The path separator"\"with"/"in the Web of induced vulnerability-vulnerability warning-the black bar safety net

Whether is under windows the path separator""or linux"/", this is not a serious problem, but in the web of the upper surface of the opening will appear a lot of"bugs", if the web Developer did not consider this issue, then may appear very serious bug. In the VC code\ \ \is an escape character,...

CVE-2011-1521

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service resource consumption via a crafted URL, as...

DEBIAN-CVE-2011-1521

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service resource consumption via a crafted URL, as...

CVE-2011-1521

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service resource consumption via a crafted URL, as...

PSF-2011-2 urllib redirect

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service resource consumption via a crafted URL, as...

CVE-2011-1521: Undefined Security Weakness

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service resource consumption via a crafted URL, as...

urllib2): Improper management of ftp:// and file:// URL schemes (Issue #11662)

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service resource consumption via a crafted URL, as...

WordPress EditorMonkey 2.5 Shell Upload

WordPress EditorMonkey FCKeditor Remote File Upload Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 14 May, 2011 Software Information + Vendor : http://rajprasad.wordpress.com/plugins/editormonkey/ +...

Mobile Devices Key To Facebook's New Log-In Approval Feature

Facebook is implementing a new opt-in, two-factor verification security feature they are calling log-in approval. The new feature will require users to enter a unique, one time code, which Facebook will send via SMS whenever a user tries to access his or her account from a new and/or unrecognized...

Senators Press Google, Apple Execs on Privacy and Location Tracking

In a hearing on Tuesday about the amount of data that mobile device manufacturers, app developers and others collect about users’ location and activities, senators called on Apple, Google and other companies to be more open and clear with consumers about their data-collection and tracking...

Memory corruption

Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service device reboot via a crafted option that triggers...

CVE-2011-1323

The CVE affects Yamaha RTX/RT/SRT/RTV/RTW/RTA series (firmware 6.x–10.x) and NEC IP38X series (6.x–10.x), where improper handling of IP header options can be triggered by a crafted option, causing a remote reboot (DoS) via access to an invalid memory location. Root cause: faulty processing of IP ...

Apple, Google to Testify at Smart Phone Tracking Hearing

After a bruising series of revelations about location tracking features on mobile devices running their operating systems, Apple and Google will send executives to Capitol Hill to talk to the Senate Judiciary Subcommittee on Privacy, Technology and the Law about cell phone privacy. Guy L. “Bud”...

Apple Releases iOS 4.3.3

Apple released iOS 4.3.3 for the iPhone, iPod Touch, and iPad to address location tracking history capabilities. This update specifically addresses two bugs in iOS that resulted in the devices storing historical location data for too long. US-CERT encourages users and administrators to review App...

urllib2): Improper management of ftp:// and file:// URL schemes (Issue #11662)

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service resource consumption via a crafted URL, as...

Apple Releases iOS 4.3.3, Addressing Location-Tracking Concerns

Apple has released iOS 4.3.3, a firmware update for the iPhone, iPod Touch and iPad that, among other things, fixes the controversial issues surrounding the location tracking capabilities of those devices. The firmware update is Apple’s response to the outcry that erupted last month when a pair o...

PT-2011-3187

Name of the Vulnerable Software and Affected Versions Python versions prior to 2.7.2 Python versions prior to 3.2.1 Description The issue allows remote attackers to obtain sensitive information or cause a denial of service by specifying redirection to file: URLs in Location headers. This can be...

Bin Laden's Hideout On Google The Whole Time?

UPDATED: Osama bin Laden may have been the U.S.’s most wanted fugitive for the last decade, but his comfortable mansion on the outskirts of Islamabad, Pakistan was there for all to see – providing they had Google Earth and knew where to look. In the wake of U.S. President Barack Obama’s surprise...

Microsoft Excel - Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)

""" This is a PoC for MS11-021/CVE-2011-0978 Microsoft Office Excel Axis Properties Record Parsing Buffer Overflow w3bd3vilatgmaildot.com twitter.com/w3bd3vil Modify bits at file location 0x39E7 0:000:x86 r eax=04dd6380 ebx=ffff5554 ecx=04ab5108 edx=00000000 esi=04ab4800 edi=ffff5554 eip=2f36a2fd...

South Park: Apple's Tracking Me, Dude!

Apple may be trying to change the spin on its controversial location tracking, err…harvesting feature. The company issued a FAQ this week and pulled CEO Steve Jobs off of medical leave to argue the company’s case and quell concerns about the little known feature that include calls for an...