Discuz 1.0 Remote SQL Injection Exploit

04 january, 2010

Target: Discuz 1.0
Impact: SQL injection

Discuz-expl.pl

National Vulnerability Database

10 March

CVE-2010-0962

The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 d ...

CVE-2010-0961

Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to g ...

CVE-2010-0960

Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to ga ...

CVE-2010-0959

Cross-site scripting (XSS) vulnerability in WebEditor/Authentication/LoginPage.aspx in IBM E ...

CVE-2010-0806

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft In ...

Viruses

11 March

Bloodhound.Exploit.317

Bloodhound.Exploit.317 is a heuristic detection for potentially malicious files that may exploit the ...

Bloodhound.Exploit.318

Bloodhound.Exploit.318 is a heuristic detection for potentially malicious files that may exploit the ...

Bloodhound.Exploit.320

Bloodhound.Exploit.320 is a heuristic detection for potentially malicious files that may exploit the ...

Bloodhound.Exploit.321

Bloodhound.Exploit.321 is a heuristic detection for potentially malicious files that may exploit the ...

JS.Sykipot

JS.Sykipot is a Trojan horse that exploits the Microsoft Internet Explorer 'iepeers.dll' Remote Code ...

Red Hat

[RHSA-2010:0130-01] Moderate: java-1.5.0-ibm security update

Red Hat Security Advisory - Moderate: java-1.5.0-ibm security update

03 march, 2010

[RHSA-2010:0129-01] Moderate: cups security update

Red Hat Security Advisory - Moderate: cups security update

03 march, 2010

[RHSA-2010:0126-01] Important: kvm security and bug fix update

Red Hat Security Advisory - Important: kvm security and bug fix update

01 march, 2010

PoC

Microsoft Internet Explorer iepeers.dll Use After Free Exploit (meta)

Target: Microsoft Internet Explorer 6.x, 7.x
Impact: Code execution

РоС 11 march, 2010

MS05-20 Internet Explorer DHTML Memory Corruption PoC

Target: Internet Explorer
Impact: Denial of service

РоС 09 march, 2010

iPhone / iTouch FTPDisc 1.0 Buffer Overflow PoC

Target: iPhone / iTouch FTPDisc 1.0
Impact: Denial of service

РоС 09 march, 2010

Easy FTP Server 1.7.0.2 Remote RET Overwrite Exploit

Target: Easy FTP Server 1.7.0.2
Impact: Code execution

РоС 09 march, 2010

QuickZip 4.x (.zip) Universal Buffer Overflow Exploit

Target: QuickZip 4.x
Impact: Code execution

РоС 09 march, 2010

TopDownloads MP3 Player 1.0 m3u Denial of Service PoC

Target: TopDownloads MP3 Player 1.0
Impact: Denial of service

РоС 09 march, 2010

Tod Miller Sudo 1.6.x, 1.7.x Local Root Exploit

Target: Tod Miller Sudo 1.6.x, 1.7.x
Impact: Priviledge escalation

РоС 09 march, 2010

Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit

Target: Apache 2.2.14
Impact: Code execution

РоС 09 march, 2010

BigForum 4.5 SQL Injection PoC

Target: BigForum 4.5
Impact: SQL injection

РоС 09 march, 2010

Kolang PHP 4.3.10 - 5.3.0 Safe Mode Bypass Exploit

Target: PHP 4.3.10 - 5.3.0
Impact: Security bypass

РоС 09 march, 2010

OneCMS v2.5 SQL Injection PoC

Target: OneCMS 2.5
Impact: SQL injection

РоС 09 march, 2010

Sagem Routers Remote Auth Bypass Exploit

Target: Sagem Routers
Impact: Authentication bypass

РоС 09 march, 2010

Sagem Routers Remote Reset Exploit

Target: Sagem Routers
Impact: Denial of service

РоС 09 march, 2010

Flare <= 0.6 Local Heap Overflow Denial of Service PoC

Target: Flare 0.6 and previous versions
Impact: Denial of service

РоС 09 march, 2010

Yahoo Player 1.0 (.m3u) Local Buffer Overflow PoC

Target: Yahoo Player 1.0
Impact: Denial of service

РоС 09 march, 2010

Cisco

Cisco Security Advisory: Multiple Vulnerabilities in Cisco IronPort Encryption Appliance

Cisco IronPort Encryption Appliance devices contain two vulnerabilities that allow remote, unauthent ...

11 february, 2010

Cisco Security Advisory: Multiple Cisco WebEx WRF Player Vulnerabilities

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Recording Format (WRF) Pla ...

18 december, 2009

Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability

An industry-wide vulnerability exists in the Transport Layer Security (TLS) protocol that co ...

23 november, 2009

Microsoft

MS10-017: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (980150)

This security update resolves seven privately reported vulnerabilities in Microsoft Office Excel.

09 march, 2010

MS10-016: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)

This security update addresses a privately reported vulnerability in Windows Movie Maker and Microso ...

09 march, 2010

MS10-015: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (977165)

This security update resolves one publicly disclosed and one privately reported vulnerability in Mic ...

10 february, 2010

Sun Microsystems

SunOS 5.10_x86: ucode driver patch

6905530 processor microcode code can panic when retrieving microcode revision.

02 february, 2010

Security Vulnerabilities in PostgreSQL Shipped With Solaris May Allow Escalation of Privileges or Man-in-the-Middle on SSL Connections

Multiple security vulnerabilities have been identified in the PostgreSQL software shipped with Solar ...

31 december, 2009

Directory Proxy Server Provided with Directory Server Enterprise Edition 6 is Subject to Denial of Service (DoS) and May Allow Unauthorized Access to Certain Data

Directory Proxy Server Provided with Directory Server Enterprise Edition 6 is Subject to Denial of S ...

31 december, 2009