Exclusivités

Posted by ZDI Disclosures on Apr 12ZDI-11-122: RealNetworks RealPlayer OpenURLInDefaultBrowser Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-122 April 12, 2011 -- CVE ID: CVE-2011-1426 -- CVSS: 9.7, (AV:N/AC:L/Au:N/C:C/I:P/A:C) -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks...

Antivirus Clean 2011 is a fake security application (rogue). It displays fake infections to push users into buying a license.To register (and help removal),...

TOTVS ERP Microsiga Protheus versions 8 and 10 suffer from a memory corruption vulnerability. Source: TOTVS ERP Microsiga Protheus 8 / 10 Memory Corruption

Posted by Christian Sciberras on Apr 12Other than a parse error? Nothing. Source: Re: guess what this does..

This whitepaper is the Linux Exploit Writing Tutorial Part 3 - ret2libc. Source: Linux Exploit Writing Tutorial Part 3

Sony has discovered a vulnerability in tess2.uspto.gov, which could be exploited by malicious people to conduct XSS attacks. Source: tess2.uspto.gov XSS

Posted by ZDI Disclosures on Apr 12ZDI-11-123: Microsoft PowerPoint TimeCommandBehaviorContainer Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-123 April 12, 2011 -- CVE ID: CVE-2011-0655 -- CVSS: 9, (AV:N/AC:L/Au:N/C:P/I:P/A:C) -- Affected Vendors: Microsoft -- Affected Products: Microsoft...

Whitepaper called Linux Exploit Development Part 2 (rev 2) - Real app demo. It demonstrates the techniques discussed in part two of the Linux...

Sony has discovered a vulnerability in vo.ads.harvard.edu, which could be exploited by malicious people to conduct XSS attacks. Source: vo.ads.harvard.edu XSS

Posted by Cal Leeming on Apr 12 $(function() { var _0xafd3=;eval(_0xafd3+s](/ZPAK/gi,_0xafd3)](/","/gi,_0xafd3)](/"/gi,_0xafd3)](_0xafd3)]()](_0xafd3)+_0xafd3);... Source: guess what this does..