Viscom Software Movie Player Pro SDK ActiveX 6.8 Remote Buffer Overflow PoC

19 january, 2010

Target: Viscom Software Movie Player Pro SDK ActiveX 6.8
Impact: Code execution

Viscom-MoviePlayer-expl.txt

National Vulnerability Database

16 March

CVE-2010-0985

Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 fo ...

CVE-2010-0984

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient acce ...

CVE-2010-0983

PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when r ...

CVE-2010-0982

Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for J ...

CVE-2010-0981

SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote a ...

Viruses

18 March

Suspicious.AD

Suspicious.XX

Suspicious.XX is a detection technology designed to detect entirely new malware threats without trad ...

17 March

Bloodhound.PDF!gen

Bloodhound.PDF!gen is a heuristic detection of potentially malicious files, which may exploit vulner ...

Bloodhound.PDF!gen1

Bloodhound.PDF!gen1 is a heuristic detection for potentially malicious files that may exploit vulner ...

16 March

W32.Qakbot!gen2

W32.Qakbot!gen2 is a heuristic detection used to detect threats associated with the W32.Qakbot famil ...

Red Hat

[RHSA-2010:0145-01] Moderate: cpio security update

Red Hat Security Advisory - Moderate: cpio security update

16 march, 2010

[RHSA-2010:0144-01] Moderate: cpio security update

Red Hat Security Advisory - Moderate: cpio security update

16 march, 2010

[RHSA-2010:0143-01] Moderate: cpio security update

Red Hat Security Advisory - Moderate: cpio security update

16 march, 2010

PoC

Microsoft Windows 2000/XP CHM Notepad Remote Code Execution PoC

Target: Microsoft Windows 2000/XP
Impact: Denial of service

РоС 12 march, 2010

Microsoft Internet Explorer iepeers.dll Use After Free Exploit (meta)

Target: Microsoft Internet Explorer 6.x, 7.x
Impact: Code execution

РоС 11 march, 2010

MS05-20 Internet Explorer DHTML Memory Corruption PoC

Target: Internet Explorer
Impact: Denial of service

РоС 09 march, 2010

iPhone / iTouch FTPDisc 1.0 Buffer Overflow PoC

Target: iPhone / iTouch FTPDisc 1.0
Impact: Denial of service

РоС 09 march, 2010

Easy FTP Server 1.7.0.2 Remote RET Overwrite Exploit

Target: Easy FTP Server 1.7.0.2
Impact: Code execution

РоС 09 march, 2010

QuickZip 4.x (.zip) Universal Buffer Overflow Exploit

Target: QuickZip 4.x
Impact: Code execution

РоС 09 march, 2010

TopDownloads MP3 Player 1.0 m3u Denial of Service PoC

Target: TopDownloads MP3 Player 1.0
Impact: Denial of service

РоС 09 march, 2010

Tod Miller Sudo 1.6.x, 1.7.x Local Root Exploit

Target: Tod Miller Sudo 1.6.x, 1.7.x
Impact: Priviledge escalation

РоС 09 march, 2010

Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit

Target: Apache 2.2.14
Impact: Code execution

РоС 09 march, 2010

BigForum 4.5 SQL Injection PoC

Target: BigForum 4.5
Impact: SQL injection

РоС 09 march, 2010

Kolang PHP 4.3.10 - 5.3.0 Safe Mode Bypass Exploit

Target: PHP 4.3.10 - 5.3.0
Impact: Security bypass

РоС 09 march, 2010

OneCMS v2.5 SQL Injection PoC

Target: OneCMS 2.5
Impact: SQL injection

РоС 09 march, 2010

Sagem Routers Remote Auth Bypass Exploit

Target: Sagem Routers
Impact: Authentication bypass

РоС 09 march, 2010

Sagem Routers Remote Reset Exploit

Target: Sagem Routers
Impact: Denial of service

РоС 09 march, 2010

Flare <= 0.6 Local Heap Overflow Denial of Service PoC

Target: Flare 0.6 and previous versions
Impact: Denial of service

РоС 09 march, 2010

Cisco

Cisco Security Advisory: Multiple Vulnerabilities in Cisco IronPort Encryption Appliance

Cisco IronPort Encryption Appliance devices contain two vulnerabilities that allow remote, unauthent ...

11 february, 2010

Cisco Security Advisory: Multiple Cisco WebEx WRF Player Vulnerabilities

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Recording Format (WRF) Pla ...

18 december, 2009

Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability

An industry-wide vulnerability exists in the Transport Layer Security (TLS) protocol that co ...

23 november, 2009

Microsoft

MS10-017: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (980150)

This security update resolves seven privately reported vulnerabilities in Microsoft Office Excel.

09 march, 2010

MS10-016: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)

This security update addresses a privately reported vulnerability in Windows Movie Maker and Microso ...

09 march, 2010

MS10-015: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (977165)

This security update resolves one publicly disclosed and one privately reported vulnerability in Mic ...

10 february, 2010

Sun Microsystems

SunOS 5.10_x86: ucode driver patch

6905530 processor microcode code can panic when retrieving microcode revision.

02 february, 2010

Security Vulnerabilities in PostgreSQL Shipped With Solaris May Allow Escalation of Privileges or Man-in-the-Middle on SSL Connections

Multiple security vulnerabilities have been identified in the PostgreSQL software shipped with Solar ...

31 december, 2009

Directory Proxy Server Provided with Directory Server Enterprise Edition 6 is Subject to Denial of Service (DoS) and May Allow Unauthorized Access to Certain Data

Directory Proxy Server Provided with Directory Server Enterprise Edition 6 is Subject to Denial of S ...

31 december, 2009