Vulnerable Minds Pulse

Pulse is the need to know information about the Internet threat landscape. Aggregating and analyzing the top vulnerability and malicious code advisories from commercial, government, education, and open source sources Pulse provides a complete picture of today's vulnerabilities that may become tomorrows exploits. Questions, concerns, suggestions: pulse [at] vulnerableminds [dot] com

Pulse was created and maintained by Vulnerable Minds.

home | blog

Archive

Jul
3rd

Fri

Soulseek 157 NS lt 13e amp 156.* Remote Direct Peer Search Code Execution Posted by laurent gaffie on Jul 2

Soulseek 157 NS < 13e & 156.* Remote Peer Search Code Execution
=============================================
- Release date: July 02, 2009
- Discovered by:…

One Click Ownage [White Paper and Scripts] Posted by Ferruh Mavituna on Jul 3

This is a different and more practical approach to get a reverse shell
or code execution in SQL Injections (particularly in MSSQL). The idea
is simple….

phpMyAdmin exploited in masses Posted by John Doe on Jul 3

Hi.

Disclosing out of boredom and for the crawlers to archive.

Keywords: phpmyadmin, web, exploit, zavod, devitalia, mwstudio, szervernet,
infotel, oodrive,…

CVE-2008-3531 Posted by Patroklos Argyroudis on Jul 2

/*
* cve-2008-3531.c — Patroklos Argyroudis, argp at domain census-labs.com
*
* Privilege escalation exploit for the FreeBSD-SA-08:08.nmount
*…

a simple race condition and how youd solve it Posted by Gadi Evron on Jul 03

A friend recently demonstrated on his blog a simple race condition he
encountered. He also challenged folks to solve the problem.

…

Iceman.Ro - new botnet to come Posted by John Doe on Jul 3

18:13 -!- IceMan` [~bb_at_IceMan.ro] has joined #root
18:13 < pink_panther> Hello, friend
18:13 < IceMan`> uh :)))))
18:13 < pink_panther> We were just talking…

conpresso 3.4.8 (detail.php) Remote Blind SQL Injection Vuln

Opial 1.0 (albumid) Remote SQL Injection Vulnerability

Opial 1.0 (Auth Bypass) Remote SQL Injection Vulnerability

Rentventory Multiple Remote SQL Injection Vulnerabilities

Jul
2nd

Thu

quotSo long, and thanks for all the fish!quot Posted by Daniel H. Renner on Jul 01

Hello,

Please excuse the corny subject line, but it is my farewell speech, and I couldn’t help it…

My apologies also if you received two copies of this…

[ISecAuditors Security Advisories] Joomla! lt 1.5.12 Multiple XSS vulnerabilities in HTTP Headers Posted by ISecAuditors Security Advisories on Jul 02

=============================================
INTERNET SECURITY AUDITORS ALERT 2009-007
- Original release date: June 30th, 2009
- Last…

AdminLog 0.5 (valid_login) Authentication Bypass Vulnerability

Sourcefire 3D Sensor & Defense Center 4.8.x Privilege Escalation Vuln

Almnzm 2.0 Remote Blind SQL Injection Exploit