un

Unpatched Kernel-Level Vuln Affects All Windows Versions







un

Adobe Flash Player Integer Underflow Remote Code Execution

This Metasploit module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 12.0.0.43. By supplying a specially crafted swf file it is possible to trigger an integer underflow in several avm2 instructions, which can be turned into remote code execution under the context of the user, as exploited in the wild in February 2014. This Metasploit module has been tested successfully with Adobe Flash Player 11.7.700.202 on Windows XP SP3, Windows 7 SP1 and Adobe Flash Player 11.3.372.94 on Windows 8 even when it includes rop chains for several Flash 11 versions, as exploited in the wild.




un

Microsoft Windows 10 scrrun.dll Active-X Creation / Deletion Issues

scrrun.dll on Microsoft Windows 10 suffers from file creation, folder creation, and folder deletion vulnerabilities.




un

Ubuntu Security Notice USN-4058-1

Ubuntu Security Notice 4058-1 - It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command.




un

Ubuntu Security Notice USN-4058-2

Ubuntu Security Notice 4058-2 - USN-4058-1 fixed a vulnerability in bash. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command. Various other issues were also addressed.




un

Ubuntu Security Notice USN-4180-1

Ubuntu Security Notice 4180-1 - It was discovered that Bash incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.




un

UltraVNC Launcher 1.2.4.0 Denial Of Service

UltraVNC Launcher version 1.2.4.0 Password denial of service proof of concept exploit.




un

UltraVNC Launcher 1.2.4.0 Denial Of Service

UltraVNC Launcher version 1.2.4.0 RepeaterHost denial of service proof of concept exploit.





un

Secunia Security Advisory 17850

Secunia Security Advisory - r0t has reported a vulnerability in QualityEBiz Quality PPC (QualityPPC), which can be exploited by malicious people to conduct cross-site scripting attacks.




un

FailureToLaunch-2.pl.txt

Proof of concept exploit for Mac OS X versions 10.4.6 and below which are susceptible to a vulnerability in launchd's syslog() function. PPC version.




un

Secunia Security Advisory 48336

Secunia Security Advisory - A vulnerability has been reported in Inout PPC Engine, which can be exploited by malicious people to conduct cross-site request forgery attacks.





un

Rootkit Hunter 1.3.6

Rootkit Hunter scans files and systems for known and unknown rootkits, backdoors, and sniffers. The package contains one shell script, a few text-based databases, and optional Perl modules. It should run on almost every Unix variety except Solaris and NetBSD.




un

Rootkit Hunter 1.3.8

Rootkit Hunter scans files and systems for known and unknown rootkits, backdoors, and sniffers. The package contains one shell script, a few text-based databases, and optional Perl modules. It should run on almost every Unix variety except Solaris and NetBSD.




un

Apache Struts 2 Needs Patching, Without Delay. It's Under Attack Now.




un

42: The Answer To Life, The Universe, And How Many Cisco Products Have Struts Bugs





un

Serious XSS Flaw Haunts Microsoft SharePoint





un

US Navy Captures Suspected Pirates After Gunbattle





un

Symantec And Juniper To Snoop Networks Together




un

Traffic Snags On Juniper Router Glitch




un

Cisco And Juniper Clientless VPNs Expose Netizens




un

JUNOS (Juniper) Flaw Exposes Core Routers To Kernel Crash












un

Juniper Bleeding Data And Money: Slaps Band-Aids All Over JunOS






un

Network Time Protocol Bugs Sting Juniper Operating System





un

Slackware Security Advisory - mozilla-thunderbird Updates

Slackware Security Advisory - New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues.




un

Slackware Security Advisory - mozilla-thunderbird Updates

Slackware Security Advisory - New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues.




un

Slackware Security Advisory - mozilla-thunderbird Updates

Slackware Security Advisory - New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues.