New fake banking cert attacks in play

From eWEEK Matt Hines Researchers with security training experts SANS Institute have reported the emergence of a new wave of attacks seeking to take advantage of trust in online banking sites and digital certificate e-banking security programs. The involved attacks target customers of Bank of...

Mozilla Firefox 3.0.10 / SeaMonkey 1.1.16 - Address Bar URI Spoofing

source: https://www.securityfocus.com/bid/35388/info Mozilla Firefox and SeaMonkey are affected by a URI-spoofing vulnerability because they fail to adequately handle user-supplied data. An attacker may leverage this issue by inserting arbitrary content to spoof a URI presented to an unsuspecting...

FreeBSD : Incorrect cross-realm trust handling in Heimdal (bfb36941-84fa-11d8-a41f-0020ed76ef5a)

Heimdal does not correctly validate the transited' field of Kerberos tickets when computing the authentication path. This could allow a rogue KDC with which cross-realm relationships have been established to impersonate any KDC in the authentication path. %NASLMINLEVEL 70300 C Tenable Network...

The Importance of Internet Identity and Anonymity

Last year, Craig Mundie issued a call to arms for a more “trustworthy Internet” — not that Microsoft has been entirely successful at implementing its arguably more humble Trustworthy Computing initiative. But let’s not let the computing industry’s failure to bring forward operating systems, web...

Charney plugs Microsoft end-to-end trust at RSA Conference

Scott Charney used his keynote speech at the RSA Conference on Tuesday to talk up a variety of hardware and software-based technologies meant to infuse the Internet with more trust. Charney, the head of Microsoft’s Trustworthy Computing team, talked about the need for greater adoption of TPMs, co...

Sun Java System Delegated Administrator 6.x - HTTP Response Splitting

Sun Java System Delegated Administrator 6.x - HTTP Response Splitting source: https://www.securityfocus.com/bid/34643/info Sun Java System Delegated Administrator is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can...

Sun Java System Delegated Administrator 6.x - HTTP Response Splitting

source: https://www.securityfocus.com/bid/34643/info Sun Java System Delegated Administrator is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how web content is served,...

Doing business with Heartland; Regaining the trust

By Andrew Storms According to a this news article computerworld.com and a statement by Heartland 2008breach.com, competitors of the now PCI-delisted payment processor are using the breach as means to lure their customers. Competitors are apparently suggesting that doing business with Heartland wi...

Ubuntu Update for mozilla-thunderbird, thunderbird vulnerabilities USN-629-1

Ubuntu Update for Linux kernel vulnerabilities USN-629-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6291.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mozilla-thunderbird, thunderbird vulnerabilities USN-629-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networ...

Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit (multi target)

Exploit for unknown platform in category local exploits ====================================================================== Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit multi target ====================================================================== / rsmpf.c Rosoft media player...

CentOS Update for firefox CESA-2008:0549 centos3 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2008:0549 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

APC PowerChute Network Shutdown - HTTP Response Splitting Cross-Site Scripting

APC PowerChute Network Shutdown - HTTP Response Splitting Cross-Site Scripting source: https://www.securityfocus.com/bid/33924/info APC PowerChute Network Shutdown is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize...

APC PowerChute Network Shutdown - HTTP Response Splitting / Cross-Site Scripting

source: https://www.securityfocus.com/bid/33924/info APC PowerChute Network Shutdown is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

Browser3D 3.5 (.sfs File) Local Stack Overflow Exploit (c)

includestdio.h includestring.h includewindows.h / Browser3D local BOF exploit coded by SimO-s0fT [email protected] greetz to: all friends & all morroccan hackers special tnx for str0ke / win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com / unsign...

Browser3D 3.5 - .sfs Local Stack Overflow (C)

Browser3D 3.5 - .sfs Local Stack Overflow C include include include / Browser3D local BOF exploit coded by SimO-s0fT [email protected] greetz to: all friends & all morroccan hackers special tnx for str0ke / win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub...

PrestaShop 1.1.0.3 Cross Site Scripting

Affects PrestaShop 1.1.0.3 product: homepage: http://prestashop.com This is XSS in the URI of PrestaShop. Trust no one, not even your $SERVERPHPSELF . http://10.1.1.155/prestashop1.1.0.3/admin/login.php/%22%3Cscript%3Ealert1%3C/script%3E Add an item to the shoping cart and then vist this url:...

About Token Kidnapping Exp combat small mind-vulnerability warning-the black bar safety net

Is mainly for 0 to 3, 0 8, didn't get a chance during the installation. NET 2 0 0 0 on the test 2. Affected is your ASP. NET code is based on Full Trust to run, if permissions than Full Trust, it will not be affected 3. Combat can be a multi-script type: asp, aspx, php test, is actually to...

GnuTLS certificates spoofing

Invalid trust chain verification procedure...

Unfixed XSS vulnerability at www2.delta-trust.com

Security researcher JoCk3r, has submitted on 11/09/2008 a cross-site-scripting XSS vulnerability affecting www2.delta-trust.com, which at the time of submission ranked 5180608 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is...

Microsoft iExplorer ' ' Address Bar URI Spoofing Vulnerability

This host is installed with Microsoft Internet Explorer and is prone to an URI spoofing vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiexplorerurispoofvuln900170.nasl 8957 2018-02-26 14:41:13Z asteins $ Description: Microsoft iExplorer '' Address Bar URI Spoofing Vulnerability Authors:...