59 matches found
Dutch, Belgian Ransomware Wildfire Disrupted, Decryption Keys Posted
The No More Ransom initiative released decryption keys for yet another strain of ransomware this week; now victims of the mostly Dutch-leaning ransomware called WildFire can get their files back without paying attackers. According to an update from the Dutch National Police on Wednesday, when it...
WildFire Cross-Site Scripting Vulnerability
A Palo Alto Networks firewall displaying a WildFire cloud integrated report is susceptible to a cross-site scripting condition Ref WTC-3355...
Android Browser Same Origin Policy Bypass Vulnerability
A SOP bypass occurs when a sitea.com is some how able to access the properties of siteb.com such as cookies, location, response etc. Due to the nature of the issue and potential impact, this is very rarely found in modern browsers. However, they are found once in a while. Vulnerability: Android...
Android 1.x/2.x HTC Wildfire - Local Root Exploit
No description provided by source. / android 1.x/2.x the real youdev feat. init local root exploit. Modifications to original exploit for HTC Wildfire Stage 1 soft-root c 2010 Martin Paul Eve Changes: -- Will not remount /system rw NAND protection renders this pointless -- Doesn't copy self, mere...
[SECURITY] Fedora 19 Update: 0ad-0.0.15-4.fc19
0 A.D. pronounced "zero ey-dee" is a free, open-source, cross-platform real-time strategy RTS game of ancient warfare. In short, it is a historically-based war/economy game that allows players to relive or rewrite the history of Western civilizations, focusing on the years between 500 B.C. and 50...
FirePHP Firefox Plugin 0.7.1 - Remote Command Execution
FirePHP Firefox Plugin 0.7.1 - Remote Command Execution Exploit Title: Firephp firefox plugin RCE Date: 17/04/2013 Exploit Author: Wireghoul Vendor Homepage: www.firephp.org Software Link: https://addons.mozilla.org/en-US/firefox/addon/firephp/versions/ Version: All versions up to and including...
Attackers Shifting to Delivering Unknown Malware Via FTP and Web Pages
The bulk of “unknown” malware is being delivered to systems via Web-based attacks, proxies and FTP sessions, according to a study released by Palo Alto Networks this week. The study dubbed “The Modern Malware Review,” found more than 26,000 malware samples, and focuses on what the firm calls...
Android 1.x/2.x HTC Wildfire Local Root Exploit
Exploit for Android platform in category local exploits / android 1.x/2.x the real youdev feat. init local root exploit. Modifications to original exploit for HTC Wildfire Stage 1 soft-root c 2010 Martin Paul Eve Changes: -- Will not remount /system rw NAND protection renders this pointless --...
Android 1.x2.x HTC Wildfire - Local Privilege Escalation
Android 1.x2.x HTC Wildfire - Local Privilege Escalation / android 1.x/2.x the real youdev feat. init local root exploit. Modifications to original exploit for HTC Wildfire Stage 1 soft-root c 2010 Martin Paul Eve Changes: -- Will not remount /system rw NAND protection renders this pointless --...
Android 1.x / 2.x HTC Wildfire Local Root Exploit
/ android 1.x/2.x the real youdev feat. init local root exploit. Modifications to original exploit for HTC Wildfire Stage 1 soft-root c 2010 Martin Paul Eve Changes: -- Will not remount /system rw NAND protection renders this pointless -- Doesn't copy self, merely chmods permissions of original...
Android 1.x/2.x HTC Wildfire - Local Privilege Escalation
/ android 1.x/2.x the real youdev feat. init local root exploit. Modifications to original exploit for HTC Wildfire Stage 1 soft-root c 2010 Martin Paul Eve Changes: -- Will not remount /system rw NAND protection renders this pointless -- Doesn't copy self, merely chmods permissions of original...
Openfire < 3.6.4 jabber:iq:auth Crafted password_change Request Password Manipulation
The remote host is running Openfire / Wildfire, an instant messaging server supporting the XMPP protocol. According to its version, the installation of Openfire or Wildfire fails to verify the owner of the account before changing the password for the account in response to an 'iq:auth' request. A...
Openfire < 3.6.3 Multiple Vulnerabilities
Binary data 4925.prm...
CVE-2006-7233
Openfire (formerly Wildfire) 2.6.0 admin console login.jsp suffers a Cross-site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via the url parameter, potentially affecting versions prior to 3.5.3. The description does not specify a concrete...
Openfire < 3.5.0 ConnectionManagerImpl.java Queue Handling Remote DoS
The remote host is running Openfire / Wildfire, an instant messaging server supporting the XMPP protocol. According to its version, the installation of Openfire or Wildfire on the remote host suffers from a denial of service vulnerability that could bring the server down because it has no limit o...
Cross site scripting
Cross-site scripting XSS vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a 1 WebHelp5 WebHelp5Ext or 2 WildFire WildFireExt extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than...
CVE-2008-0642
Cross-site scripting XSS vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a 1 WebHelp5 WebHelp5Ext or 2 WildFire WildFireExt extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than...
CVE-2008-0642: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a 1 WebHelp5 WebHelp5Ext or 2 WildFire WildFireExt extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than...
PT-2008-2265 · Adobe · Robohelp
Name of the Vulnerable Software and Affected Versions: Adobe RoboHelp versions 6 and 7 Description: A cross-site scripting XSS issue exists in files created by Adobe RoboHelp, potentially involving the use of WebHelp5 or WildFire extensions. This allows remote attackers to inject arbitrary web...