Lucene search
+L

9525 matches found

Packet Storm
Packet Storm
added 2011/10/17 12:00 a.m.33 views

Dominant Creature BBG/RPG Browser Game Cross Site Scripting

=================================================================================== Dominant Creature BBG/RPG browser game XSS vulnerabilities =================================================================================== Exploit Title: Dominant Creature BBG/RPG browser game XSS...

7.4AI score
SaveExploits0
NVD
NVD
added 2011/10/14 10:55 a.m.19 views

CVE-2011-3246

CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...

5CVSS7.7AI score0.02997EPSS
SaveExploits1References11
Prion
Prion
added 2011/10/14 10:55 a.m.24 views

Code injection

CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...

5CVSS6.4AI score0.02997EPSS
SaveExploits1References11Affected Software3
Cvelist
Cvelist
added 2011/10/14 10:00 a.m.38 views

CVE-2011-3242

The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie...

6AI score0.01448EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2011/10/14 10:00 a.m.42 views

CVE-2011-3246

CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...

6.7AI score0.02997EPSS
SaveExploits1References11
NVD
NVD
added 2011/10/12 2:52 a.m.20 views

CVE-2011-2012

Microsoft Forefront Unified Access Gateway UAG 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service IIS outage via unspecified network traffic, aka "Null Session Cookie Crash."...

5CVSS6.6AI score0.16588EPSS
SaveExploits0References3
CVE
CVE
added 2011/10/12 1:00 a.m.54 views

CVE-2011-2012

Microsoft Forefront UAG 2010 Gold/Update 1/2 and SP1 is affected by CVE-2011-2012 due to improper validation of session cookies, enabling a remote attacker to cause a denial of service (IIS outage) by sending unspecified network traffic. This is part of the MS11-079 set of vulnerabilities and is ...

5CVSS6.7AI score0.16588EPSS
SaveExploits0References3Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2011/10/11 12:00 a.m.47 views

JVN#89764731: WEB FORUM vulnerable to cross-site scripting

WEB FORUM provided by KENT-WEB is a bulletin board software. WEB FORUM contains a vulnerability in handling cookies, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according ...

4.3CVSS5.8AI score0.0167EPSS
SaveExploits0
Exploit DB
Exploit DB
added 2011/10/09 12:00 a.m.21 views

MyBB 1.6.4 - Backdoor Access (Metasploit)

$Id: mybbbackdoor.rb 13838 2011-10-09 03:22:07Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

5.3AI score
SaveExploits0
Metasploit
Metasploit
added 2011/10/07 9:02 p.m.49 views

Windows Gather Internet Explorer User Data Enumeration

This module will collect history, cookies, and credentials from either HTTP auth passwords, or saved form passwords found in auto-complete in Internet Explorer. The ability to gather credentials is only supported for versions of IE =7, while history and cookies can be extracted for all versions...

10AI score
SaveExploits0
The Hacker News
The Hacker News
added 2011/10/07 1:27 a.m.14 views

WebCookiesSniffer - New cookies sniffer/viewer utility

WebCookiesSniffer - New cookies sniffer/viewer utility WebCookiesSniffer is a new packet sniffer utility that captures all web site cookies sent between the web browser and the web server and displays them in a simple cookies table. The upper pane of WebCookiesSniffer displays the cookie string...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2011/10/07 1:27 a.m.9 views

WebCookiesSniffer - New cookies sniffer/viewer utility

WebCookiesSniffer - New cookies sniffer/viewer utility WebCookiesSniffer is a new packet sniffer utility that captures all web site cookies sent between the web browser and the web server and displays them in a simple cookies table. The upper pane of WebCookiesSniffer displays the cookie string...

7.2AI score
SaveExploits0
ThreatPost
ThreatPost
added 2011/10/06 12:24 p.m.22 views

Evercookie Creator: FTC Cookie Inquiry Would Be Too Narrow

Samy Kamkar has always been prescient. He first gained notoriety by showing how nascent social networks like MySpace could be used to spread malware rapidly among a population of millions now billions of users. His worm for MySpace, dubbed the ‘Samy Worm’ earned him a visit from law enforcement...

7AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2011/10/04 12:00 a.m.122 views

OpenSSH < 2.9.9 / 2.9p2 Symbolic Link 'cookies' File Removal

According to the banner, OpenSSH earlier than 2.9.9 / 2.9p2 is running on the remote host. Such versions contain an arbitrary file deletion vulnerability. Due to insecure handling of temporary files, a local attacker can cause sshd to delete any file it can access named 'cookies'. C Tenable, Inc...

7.2CVSS7.9AI score0.00622EPSS
SaveExploits1References4
myhack58
myhack58
added 2011/10/04 12:00 a.m.28 views

Grand network SMS ddos attack vulnerabilities and fixes-vulnerability warning-the black bar safety net

Brief description: Grand online presence SMSddosattack vulnerability Detailed description: Grand online Forgot Password at will to the phone to send verification code, The URL: http://pwd.sdo.com/ptinfo/safecenter/getpwd/ChgPwdStepOldPwd.aspx?showbindmobile=1 Phone numbers can be arbitrarily...

0.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2011/10/03 12:00 a.m.11 views

phpMyAdmin 3.4.x < 3.4.5 XSS (PMASA-2011-14)

The version of phpMyAdmin on the remote host is 3.4.x prior to 3.4.5. This version is affected by multiple cross-site scripting vulnerabilities: - The data used in the row content display after inline editing is not properly sanitized before it is passed back to the browser. - The data passed in ...

5.8AI score
SaveExploits0References1
The Hacker News
The Hacker News
added 2011/09/30 5:23 p.m.11 views

Disable Social Networks From Tracking You with The Priv3 Firefox Extension

Disable Social Networks From Tracking You with The Priv3 Firefox Extension In Earlier Post we Inform our readers about "Facebook track your cookies even after logout". Did you know that social networking sites like Facebook, Google+, and Twitter can track your visits to any web page that uses the...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2011/09/26 7:02 a.m.12 views

Facebook track your cookies even after logout !

Facebook track your cookies even after logout ! According to Australian technologist Nik Cubrilovic: 'Logging out of Facebook is not enough.' He added, Even after you are logged out, Facebook is able to track your browser's page every time you visit a website. He wrote in his blog 'With my browse...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2011/09/26 7:02 a.m.12 views

Facebook track your cookies even after logout !

Facebook track your cookies even after logout ! According to Australian technologist Nik Cubrilovic: 'Logging out of Facebook is not enough.' He added, Even after you are logged out, Facebook is able to track your browser's page every time you visit a website. He wrote in his blog 'With my browse...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2011/09/23 12:00 a.m.11 views

phpMyAdmin 3.4.x < 3.4.5 Multiple XSS (PMASA-2011-14)

Binary data 6026.prm...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder