CVE-2007-3439

The CVE concerns the Snom 320 SIP Phone (snom320 linux 3.25, snom320-SIP 6.2.3, snom320 jffs23.36). The vulnerability allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800. The root cause and exact exploitati...

Design/Logic Flaw

corefoundation.dll in Apple Safari 3.0.1 552.12.2 for Windows allows remote attackers to cause a denial of service crash via certain forms that trigger errors related to History, possibly involving multiple form fields with the same name...

CVE-2007-3284

corefoundation.dll in Apple Safari 3.0.1 552.12.2 for Windows allows remote attackers to cause a denial of service crash via certain forms that trigger errors related to History, possibly involving multiple form fields with the same name...

CVE-2007-3284: Undefined Security Weakness

corefoundation.dll in Apple Safari 3.0.1 552.12.2 for Windows allows remote attackers to cause a denial of service crash via certain forms that trigger errors related to History, possibly involving multiple form fields with the same name...

CVE-2007-3087

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

Information disclosure

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

CVE-2007-3087

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

CVE-2007-3087: Undefined Security Weakness

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

Unfixed XSS vulnerability at www.wisconsinhistory.org

Security researcher Hotpockets, has submitted on 29/05/2007 a cross-site-scripting XSS vulnerability affecting www.wisconsinhistory.org, which at the time of submission ranked 191658 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/05/2007. I...

Unfixed XSS vulnerability at dbs.ohiohistory.org

Security researcher MaXWeL, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting dbs.ohiohistory.org, which at the time of submission ranked 322641 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/03/2007. It is...

[Full-disclosure] Stealing Browser History Without Using JavaScript

In case anyone is interested, I was able to port the old CSS history hacking stuff that Jeremiah Grossman originally found to a version that does not require JavaScript to fire using images and conditional logic built into CSS using a:visited and display attributes. It works in both IE7.0 and...

CVE-2007-1116

The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history...

Input validation

The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history...

CVE-2007-1116

The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history...

CVE-2007-1116: Exposure of Sensitive Information to an Unauthorized Actor

The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history...

Firefox Cache Hack - Firefox History Hack redux

http://www.gnucitizen.org/projects/hscan-redux/ Inspired by Michal Zalewski recent Firefox bug hunt, I decided to give it a go and see what I can come up with. We all know how vulnerable Firefox and other browsers are. This is the reason why I am not particularly interested in finding specific...

CVE-2006-6574

Mantis before 1.1.0a2 does not implement per-item access control for Issue History Bug History, which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field...

CVE-2006-6574: Undefined Security Weakness

Mantis before 1.1.0a2 does not implement per-item access control for Issue History Bug History, which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field...

CVE-2004-2666: Undefined Security Weakness

Mantis before 20041016 provides a complete Issue History Bug History in the web interface regardless of viewhistorythreshold, which allows remote attackers to obtain sensitive information private bug details by visiting a bug's web page...

SQL SERVER security risks--triggers-vulnerability warning-the black bar safety net

| This article is dedicated to the cross I of the development program teacher-XI'an ZHAOLONG of the week the teacher, and learning together AT2Q6101 of classmates. Trigger permissions and ownership CREATE TRIGGER permissions default to the definition of the trigger table owner, members of the...