cr

AoA DVD Creator 2.6.2 Active-X Overflow

AoA DVD Creator version 2.6.2 suffers from an overflow vulnerability.




cr

Micro Focus Rumba 9.3 Active-X Stack Buffer Overflow

Micro Focus Rumba versions 9.3 and below suffer from an active-x stack buffer overflow vulnerability.




cr

Microsoft Windows 10 scrrun.dll Active-X Creation / Deletion Issues

scrrun.dll on Microsoft Windows 10 suffers from file creation, folder creation, and folder deletion vulnerabilities.




cr

Apache James Server 2.3.2 Insecure User Creation / Arbitrary File Write

This Metasploit module exploits a vulnerability that exists due to a lack of input validation when creating a user. Messages for a given user are stored in a directory partially defined by the username. By creating a user with a directory traversal payload as the username, commands can be written to a given directory. To use this module with the cron exploitation method, run the exploit using the given payload, host, and port. After running the exploit, the payload will be executed within 60 seconds. Due to differences in how cron may run in certain Linux operating systems such as Ubuntu, it may be preferable to set the target to Bash Completion as the cron method may not work. If the target is set to Bash completion, start a listener using the given payload, host, and port before running the exploit. After running the exploit, the payload will be executed when a user logs into the system. For this exploitation method, bash completion must be enabled to gain code execution. This exploitation method will leave an Apache James mail object artifact in the /etc/bash_completion.d directory and the malicious user account.




cr

Amcrest Dahua NVR Camera IP2M-841 Denial Of Service

Amcrest Dahua NVR Camera IP2M-841 denial of service proof of concept exploit.







cr

Trafscrambler Anti-Sniffer For OS X

Trafscrambler is an anti-sniffer/IDS NKE (Network Kernel Extension) for Mac OS X. This initial release implements SYN-decoy, Pre/Post connections SYN, TCP reset, and zero window attacks. Author tested this on x86 OS X versions 10.5.6 and 10.5.7. It should work on PPC and older releases as well.




cr

Trafscrambler Anti-Sniffer For OS X

Trafscrambler is an anti-sniffer/IDS NKE (Network Kernel Extension) for Mac OS X. Author tested this on x86 OS X versions 10.5.6 and 10.5.7. It should work on PPC and older releases as well.




cr

Trafscrambler Anti-Sniffer For OS X

Trafscrambler is an anti-sniffer/IDS NKE (Network Kernel Extension) for Mac OS X. Author tested this on x86 OS X versions 10.5.6 and 10.5.7. It should work on PPC and older releases as well.




cr

Inout PPC Engine Cross Site Request Forgery

Inout PPC Engine suffers from a cross site request forgery vulnerability.




cr

Police Say Oslo Suspect Admits To 'Facts' In Massacre








cr

Apache Hadoop Spins Cracking Code Injection Vulnerability YARN




cr

Web Tools Create XSS Headaches




cr

Facebook Vulnerable To Critical XSS, Could Lead To Malware Attacks




cr

Scripting Bugs Blight Security Giants' Websites




cr

Yahoo Fixes Email Cross-Site Scripting Flaw




cr

Attention Symantec - There Is A Bug Crawling On Your Website





cr

Microsoft To Fix IE8 Cross-Site Scripting Problem, Again




cr

Serious XSS Flaw Haunts Microsoft SharePoint






cr

JUNOS (Juniper) Flaw Exposes Core Routers To Kernel Crash













cr

Critical XSS Vulnerability Patched In WordPress Plugin GDPR Cookie Consent





cr

Dassault Systèmes and SATS Create World’s First Virtual Kitchen for In-Flight Catering Production

•Dassault Systèmes collaborated with SATS, Asia’s leading food solutions and gateway services provider, to boost operational efficiency, minimize food waste •Growth in airline passenger travel underscores need for sustainable excellence in aerospace industry-related commercial services •Digital twin experience with the 3DEXPERIENCE platform bridges the gap between the virtual and real for in-flight catering production




cr

Eviation Completes the First Prototype of its Zero-Emission Electric Commuter Aircraft with Dassault Systèmes

●Electric air mobility pioneer used the 3DEXPERIENCE platform on the cloud to develop prototype in two years ●“Reinvent the Sky” industry solution experience provides full data security in a single, standards-based environment ●Dassault Systèmes enables companies of all sizes to create new categories of sustainable air mobility systems that will change how the world travels




cr

Wii Hack Simulates Microsoft Surface