CGI Helper 1.0 xss

No description provided by source. CGI Helper 1.00 Download: http://www.sourcecodeonline.com/details/cgihelper.html Discovered by: Paulo Santos Contact: [email protected] Blog: http://infocampo.wordpress.com The script CGI Helper 1.00 is vulnerable to XSS. Example:...

New attack class exploits intranet weaknesses

A security researcher has developed an interesting new class of attacks that exploit the problems caused by organizations using non-routable IP space on their internal networks, including one attack that compromises VPN users through the use of a persistent JavaScript backdoor. The attacks rely o...

DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Denial of Service уязвимостях в браузерах Mozilla Firefox, Internet Explorer, Opera та Google Chrome. Данную атаку я назвал DoS через ифреймы DoS via iframes attack. И она относится к типу DoS http://websecurity.com.ua/2550/ через потребление...

Character Encoding Inheritance in iframes Can Enable Cross-Site Scripting

Pages displayed inside an iframe will inherit the character encodingof the parent page, unless they specify their own character encoding.A malicious page that uses the UTF-7 character encoding can includeother sites, for example inside iframes. This can be exploited toperform cross-site scripting...

CVE-2008-4582

Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly identify the context of Windows .url shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive...

A web Trojan samples to obtain a simple process-vulnerability warning-the black bar safety net

The morning our server is hanging Horse, the analysis of the next, by the step to write out! Share, nothing technical content, the master can skip! Yesterday evening found the Trojan to do a simple analysis, the Trojan path is: http://www.. com/ma/web.htm Think of a way to get its source code, it...

USN-447-1: KDE library vulnerabilities

It was discovered that Konqueror did not correctly handle iframes from JavaScript. If a user were tricked into visiting a malicious website, Konqueror could crash, resulting in a denial of service. CVE-2007-1308 A flaw was discovered in how Konqueror handled PASV FTP responses. If a user were...

Opera Web Browser 7 - IFRAME Zone Restriction Bypass

Opera Web Browser 7 - IFRAME Zone Restriction Bypass source: https://www.securityfocus.com/bid/8887/info A flaw in the Opera web browsers security model has been discovered that could allow an attacker to access a users filesystem within the Local Zone. The problem occurs when handling malformed...