Vulnerable Minds Pulse RSS


Pulse is the need to know information about the Internet threat landscape. Aggregating and analyzing the top vulnerability and malicious code advisories from commercial, government, education, and open source sources Pulse provides a complete picture of today's vulnerabilities that may become tomorrows exploits. Questions, concerns, suggestions: pulse [at] vulnerableminds [dot] com

Pulse was created and maintained by Vulnerable Minds.

home | blog

 

 



Archive

Sep
28th
Mon
permalink
Windows 7 Launch Party hosted by JTTF and Andrew Auernheimer Posted by David Kernell rubico on Sep 27


Hello.

My name is Gary McKinnon. I’m from the Joint Terrorism Task Force.

I create terrorism by tricking dumb people. Further, we fulfill our goal of…
Sep
26th
Sat
permalink
Drupal Bibliography 6.x-1.6 XSS Vuln Posted by Black Packeteer on Sep 25


The Drupal Bibliography Module 6.x-1.6 (http://drupal.org/project/biblio) contains a cross site scripting vulnerability because it fails to sanitize the…
permalink
Attacks via redirectors Posted by MustLive on Sep 25


Hello participants of Full-Disclosure!

In case if you don’t read WASC Mailing List, where I often make announcements of my articles (or even post articles directly…
Sep
25th
Fri
permalink
CFS 09October 5-6 Updated SpeakerSession List Posted by Trish M on Sep 23

       

      The Computer Forensics Show is the “Don’t miss” event of the year for all Litigation, Accounting and IT Professionals!

      Register Now

…
permalink
PakBugs.com Aftermath. Posted by Catch Them on Sep 24

Here are some clarifications after doing considerable reading on the internet about the PakBugs.com Hack/Crack or whatever you want to call it. I have no group, i…
permalink
Cross-Site Scripting vulnerability in E107 Posted by MustLive on Sep 24


Hello Full-Disclosure!

I want to warn you about Cross-Site Scripting vulnerability in E107. Which I found at 31.01.2009 and disclosed recently.

XSS: At page for…
Sep
23rd
Wed
permalink
Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation Posted by evil fingers on Sep 23


Source:
https://www.evilfingers.com/advisory/Advisory/Avast_aswMon2.sys_kernel_memory_corruption_and_Local_Privilege_Escalation.php

—————-[Avast…
permalink
Audited by Netcraft... any feedback Posted by jk3380_at_naida.org on Sep 23

Hi

I’m looking for feedback on the results and worthliness of the “Audited by Netcraft” service as an alternative of manye self appointed…
permalink
Microsoft Security Advisory (975497): Vulnerabilities in SMB Could Allow Remote Code Execution

Revision Note: V1.2 (September 23, 2009): Clarified the FAQ, What is Server Message Block Version 2 (SMBv2)? Also clarified the impact of the workaround, Disable SMB v2.Summary: Security Advisory
Sep
21st
Mon
permalink
Winplot (.wp2 File) Local Buffer Overflow Exploit
permalink
cP Creator 2.7.1 (Cookie tickets) Remote SQL Injection Exploit
permalink
CMScontrol 7.x (index.php id_menu) SQL Injection Vulnerability
permalink
ProdLer <= 2.0 (prodler.class.php sPath) RFI Vulnerability
permalink
Loggix Project <= 9.4.5 Multiple Remote File Inclusion Vulnerabilities
permalink
WX Guest Book 1.1.208 (SQL/XSS) Multiple Remote Vulnerabilities