Design/Logic Flaw

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."...

CVE-2008-0240

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."...

CVE-2008-0240

Sun Java System Identity Manager (versions 6.0 SP1–SP3, 7.0, 7.1) is affected by a vulnerability in /idm/help/index.jsp where the helpUrl parameter can be abused to inject frames from arbitrary sites, enabling phishing-like framing attacks. This aligns with the public CVE-2008-0240 description of...

PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager

PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager Vulnerability found: 11th June 2007 Vendor informed: 18th June 2007 Severity: Medium Product description: "Identity Manager allows customers to...

Sun Identity Manager multiple security vulnerabilities

Crossite scripting, frame injection, crossite request forgery...

MS Windows Media Player 10 Plugin Overflow Exploit (MS06-006)

No description provided by source. HTML HEAD TITLEWMP Plugin EMBED Exploit/TITLE SCRIPT // Windows Media Player Plug-In EMBED Overflow Universal Exploit MS06-006 // By Matthew Murphy [email protected] // // DISCLAIMER: // // This exploit code is intended only as a demonstration tool for...

Microsoft IE已删除帧对象访问拒绝服务漏洞

BUGTRAQ ID: 19228 Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理对象引用时存在拒绝服务漏洞，远程攻击者可能利用此漏洞拒绝浏览器崩溃。 如果用户受骗访问了已删除帧中的对象属性的话，就会触发空指针引用，导致IE崩溃。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Linux Kernel 2.6.22 - IPv6 Hop-By-Hop Header Remote Denial of Service

/ source: https://www.securityfocus.com/bid/26943/info The Linux kernel is prone to a remote denial-of-service vulnerability because it fails to adequately validate specially crafted IPv6 'Hop-By-Hop' headers. Attackers can exploit this issue to cause a kernel panic, denying service to legitimate...

SuSE 10 Security Update : Security update for (ZYPP Patch Number 2088)

This security update brings Mozilla Firefox to version 1.5.0.7. More details can be found on: http://www.mozilla.org/projects/security/known-vulnerabiliti es.html It includes fixes to the following security problems : - Crashes with evidence of memory corruption MFSA 2006-63 / CVE-2006-4570:...

Unfixed Frame Redirect vulnerability at www.hit-al.com

Security researcher st@rext, has submitted on 12/10/2007 a Frame Redirect vulnerability affecting www.hit-al.com, which at the time of submission ranked 60536 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is currently unfixed. ...

Unfixed Frame Redirect vulnerability at www.projectx2002.org

Security researcher APS, has submitted on 12/06/2007 a Frame Redirect vulnerability affecting www.projectx2002.org, which at the time of submission ranked 1298413 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...

Unfixed Frame Redirect vulnerability at www.projectx2002.org

Security researcher APS, has submitted on 12/06/2007 a Frame Redirect vulnerability affecting www.projectx2002.org, which at the time of submission ranked 1298413 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...

kernel ieee80211 off-by-two integer underflow

Integer underflow in the ieee80211rx function in net/ieee80211/ieee80211rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service crash via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211STYPEQOSDATA flag is set, aka an "off-by-two...

Unfixed Frame Redirect vulnerability at www.regalcinemas.com

Security researcher MrSlinky, has submitted on 26/11/2007 a Frame Redirect vulnerability affecting www.regalcinemas.com, which at the time of submission ranked 52561 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

tcpdump denial of service

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

CVE-2007-4698

Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to conduct cross-site scripting XSS attacks by causing JavaScript events to be associated with the wrong frame...

Cross site scripting

Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to conduct cross-site scripting XSS attacks by causing JavaScript events to be associated with the wrong frame...

tcpdump denial of service

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3933)

This update brings Mozilla Firefox to security update version 2.0.0.5 Following security problems were fixed : - MFSA 2007-18: Crashes with evidence of memory corruption The usual collection of stability fixes for crashes that look suspicious but haven't been proven to be exploitable. 25 were in...

openSUSE 10 Security Update : seamonkey (seamonkey-3986)

This update fixes several security issues in Mozilla SeaMonkey 1.0.9. Following security problems were fixed : - MFSA 2007-18: Crashes with evidence of memory corruption The usual collection of stability fixes for crashes that look suspicious but haven't been proven to be exploitable. 25 were in...