Cross-domain data theft via script redirect error message — Mozilla

Google security researcher Chris Evans reported that a website could access a limited amount of data from a different domain by loading a same-domain JavaScript URL which redirects to an off-domain target resource containing data which is not parsable as JavaScript. Upon attempting to load the da...

Flatnuke 3 Cookie Grabber Exploit

titolo" name="name" type="text" / Immagine File -- "alert69%3B...

RevSense 1.0 - SQL Injection Cross-Site Scripting

RevSense 1.0 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/32624/info RevSense is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Update Protections against Recent Malware Threats (17-Nov-08)

Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...

Image stealing via canvas and HTTP redirect — Mozilla

Mozilla developer Georgi Guninski reported that the canvas element could be used in conjunction with an HTTP redirect to bypass same-origin restrictions and gain access to the content in arbitrary images from other domains. This vulnerability could be used by an attacker to steal private...

Update Protections against Recent Malware Threats (3-Aug-08)

Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...

viart-sql.txt

GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injection in ViArt that allows for an attacker to...

Update Protections against Recent Malware Threats (3-Jul-08)

Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...

ACollab SQL injection vulnerability

Overview ACollab is open source web-based groupware and is also available as an add-on for e-learning content management system ATutor. ACollab contains a SQL injection vulnerability. Impact A remote attacker could modify the database contents or steal data. An attacker could also bypass...

Owl SQL injection vulnerability

Overview Owl, an open source document management and publishing system, contains an SQL injection vulnerability. Impact A remote attacker may modify or steal the database contents. Solution None...

EJ3 BlackBook 1.0 - footer.php Multiple Cross-Site Scripting Vulnerabilities

EJ3 BlackBook 1.0 - footer.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29015/info BlackBook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues...

efestechvideo-sql.txt

$Author : RMx $Mail : [email protected] $Homepage : Coderx.org $Script name :Efestech video v5.0 $Script download :http://www.aspindir.com/goster/4835 $Script Sales : Free $Thanks : Ex-47 , TRIP $Vulnerable file : Default.asp $Vulnerable code : id parameters cannot filter... $Exploit :...

blackboard-xss.txt

//////////////////////////////////////////////////////////////////////////////// //Note: //The full version of this report in pdf format available at my blog: //http://www.secskill.wordpress.com // OR : //http://www.scribd.com/doc/2363025/Blackboard-Academic-Suite-Multiple-XSS-Vulnerabilities-...

Update Protections against Recent Malware Threats (26-Mar-08)

Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...

mambosimple-sql.txt

Mambo Simpleboard Forum Component 1.0.3 Stable comsimpleboard Author: it's my, Scipio, xcedz Home page: http://www.antichat.ru Dork: inurl:"index.php?option=comsimpleboard" Exploit:...

CiscoCallManager_sql_07_016.txt

Portcullis Security Advisory 07016 Vulnerable System: Cisco Unified CallManager Vulnerability Title: Multiple SQL Injections In User And Admin Interface Vulnerability discovery and development: Nico Leidecker of Portcullis Computer Security Ltd discovered this vulnerability. Further research was...

MeGaCheatZ 1.1 - Multiple SQL Injections

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...

Update Protections against Recent Malware Threats (18-Dec-07)

Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : firefox vulnerabilities (USN-546-1)

It was discovered that Firefox incorrectly associated redirected sites as the origin of 'jar:' contents. A malicious website could exploit this to modify or steal confidential data such as passwords from other web sites. CVE-2007-5947 Various flaws were discovered in the layout and JavaScript...

Ubuntu 6.06 LTS / 6.10 / 7.04 : firefox vulnerabilities (USN-490-1)

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user's privileges. CVE-2007-3734, CVE-2007-3735 Flaws were discovered in the JavaScript methods addEventListener and setTimeo...