Design/Logic Flaw

The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...

CVE-2011-3427

The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...

CVE-2011-3259

The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service resource consumption by making many connection attempts...

CVE-2011-3259

The CVE-2011-3259 vulnerability affects Apple iOS prior to 5 and Apple TV prior to 4.4 where the kernel does not promptly recover memory allocated for incomplete TCP connections. This can allow a remote attacker to cause resource exhaustion leading to a denial of service by establishing numerous ...

CVE-2011-3427

The CVE-2011-3427 entry concerns Apple iOS (pre-5) and Apple TV (pre-4.4) Data Security: X.509 certificates may accept MD5-signed certs, weakening cryptographic checks. Root cause: use of the MD5 hash algorithm within certificate validation is not properly restricted, enabling a man-in-the-middle...

Apple Releases Multiple Security Updates

Apple has released security updates for Apple iOS, Safari 5.1.1, OS X Lion v10.7.2, iWork 09, and Apple TV 4.4 to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, obtain sensitive...

Microsoft Windows Media Center Remote Code Execution Vulnerabilities (2604926)

This host is missing an important security update according to Microsoft Bulletin MS11-076. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RTL TV Website - Persistent Service Vulnerabilities

Document Title: =============== RTL TV Website - Persistent Service Vulnerabilities Release Date: ============= 2011-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 257 Product & Service Introduction: =============================== RTL Television formerly RTL plus i...

WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella

WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella Dr. Alberto Fontanella found on Western Digital WD TV Live Hub appliance with the last firmware installed 2.06.10 and 3 exploits to get admin password, deface appliance and get root shell: Author: Dr. Alberto...

Les video AI Xin technology source cookie injection vulnerability-vulnerability warning-the black bar safety net

by Mr. DzY from www.0855.tv 源码 下载 :http://www.mycodes.net/25/4585.htm Default background:admin/login. asp Injection point:http://www. xxxx. com/shownews. asp? id=2 1 6 exp: javascript:alertdocument. cookie=”id=”+escape“2 1 6 and 1=2 union select 1,username,password,4,5,6,7,8,9,1 0 from admin”;...

BrainNET ISP/TV Provider hacked by ProDom Security

BrainNET ISP/TV Provider hacked by ProDom Security ProDom Security Hackers Hacks into Brain.net.pk an ISP/TV Provider . Hacker dump data on free file hosting sites : URL: https://www.multiupload.com/0KWDE7ZJBB . There are 3 file in archive : README = Readme File cracked.txt = Login's Cracked so...

Delhi University's Control Panel & Fashion TV India's Data Hacked by Moofster

Delhi University's Control Panel & Fashion TV India's Data Hacked by Moofster Delhi University's & Fashion TV India's https://ftv.co.in/websites are vulnerable to SQL injection. A hacker "Moofster" has been hack the admin panel of Delhi University's website and He also extract the database of...

French Hacker Arrested After Bragging on TV !

A French hacker who boasted on TV about hacking into the network of an important defense contractor was arrested and charged with unauthorized access to a computer system, data theft and organized fraud. The hacker appeared on the France 2 television programme "Complément d'enquête" Further...

3 websites Defaced by Team DNA StuXnet !

3 websites Defaced by Team DNA StuXnet ! Hacked Sites : News Source : ketan singh...

CVE-2011-1418

The stateless address autoconfiguration aka SLAAC functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses...

Information disclosure

The stateless address autoconfiguration aka SLAAC functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses...

CVE-2011-1418

The CVE relates to IPv6 SLAAC on Apple iOS before 4.3 and Apple TV before 4.2, where the MAC address is exposed in the IPv6 address. This allows remote servers to potentially track users via source IPv6 addresses. Root cause: IPv6 SLAAC implementation leaking the MAC into the address. The provide...

CVE-2011-0162

Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service device reset via unspecified traffic on the local wireless network...

CVE-2011-0162

CVE-2011-0162 affects Apple iOS before 4.3 and Apple TV before 4.2. The issue is improper bounds checking for Wi‑Fi frames, allowing remote attackers on the local wireless network to cause a denial of service (device reset). The description confirms a network-based impact with high severity (CVSS...

Design/Logic Flaw

Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...