Apache Httpd < 2.0.64 : mod_cache and mod_dav DoS

A flaw was found in the handling of requests by modcache 2.2 and moddav 2.0 and 2.2. A malicious remote attacker could send a carefully crafted request and cause a httpd child process to crash. This crash would only be a denial of service if using the worker MPM. This issue is further mitigated a...

BofA Worker to Plead Guilty for Hacking ATMs

A Bank of America computer specialist is set to plead guilty to charges that he hacked the bank’s automated tellers to dispense cash without recording the activity. Read the full article. Computerworld...

ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability

ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-046 April 2, 2010 -- CVE ID: CVE-2010-0160 -- Affected Vendors: Mozilla Firefox -- Affected Products: Mozilla Firefox 3.6.x -- TippingPointTM IPS Customer Protection...

Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the implementation of web worker threads...

Mozilla Products Multiple Vulnerabilities feb-10 (Windows)

The host is installed with Mozilla Firefox/Seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsmultvulnfeb10win01.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilities feb-10 Windows Authors: Antu Sanadi Copyright:...

Debian Security Advisory DSA 1999-1 (xulrunner)

The remote host is missing an update to xulrunner announced via advisory DSA 1999-1. OpenVAS Vulnerability Test $Id: deb19991.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1999-1 xulrunner Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian DSA-1999-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1571 Alin Rad Pop discovered that incorrect memory...

CVE-2010-0160

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

Memory corruption

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

CVE-2010-0160

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

CVE-2010-0160

CVE-2010-0160 affects Mozilla Firefox 3.0.x prior to 3.0.18, Firefox 3.5.x prior to 3.5.8, and SeaMonkey prior to 2.0.3. The issue arises in Web Worker handling of array data types in posted messages, causing heap memory corruption and browser crash; remote attackers could potentially execute arb...

FreeBSD : mozilla -- multiple vulnerabilities (f82c85d8-1c6e-11df-abb2-000f20797ede)

Mozilla Project reports : MFSA 2010-05 XSS hazard using SVG document and binary Content-Type MFSA 2010-04 XSS due to window.dialogArguments being readable cross-domain MFSA 2010-03 Use-after-free crash in HTML parser MFSA 2010-02 Web Worker Array Handling Heap Corruption Vulnerability MFSA 2010-0...

[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1999-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

DSA-1999-1 xulrunner - several vulnerabilities

Bulletin has no description...

Identity Theft Used By Hamas Assassin Suspects

An Israel-resident British IT worker has reacted with horror to news that a suspected member of an alleged hit squad used a passport with his details to enter Dubai, before allegedly participating in the assassination of a prominent Hamas official. He’s not alone. Read the full article. The Regis...

CVE-2010-0160

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

mozilla -- multiple vulnerabilities

Mozilla Project reports: MFSA 2010-05 XSS hazard using SVG document and binary Content-Type MFSA 2010-04 XSS due to window.dialogArguments being readable cross-domain MFSA 2010-03 Use-after-free crash in HTML parser MFSA 2010-02 Web Worker Array Handling Heap Corruption Vulnerability MFSA 2010-01...

Social worker database+configuration upload scored webshell-vulnerability warning-the black bar safety net

BY:small Wu blog:http://hi. baidu. com/q369568652 Today in the group. A friend lost a station. That is the Universal password to everyone to help look. Sure enough,a universal password to get in. Went in and saw no backup. There is an upload and ewebeditor. ! Thought might win a bit difficult. He...

Apache Httpd < 2.0.64 : expat DoS

A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document for example through moddav may be able to cause a crash. This crash would only be a denial of service if using the worker MPM...

Monkey Web Server Denial Of Service

census ID: census-2009-0004 URL: http://census-labs.com/news/2009/12/14/monkey-httpd/ CVE ID: Pending Affected Products: Monkey web server versions ≤ 0.9.2. Class: Improper Input Validation CWE-20, Incorrect Calculation CWE-682 Remote: Yes Discovered by: Patroklos Argyroudis We have discovered a...