.:[ packet storm ]:.
                         
know your enemy
know your enemy

 Section:  .. / Last 20 Files /

 ///  File Name:ie8-forcedtweet.txt
Description:
Microsoft Internet Explorer 8 suffers from a vulnerability that allows an arbitrary web site the ability to force a victim to make tweets.
Author:Chris Evans
File Size:1131
Last Modified:Sep 3 19:25:48 2010
MD5 Checksum:51e26942b1d61bf8696ece2a57b00b66

 ///  File Name:smbind-sql.txt
Description:
SMBind versions 0.4.7 and below suffer from a remote SQL injection vulnerability that allows for authentication bypass.
Author:IHTeam
File Size:1711
Last Modified:Sep 3 19:21:31 2010
MD5 Checksum:c49af99187546a30749f3a3a4ba5cc44

 ///  File Name:pligg104-sql.txt
Description:
Pligg version 1.0.4 suffers from additional remote SQL injection vulnerabilities outside of the previously discovered findings.
Author:Bogdan Calin
Homepage:http://www.acunetix.com/
Related Exploit:pliggcms104-sql.txt
File Size:3371
Last Modified:Sep 3 19:19:28 2010
MD5 Checksum:3162841c2d8bfcfec785cce729b0412b

 ///  File Name:moaub03-trendmicro.pdf
Description:
Month Of Abysssec Undisclosed Bugs - Trend Micro Internet Security Pro 2010 suffers from an Active-X extSetOwner remote code execution vulnerability.
Author:Abysssec,Shahin
Homepage:http://www.abysssec.com/
Related Exploit:moaub-trendmicro.txt
File Size:359668
Last Modified:Sep 3 19:17:17 2010
MD5 Checksum:81b892dac8eb292ac0b50174b0d75657

 ///  File Name:moaub03-visinia.pdf
Description:
Month Of Abysssec Undisclosed Bugs - Visinia version 1.3 suffers from cross site request forgery and local file inclusion vulnerabilities.
Author:Abysssec,Shahin
Homepage:http://www.abysssec.com/
Related Exploit:moaub-visinia.txt
File Size:362975
Last Modified:Sep 3 19:15:33 2010
MD5 Checksum:619881b402da33983acd8bed63e7fe1d

 ///  File Name:googlechrome-corruption.txt
Description:
VUPEN Vulnerability Research Team discovered a high risk vulnerability affecting Google Chrome. The vulnerability is caused by a memory corruption error when processing focus events, which could be exploited by remote attackers to potentially execute arbitrary code by tricking a user into visiting a specially crafted web page. Google Chrome versions prior to 6.0.472.53 are affected.
Author:Matthieu Bonetti
Homepage:http://www.vupen.com/
File Size:2371
Last Modified:Sep 3 19:12:55 2010
MD5 Checksum:d7bb1c9543aec34baff17e3f886116fb

 ///  File Name:moaub-visinia.txt
Description:
Month Of Abysssec Undisclosed Bugs - Visinia version 1.3 suffers from cross site request forgery and local file inclusion vulnerabilities.
Author:Abysssec,Shahin
Homepage:http://www.abysssec.com/
File Size:4359
Last Modified:Sep 3 19:10:46 2010
MD5 Checksum:4f2cdbb83c685adb6510a897eaeaaf25

 ///  File Name:moaub-trendmicro.txt
Description:
Month Of Abysssec Undisclosed Bugs - Trend Micro Internet Security Pro 2010 suffers from an Active-X extSetOwner remote code execution vulnerability.
Author:Abysssec,Shahin
Homepage:http://www.abysssec.com/
File Size:2172
Last Modified:Sep 3 19:10:11 2010
MD5 Checksum:bc9e1d9b0e93b3baf3ad0e4ace4f8ce6

 ///  File Name:dsa-2102-1.txt
Description:
Debian Linux Security Advisory 2102-1 - It has been discovered that in barnowl, a curses-based instant-messaging client, the return codes of calls to the ZPending and ZReceiveNotice functions in libzephyr were not checked, allowing attackers to cause a denial of service (crash of the application), and possibly execute arbitrary code.
Author:Debian
Homepage:http://www.debian.org/security
File Size:5479
Related CVE(s):CVE-2010-2725
Last Modified:Sep 3 19:08:51 2010
MD5 Checksum:de4af2887f97b53bbc11ac63308a1a5c

 ///  File Name:HPSBMA02572-SSRT100082.txt
Description:
HP Security Bulletin - A potential security vulnerability has been identified with HP Operations Agent running on Windows. The vulnerabilities could be exploited locally resulting in an elevation of privileges and remotely allowing execution of arbitrary code.
Homepage:http://www.hp.com/
File Size:6011
Related CVE(s):CVE-2010-3004, CVE-2010-3005
Last Modified:Sep 3 19:04:55 2010
MD5 Checksum:3a249f396673948dfc9c54350c90b961

