CVE-2009-0072: Undefined Security Weakness

Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service application crash via an onload=screen"" attribute value in a BODY element...

screen_4_0_3_password_bypass_openbsd.txt

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2007-06-03 Affected Software: screen . Password: type ctrl-c $ screen -r Regained acce...

Registry and Group Policy Backdoor found letters-vulnerability warning-the black bar safety net

The measured record. Interested in the binding a bit, maybe get out of the back door placement tips Quiet import regedit /s . reg Method one, cancel sticky keys REG import with. reg Windows Registry Editor Version 5.00 HKEYCURRENTUSER\Control Panel\Accessibility\StickyKeys "Flags"="5 0 6"...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Six Apart Movable Type MT before 4.23 allow remote attackers to inject arbitrary web script or HTML via a 1 MTEntryAuthorUsername, 2 MTAuthorDisplayName, 3 MTEntryAuthorDisplayName, or 4 MTCommenterName field in a Profile View template; a 5...

CVE-2008-5846

Six Apart Movable Type MT before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."...

CVE-2008-5846: Undefined Security Weakness

Six Apart Movable Type MT before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."...

[SECURITY] Fedora 9 Update: totem-2.23.2-9.fc9

Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation...

Code injection

Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated by the screen saver lock setting...

CVE-2008-4237

Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated by the screen saver lock setting...

CVE-2008-4237

CVE-2008-4237 is a Mac OS X 10.5.x vulnerability where the Managed Client misidentifies the system during per-host configuration installation, causing per-host settings (notably the screen saver lock) to not be applied. The issue is fixed by Mac OS X 10.5.6 Update / Security Update 2008-008. Refe...

Hacking tricks of a few over-active Defense method-vulnerability warning-the black bar safety net

Generally the Trojan is added from the start is antivirus software active defense, or 3 6 0 intercept,a few days ago in an online found several registry since the start of the method,the effect is also good,can be considered currently active Defense of a large Dead Space,even of micro-point turne...

Memory corruption

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...

CVE-2008-5358

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...

OpenJDK Buffer Overflow in GIF image processing (6766136)

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...

Design/Logic Flaw

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages. NOTE: this might be a...

CVE-2008-4230

The CVE-2008-4230 family describes a vulnerability in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1 where the Passcode Lock allows SMS content to be visible while the emergency-call screen is shown. The underlying issue is the display of SMS messages on the device screen when the e...

PT-2008-5523 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.1 iPhone OS for iPod touch versions 1.1 through 2.1 Description: The Passcode Lock feature displays SMS messages when the emergency-call screen is visible. This allows physically proximate attackers to...

CVE-2008-4230: Exposure of Sensitive Information to an Unauthorized Actor

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages. NOTE: this might be a...

Microsoft VISTA TCP/IP stack buffer overflow

phion Security Advisory 21/10/2008 Microsoft VISTA TCP/IP stack buffer overflow Summary ----------------------------- Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory...

Fedora 8 : optipng-0.6.2-1.fc8 (2008-9639)

The main reason for this update is a buffer overflow that is removed in this version, that could be triggered by processing specially crafted bitmap images .bmp. Aggregated upstream changelog: ============================== ++ Put back a speed optimization, accidentally removed in version 0.6,...