Civil Liberties Groups Wary As Little Known UN Body Seeks Greater Role In Regulating Internet

A little known United Nations body, The International Telecommunications Union ITU, is quietly making moves that would give that U.N. and its 192 member-states increased control of the Internet according to a report in the Wall Street Journal. An internal ITU planning document leaked to the Web...

Hexamail Server 4.4.5 - Persistent Cross-Site Scripting

Title: Hexamail Server meal.txt XSS pop up alert'Hi, what is this?'; root@bt:/ Send email to the victim: root@bt:/ sendemail -f [email protected] -t [email protected] -xu [email protected] \ -xp bob123 -u "Want some meal..?" -o message-file=meal.txt -s mail.example.com Vendor timeline ===============...

Hexamail Server 4.4.5 - Persistent Cross-Site Scripting

Hexamail Server 4.4.5 - Persistent Cross-Site Scripting Title: Hexamail Server meal.txt XSS pop up alert'Hi, what is this?'; root@bt:/ Send email to the victim: root@bt:/ sendemail -f [email protected] -t [email protected] -xu [email protected] \ -xp bob123 -u "Want some meal..?" -o...

Hexamail Server <= 4.4.5 Persistent XSS Vulnerability

Exploit for windows platform in category web applications Title: Hexamail Server meal.txt XSS pop up alert'Hi, what is this?'; email protected:/ Send email to the victim: email protected:/ sendemail -f email protected -t email protected -xu email protected \ -xp...

tomcat: authentication bypass and information disclosure

Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret...

http-icloud-sendmsg NSE Script

Sends a message to a iOS device through the Apple MobileMe web service. The device has to be registered with an Apple ID using the Find My Iphone application. Script Arguments http-icloud-sendmsg.username the Apple ID username http-icloud-sendmsg.sound boolean specifying if a loud sound should be...

Smell You Later

In 2009, the U.S. Department of Homeland Security hatched a plan to use body-odor as a method of identifying individuals. The DHS wanted to establish odor based biometric signatures that could uniquely identify both friend and foe. It then might be able to determine if changes in odor could be us...

Unfixed XSS vulnerability at www.body-building.co.il

Security researcher Codeshift3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.body-building.co.il, which at the time of submission ranked 5083340 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2012. ...

Microsoft Internet Explorer Body元素内存破坏漏洞(MS11-081)

BUGTRAQ ID: 49965 CVE ID: CVE-2011-2000 Microsoft Internet Explorer简称MSIE，是微软公司推出的一款网页浏览器。 IE在处理Body元素时在实现上存在内存破坏漏洞，远程攻击者可利用此漏洞远程代码或导致拒绝服务。 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 临时解决方法：...

GAO Calls Out FDIC For Lax Infosecurity Measures

The Federal Deposit Insurance Corporation FDIC has drawn the ire of the Government Accountability Office GAO following an audit of the FDIC’s system this month. A GAO report called the government corporation out for neglecting to use strong passwords, review user access and encrypt sensitive...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via an id parameter containing a JavaScript onLoad event handler for a BODY element, related to a "tag body" attack. NOTE: this was originally reported as...

CVE-2011-0734

Cross-site scripting XSS vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via an id parameter containing a JavaScript onLoad event handler for a BODY element, related to a "tag body" attack. NOTE: this was originally reported as...

Apple iOS Safari - body alink Remote Crash

----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page and safari will crash. ISRAEL,...

Apple iOS Safari - body alink Remote Crash

Apple iOS Safari - body alink Remote Crash ----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page...

Apple iPhone Safari Denial Of Service

----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page and safari will crash. ISRAEL,...

The OWASP HTTP Post Tool ! Download Now

The OWASP HTTP Post Tool allows you to test your web applications to ensure its stability from HTTP GET and HTTP POST attacks. This tool was programmed by the author to over come the short comings of other HTTP attack tools such as Slowloris and PyLoris. In other words this QA tool was created to...

TheBodyShop.in SQL Injection

Hi Packetstorm Team Sql injection found at The Body Shop which is a global manufacturer and retailer of naturally inspired, ethically produced beauty and cosmetics products. Please refer below for the POC :...

httpd: request header information leak

The apreadrequest function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain...

DEBIAN-CVE-2010-2480

Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting XSS protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element...

PYSEC-2010-1

Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting XSS protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element...