 ///  File Name:MDVSA-2010-170.txt
Description:
Mandriva Linux Security Advisory 2010-170 - GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a.wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.
Author:Mandriva
Homepage:http://www.mandriva.com/security/
File Size:5600
Related CVE(s):CVE-2010-2252
Last Modified:Sep 2 23:47:14 2010
MD5 Checksum:1d5d76c35a7524b8752e4dfab043cf0f

 ///  File Name:glsa-201009-01.txt
Description:
Gentoo Linux Security Advisory 201009-1 - An integer overflow vulnerability in wxGTK might enable remote attackers to cause the execution of arbitrary code. wxGTK is prone to an integer overflow error in the wxImage::Create() function in src/common/image.cpp, possibly leading to a heap-based buffer overflow. Versions less than 2.8.10.1-r1 are affected.
Author:Gentoo
Homepage:http://security.gentoo.org
File Size:3040
Related CVE(s):CVE-2009-2369
Last Modified:Sep 2 23:46:38 2010
MD5 Checksum:fdf7e822a65781e0b83fcc9be4491798

 ///  File Name:onecms-xss.txt
Description:
OneCMS version 2.6.1 suffers from a cross site scripting vulnerability.
Author:anT!-Tr0J4n
File Size:897
Last Modified:Sep 2 23:45:56 2010
MD5 Checksum:740f705d0901e689fd0d4c44af86aedf

 ///  File Name:path-attacks.txt
Description:
Whitepaper called PATH Attacks. Written in German.
Author:fred777
File Size:4731
Last Modified:Sep 2 23:43:29 2010
MD5 Checksum:7933cf7d3dc0e60c44aa420b47a80c47

 ///  File Name:moaub02-apple.pdf
Description:
Month Of Abysssec Undisclosed Bugs - Apple QuickTime player version 7.6.5 FlashPix NumberOfTiles remote code execution exploit.
Author:Abysssec,Shahin
Homepage:http://www.abysssec.com/
Related Exploit:moaub-quicktime.txt
File Size:154759
Related CVE(s):CVE-2010-0519
Last Modified:Sep 2 23:37:47 2010
MD5 Checksum:e1e2b6f4c40321ac93c73434a39dc229

 ///  File Name:moaub02-rainbow.pdf
Description:
Month Of Abysssec Undisclosed Bugs - Rainbow Portal version 2.0 suffers from login weakness, cross site scripting and remote SQL injection vulnerabilities.
Author:Abysssec,Shahin
Homepage:http://www.abysssec.com/
Related Exploit:moaub-rainbowportal.txt
File Size:142764
Last Modified:Sep 2 23:33:55 2010
MD5 Checksum:12d02297541fb5e8b80004196ffb9094

 ///  File Name:webmanagerpro-sql.txt
Description:
CMS WebManager-Pro suffers from a remote SQL injection vulnerability.
Author:MustLive
File Size:1025
Last Modified:Sep 2 23:21:13 2010
MD5 Checksum:e5db11a98db2675d2b09d59fb6743fc3

 ///  File Name:suricata-1.0.2.tar.gz
Description:
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.
Homepage:http://www.openinfosecfoundation.org/index.php/download-suricata
Changes:An SSH module was added. Several TCP evasions were fixed. Language compatibility was improved. HTTP detection accuracy was improved. Inline mode was improved.
File Size:1630936
Last Modified:Sep 2 23:18:47 2010
MD5 Checksum:57c93a22602ecc9bbe5857beeb79cb5d

 ///  File Name:checksum-shellcode.txt
Description:
This shellcode is an egg hunter checksum routine.
Author:Ron Henry
File Size:2395
Last Modified:Sep 2 23:15:53 2010
MD5 Checksum:86a11690f9577c5dbe008bd3b2a7d903

 ///  File Name:USN-982-1.txt
Description:
Ubuntu Security Notice 982-1 - It was discovered that Wget would use filenames provided by the server when following 3xx redirects. If a user or automated system were tricked into downloading a file from a malicious site, a remote attacker could create the file with an arbitrary name (e.g. .wgetrc), and possibly run arbitrary code.
Author:Ubuntu
Homepage:http://security.ubuntu.com/
File Size:11134
Related CVE(s):CVE-2010-2252
Last Modified:Sep 2 23:15:02 2010
MD5 Checksum:772e3ecddbb0e78f9ad1482e49e5c2b0