CVE-2009-3271

Apple Safari on iPhone OS 3.0.1 is reported vulnerable to a remote denial-of-service via a long tel: URL in the SRC attribute of an IFRAME element. The underlying issue is the handling of oversized tel: URIs in IFRAME SRCs, which can cause the browser to crash. The CVE is CVE-2009-3271. Affected ...

CVE-2009-3271: Improper Input Validation

Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service application crash via a long tel: URL in the SRC attribute of an IFRAME element...

Break IE security restrict access to the iframe sub-frame within the local cookie-vulnerability warning-the black bar safety net

Source: aullik5 Today this article is mainly to say the following so a few things: 1. iframe limitations 2. Break the iframe to get the local cookie ideas 3. Use Cross Iframe Trick breakthrough iframe security restrictions My test environment is: IE 7 7.0.5730.13 All of the following content all...

Apple Safari IPhone (using tel:) Remote Crash Exploit

No description provided by source. Apple Safari Iphone Crash using tel: Found by cloud : cloudatmadpowahdotorg http://blog.madpowah.org Tested on Iphone 3G, OS 3.0.1 Launch Safari, enter the page and after a few seconds Safari will crash and black screen will appear Exploit: ?php settimelimit0;...

Parsing JS Trojan attack with anti-bug warning-the black bar safety net

Web hang horse has now become hackers launched cyber attacks the main one way, and therefore protect against Web security threats, it is particularly important, this article will introduce some of the common JS hung it to the phenomenon and how to respond. Trojan has always been a hack of adept...

55,000 Hacked Sites Serving Malware Cocktail

Security researchers are raising an alarm for a potent malware cocktail — backdoor Trojans and password stealers — being pushed to Windows users from about 55,000 hacked Web sites. According to Mary Landesman, a researcher in ScanSafe’s security threat alert team, the cybercriminals have embedded...

the swf calls the net horse-vulnerability warning-the black bar safety net

The afternoon of research about the swf calling network horse, do not understand the swf yeah, the package pure script class net horse no problem, the package of the overflow type net horse will have problems. Simply or directly call the iframe, so it is a bit boring, really 脱裤子放屁 Yeah, but still...

Examples teach you to understand the net horse-vulnerability warning-the black bar safety net

The main code is as follows: SCRIPT language=”JavaScript” window. status=”completed”; evalfunctionp,a,c,k,e,de=functioncreturn c. toString3 6;if!”. replace/^/,Stringwhilec–dc. toStringa=kc||c. toStringak=functionereturn de;e=functionreturn’\\w+’;c=1;whilec–ifkcp=p. replacenew...

Linea 21 1.2.1 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Linea 21 version 1.2.1 search XSS, Iframe Injection and Redirect Vulnerability + + Download : http://www.linea21.com/index.php/Actualites + + Discovered...

Elgg Cross Site Scripting / Request Forgery

CMS Elgg uploading to a host.Save as cookie.php +Exploit: ------- 1 Register in The SIte 2 add to the Template The victim would be anyone who comes to your blog. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

elgg - Cross-Site Scripting Cross-Site Request Forgery Change Password

elgg - Cross-Site Scripting Cross-Site Request Forgery Change Password + CMS Elgg uploading to a host.Save as cookie.php +Exploit: ------- 1 Register in The SIte 2 add to the Template The victim would be anyone who comes to your blog...

elgg - Cross-Site Scripting / Cross-Site Request Forgery / Change Password

CMS Elgg uploading to a host.Save as cookie.php +Exploit: ------- 1 Register in The SIte 2 add to the Template The victim would be anyone who comes to your blog. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

iPhone Safari Phone Auto Dial

Released since Apple published the iPhone 3.0 security fixes. Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Apple www.apple.com Device: iPhone 3G iPhone 1st Gen Firmware: 2.1 possible earlier versions Device Type: smart phone Subsystems: Safari and mobile telephony...

CMS buzz - Cross-Site Scripting Password Change HTML Injection

CMS buzz - Cross-Site Scripting Password Change HTML Injection + CMS Buzz xss/Change PasswordMultiple Remote Vulnerabilities + Discovered By ThE g0bL!N + Vendor:cmsbuzz.com + Note : If you are The S3r!0uS I say To Fuck you Because You are Hacked Site Of My Best Friends dz-boys.com +...

CVE-2009-2065

Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that...

CVE-2009-2064

Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe...

Design/Logic Flaw

Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site,...

CVE-2009-2067

Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related...

vBulletin Radio and TV Player AddOn - HTML Injection

vBulletin Radio and TV Player AddOn - HTML Injection vBulletin Radio and TV Player Add-On all version - XSS , Iframe injection and Redirect Vulnerability About:- Radio and TV Add-on will add a radio and TV library to your forum. Features:- - Users can add / delete / edit own stations For more inf...

vBulletin Radio and TV Player AddOn - HTML Injection

vBulletin Radio and TV Player Add-On all version - XSS , Iframe injection and Redirect Vulnerability About:- Radio and TV Add-on will add a radio and TV library to your forum. Features:- - Users can add / delete / edit own stations For more info about this plugin See -...