Design/Logic Flaw

The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-2848

The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-2848

The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-2848

CVE-2013-2848 refers to a vulnerability in the XSS Auditor component of Chromium/Google Chrome before 27.0.1453.93, which could allow remote attackers to obtain sensitive information via unspecified vectors. Affected product/versions: Chromium/Chrome up to 27.0.1453.93 (Chromium before 27.0.1453....

CVE-2013-2848

Removed by vendor...

CVE-2013-2848: Exposure of Sensitive Information to an Unauthorized Actor

The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors...

Google Chrome < 25.0.1364.152 Multiple Vulnerabilities

Binary data 6706.pasl...

Information disclosure

The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors...

CVE-2013-0909

Removed by vendor...

CVE-2013-0909

CVE-2013-0909 is a Google Chrome vulnerability where the XSS Auditor could disclose the HTTP Referer information. Affected software is Chrome prior to version 25.0.1364.152. Root cause is described as a flaw in Referer handling within the XSS Auditor, enabling partial confidentiality loss. Accord...

CVE-2013-0909: Exposure of Sensitive Information to an Unauthorized Actor

The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 176882 High CVE-2013-0902: Use-after-free in frame loader. Credit to Chamal de Silva. 176252 High CVE-2013-0903: Use-after-free in browser navigation handling. Credit to "chromium.khalil". 172926 172331 High CVE-2013-0904: Memory corruption in Web Audio. Credit to...

[Scylla] v1 Penetration Testing Tool - Because there's no patch for human stupidity

When there's no technical vulnerability to exploit, you should try to hack what humans left for you, and believe me, this always works. Scylla provides all the power of what a real audit, intrusion, exclusion and analysis tool needs, giving the possibility of scanning misconfiguration bugs...

PCI DSS Compliance : Handling False Positives

Note that per PCI Security Standards Council PCI SSC standards, if the version of the remote software is known to contain flaws, a vulnerability scanner must report it as vulnerable. The scanner must still flag it as vulnerable, even in cases where a workaround or mitigating configuration option ...

Coalfire Expands Dallas Office and Names Kurt Hagerman Managing Director

I am pleased to announce that our Dallas office is growing by leaps and bounds. Leading the charge is Kurt Hagerman, the newly appointed managing director. Kurt will serve more than 60 clients in the Southwest region and oversee Coalfires strategic vision while building new client relationships f...

SMB Session Pipe Auditor

Determine what named pipes are accessible over SMB This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Session Pipe Auditor', 'Description' = 'Determine what named pipes are accessible over SMB...

ExtCalendar 2.0 Beta 2 cross site scripting

Exploit for unknown platform in category web applications =========================================== ExtCalendar 2.0 Beta 2 cross site scripting =========================================== Summary: ExtCalendar is a powerful multi-user web-based calendar application. Features include...

ExtCalendar 2.0 Beta 2 (upgrade.php) Remote XSS Vulnerability

Summary ExtCalendar is a powerful multi-user web-based calendar application. Features include Multi-Languages, Themes, Recurrent Events, Categories, Users and Groups management, Environment and General Settings, Template Configuration, Product Updates. Description ExtCalendar is prone to a...

DCERPC TCP Service Auditor

Determine what DCERPC services are accessible over a TCP port This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DCERPC TCP Service Auditor', 'Description' = 'Determine what DCERPC services are...

CVE-2009-0613

Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 is affected. Remote authenticated Auditor and Report Only users can bypass permission controls and modify system configuration via requests to unspecified JSP pages. CVSS v2 base score is 6.0 (Medium impact) with network attack...