Authorization

Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the provenance of thi...

PT-2010-3291 · Pidgin +1 · Pidgin +1

Name of the Vulnerable Software and Affected Versions: Pidgin versions prior to 2.7.0 Description: The issue allows remote authenticated users to cause a denial of service, resulting in a NULL pointer dereference and application crash. This is achieved by sending a custom emoticon in a malformed...

Mozilla Foundation Security Advisory 2010-10

Mozilla Foundation Security Advisory 2010-10 Title: XSS via plugins and unprotected Location object Impact: High Announced: March 23, 2010 Reporter: Blake Kaplan Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Mozilla developer Blake Kaplan reported that the window.location object was...

Joomla! Component JInventory 1.23.02 - Local File Inclusion

--------------------------------------------------------------------------------- Joomla Component JInventory Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : [email protected] Date ...

Joomla! Component JInventory 1.23.02 - Local File Inclusion

Joomla! Component JInventory 1.23.02 - Local File Inclusion --------------------------------------------------------------------------------- Joomla Component JInventory Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s...

Mandriva Update for kernel MDVSA-2010:066 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:066 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

XSS via plugins and unprotected Location object — Mozilla

Mozilla developer Blake Kaplan reported that the window.location object was made a normal overridable JavaScript object in the Firefox 3.6 browser engine Gecko 1.9.2 because new mechanisms were developed to enforce the same-origin policy between windows and frames. This object is unfortunately al...

Koobface Worm Doubles C&C Servers in 48 Hours

Yesterday’s shut down of Troyak-as was definitely good news for the whole IT security community. Seeing cybercriminals getting kicked out from the Internet and then trying to get back inside calls for popcorn and soda. But unfortunately, as some botnets struggle, others stay unaffected: Koobface,...

Core Impact Denial Of Service

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetz to all Darkc0de ,AI, AH,ICW Memebers Shoutz to r45c4l,j4ckh4x0r,silic0n,smith,baltazar,d3hydr8,FB1H2S,...

Core Impact 7.5 Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc =============================================== Core Impact 7.5 Denial of Service Vulnerability =============================================== RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True Test DoS Page...

Core Impact 7.5 - Denial of Service

Core Impact 7.5 - Denial of Service . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetz to all Darkc0de ,AI, AH,ICW Memebers Shoutz to...

BlackBerry Spyware Can Intercept Texts, Email, Track User's Location

A security researcher demonstrated a spyware program at the ShmooCon conference on Sunday that is capable of intercepting and recording text messages, emails, Web traffic and other data sent to and from BlackBerry devices. Tyler Shields, a senior security researcher at Veracode, showed a...

Mozilla Products Necko DNS Information Disclosure Vulnerability (Linux)

The host is installed with Thundebird/Seamonkey and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsneckodnsinfodiscvulnlin.nasl 7273 2017-09-26 11:17:25Z cfischer $ Mozilla Products Necko DNS Information Disclosure Vulnerability Linux Authors: Antu...

Horde IMP Information Disclosure Vulnerability

This host is running Horde IMP and is prone to Information Disclosure vulnerability OpenVAS Vulnerability Test $Id: gbhordeimpinfodiscvuln.nasl 5820 2017-03-31 11:20:49Z cfi $ Horde IMP Information Disclosure Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Mozilla Products Necko DNS Information Disclosure Vulnerability - Linux

Thunderbird/Seamonkey is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Products Necko DNS Information Disclosure Vulnerability (Windows)

The host is installed with Thundebird/Seamonkey and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsneckodnsinfodiscvulnwin.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Necko DNS Information Disclosure Vulnerability Windows Authors: Antu...

Mozilla Products Information Disclosure Vulnerability - Windows

Firefox/Seamonkey is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-0463

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

Cross site request forgery (csrf)

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

Cross site request forgery (csrf)

Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...