640 matches found
APPLE-SA-2012-09-19-1 iOS 6
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-09-19-1 iOS 6 iOS 6 is now available and addresses the following: CFNetwork Available for: iPhone 3GS and later, iPod touch 4th generation and later, iPad 2 and later Impact: Visiting a maliciously crafted website may lead to the...
SquidGuard 1.4 - Long URL Handling Remote Denial of Service
SquidGuard 1.4 - Long URL Handling Remote Denial of Service source: https://www.securityfocus.com/bid/55291/info squidGuard is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to enter emergency mode in which URLs are not blocked. This will result...
SquidGuard 1.4 - Long URL Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/55291/info squidGuard is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to enter emergency mode in which URLs are not blocked. This will result in a denial-of-service condition. squidGuard 1.4 is...
WebKit 沙盒安全限制绕过漏洞(CVE-2012-3697)
BUGTRAQ ID: 54697 CVE ID: CVE-2012-3697 WebKit 是一个开源的浏览器引擎，与之相应的引擎有Gecko（Mozilla Firefox 等使用的排版引擎）和Trident（也称为MSHTML，IE 使用的排版引擎）。同时WebKit 也是苹果Mac OS X 系统引擎框架版本的名称，主要用于Safari，Dashboard，Mail 和其他一些Mac OS X 程序。 Apple Safari 6.0之前版本的WebKit没有正确处理file: URL，可允许远程攻击者通过利用Web进程控制绕过目标沙盒限制和读取任意文件。 0 Apple...
Mac OS X : Apple Safari < 6.0 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X host is earlier than 6.0. It is, therefore, potentially affected by several issues : - An unspecified cross-site scripting issue exists. CVE-2012-0678 - An error in the handling of 'feed://' URLs can allow local files to be disclosed to...
Cross site scripting
Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML by leveraging improper URL canonicalization during the handling of the location.href property...
Ezhometech Ezserver 6.4 Stack Overflow
Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.htm References:...
Ezhometech Ezserver 6.4 Stack Overflow Exploit
Exploit for windows platform in category remote exploits Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link:...
EZHomeTech Ezserver 6.4 - Remote Stack Overflow
EZHomeTech Ezserver 6.4 - Remote Stack Overflow Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.ht...
EZHomeTech Ezserver 6.4 - Remote Stack Overflow
Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.htm References:...
Ubuntu: Security Advisory (USN-1346-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
JavaScript Switcharoo Proof Of Concept 2
/ From: Michal Zalewski Date: Fri, 9 Dec 2011 11:04:22 -0800 Subject: the week of silly PoCs continues: data://www.mybank.com/ Just another short note... this is a somewhat compelling and entirely unnecessary phishing opportunity - and a tiny symptom of the mess with URL handling. Firefox and Ope...
CVE-2011-3887
Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors...
CVE-2011-3875
Removed by vendor...
Adobe Flash Player URI Protocol Cross Site Scripting (ASBP11-26; CVE-2011-2429)
A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to differences in the way the browser and the plug-in handle URLs. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious web-page...
Insomnia : ISVA-110822.1 - Pidgin IM Insecure URL Handling Remote Code Execution
Insomnia Security Vulnerability Advisory: ISVA-110822.1 Name: Pidgin IM Insecure URL Handling Remote Code Execution Reported: 21 July 2011 Vendor Link: http://www.pidgin.im Affected Products: Pidgin Instant Messaging Client = 2.9.0 Original Advisory:...
Ubuntu 10.04 LTS / 10.10 / 11.04 : apturl vulnerability (USN-1132-1)
It was discovered that apturl incorrectly handled certain long URLs. If a user were tricked into opening a very long URL, an attacker could cause their desktop session to crash, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block direct...
Design/Logic Flaw
IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino does not properly handle URLs that request images, which allows remote authenticated users to cause a denial of service daemon crash via a request to resources.nsf, aka SPR XFXF7JDBCX...
UBUNTU-CVE-2011-1191
Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of DOM URLs...