CVE-2009-2841

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

CVE-2009-2841

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

CVE-2009-2841

CVE-2009-2841 affects WebKit’s HTMLMediaElement: loadResource in WebCore (WebKit before r49480) used by Safari before 4.0.4 on macOS. The vulnerability arises because HTML5 media elements with external URLs do not perform the expected callbacks, enabling a remote attacker to trigger sub-resource ...

CVE-2009-2841

Removed by vendor...

CVE-2009-2841: Undefined Security Weakness

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

Multiple Vendor Telnet Client env_opt_add Buffer Overflow (CVE-2005-0468)

The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...

Multiple Vendor Telnet Client LINEMODE Buffer Overflow (CVE-2005-0469)

The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...

CVE-2009-3156: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with "use date tools" or "administer content types" privileges, to inject arbitrary web script or HTML via a "Content type label" field...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2007:0167)

java-1.5.0-ibm packages that correct a security issue are available for Red Hat Enterprise Linux 5 Supplementary and Enterprise Linux 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. IBM's 1.5.0 Java release includes the IBM Java 2...

ShaadiClone 2.0 (addadminmembercode.php) Add Admin Exploit

No description provided by source. !-- » ShaadiClone v2.0 addadminmembercode.php Add Admin » Live Demo: http://www.shaadiclone.com/demo/index.php » By: x.CJP.x » Greeting : His0k4,Sub-Zero,Bibi-info,Aach2006,Youness,Simitch,Halimz,B0ub0u,Mun3im.. := » Note:Walleh Ghir 3la Jalek Lakhater W3adtek T...

PowerCHM 5.7 (Long URL) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ================================================ PowerCHM 5.7 Long URL Local Stack Overflow PoC ================================================ PowerCHM 5.7 Long url Local stack overflow SEH POC found By SuB-ZeRo email protected thnaks to hisok4...

PowerCHM 5.7 - Long URL Local Stack Overflow (PoC)

PowerCHM 5.7 Long url Local stack overflow SEH POC found By SuB-ZeRo [email protected] thnaks to hisok4 Greetz:All friends and muslims HackeRs secdz.com var crash = "http://"; for i=0;iB00M!'; milw0rm.com 2009-04-14...

Mandriva Update for kernel MDKA-2007:036 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKA-2007:036 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for kernel MDKA-2007:036 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKA-2007:036 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

FreeBSD : perl -- Directory Permissions Race Condition (4a99d61c-f23a-11dd-9f55-0030843d3802)

Secunia reports : Paul Szabo has reported a vulnerability in Perl File::Path::rmtree, which potentially can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to a race condition in the way File::Path::rmtree handles directory permissions when...

Click And Email SQL Injection

Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : Evils-dz & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : http://icash.ch --------------------------------------------------------- Exploit Auth Bypass...

ClickEmail - Authentication Bypass

ClickEmail - Authentication Bypass Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : Evils-dz & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : http://icash.ch...

Code injection

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0169

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0169: Undefined Security Weakness

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...