dll Use After Free Exploit (meta)

Target: Microsoft Internet Explorer 6.x, 7.x
Impact: Code execution

РоС 11 march, 2010

MS05-20 Internet Explorer DHTML Memory Corruption PoC

Target: Internet Explorer
Impact: Denial of service

РоС 09 march, 2010

iPhone / iTouch FTPDisc 1.0 Buffer Overflow PoC

Target: iPhone / iTouch FTPDisc 1.0
Impact: Denial of service

РоС 09 march, 2010

Easy FTP Server 1.7.0.2 Remote RET Overwrite Exploit

Target: Easy FTP Server 1.7.0.2
Impact: Code execution

РоС 09 march, 2010

QuickZip 4.x (.zip) Universal Buffer Overflow Exploit

Target: QuickZip 4.x
Impact: Code execution

РоС 09 march, 2010

TopDownloads MP3 Player 1.0 m3u Denial of Service PoC

Target: TopDownloads MP3 Player 1.0
Impact: Denial of service

РоС 09 march, 2010

Tod Miller Sudo 1.6.x, 1.7.x Local Root Exploit

Target: Tod Miller Sudo 1.6.x, 1.7.x
Impact: Priviledge escalation

РоС 09 march, 2010

Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit

Target: Apache 2.2.14
Impact: Code execution

РоС 09 march, 2010

BigForum 4.5 SQL Injection PoC

Target: BigForum 4.5
Impact: SQL injection

РоС 09 march, 2010

Kolang PHP 4.3.10 - 5.3.0 Safe Mode Bypass Exploit

Target: PHP 4.3.10 - 5.3.0
Impact: Security bypass

РоС 09 march, 2010

OneCMS v2.5 SQL Injection PoC

Target: OneCMS 2.5
Impact: SQL injection

РоС 09 march, 2010

Sagem Routers Remote Auth Bypass Exploit

Target: Sagem Routers
Impact: Authentication bypass

РоС 09 march, 2010

Sagem Routers Remote Reset Exploit

Target: Sagem Routers
Impact: Denial of service

РоС 09 march, 2010

Flare <= 0.6 Local Heap Overflow Denial of Service PoC

Target: Flare 0.6 and previous versions
Impact: Denial of service

РоС 09 march, 2010

Cisco

Cisco Security Advisory: Multiple Vulnerabilities in Cisco IronPort Encryption Appliance

Cisco IronPort Encryption Appliance devices contain two vulnerabilities that allow remote, unauthent ...

11 february, 2010

Cisco Security Advisory: Multiple Cisco WebEx WRF Player Vulnerabilities

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Recording Format (WRF) Pla ...

18 december, 2009

Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability

An industry-wide vulnerability exists in the Transport Layer Security (TLS) protocol that co ...

23 november, 2009

Microsoft

MS10-017: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (980150)

This security update resolves seven privately reported vulnerabilities in Microsoft Office Excel.

09 march, 2010

MS10-016: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)

This security update addresses a privately reported vulnerability in Windows Movie Maker and Microso ...

09 march, 2010

MS10-015: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (977165)

This security update resolves one publicly disclosed and one privately reported vulnerability in Mic ...

10 february, 2010

Sun Microsystems

SunOS 5.10_x86: ucode driver patch

6905530 processor microcode code can panic when retrieving microcode revision.

02 february, 2010

Security Vulnerabilities in PostgreSQL Shipped With Solaris May Allow Escalation of Privileges or Man-in-the-Middle on SSL Connections

Multiple security vulnerabilities have been identified in the PostgreSQL software shipped with Solar ...

31 december, 2009

Directory Proxy Server Provided with Directory Server Enterprise Edition 6 is Subject to Denial of Service (DoS) and May Allow Unauthorized Access to Certain Data

Directory Proxy Server Provided with Directory Server Enterprise Edition 6 is Subject to Denial of S ...

31 december, 2009