TA14-290A: SSL 3.0 Protocol Vulnerability and POODLE Attack

NCCIC / US-CERT National Cyber Awareness System: TA14-290A: SSL 3.0 Protocol Vulnerability and POODLE Attack 10/17/2014 12:27 PM EDT Original release date: October 17, 2014 Systems Affected All systems and applications utilizing the Secure Socket Layer SSL 3.0 with cipher-block chaining CBC mode...

POODLE SSL 3.0 Attack Exploits Widely-used Web Encryption Standard

Another Heartbleed-like vulnerability has been discovered in the decade old but still widely used Secure Sockets Layer SSL 3.0 cryptographic protocol that could allow an attacker to decrypt contents of encrypted connections to websites. Google's Security Team revealed on Tuesday that the most...

WebBrowserPassView v1.56 - Recover lost passwords stored in your Web browser

WebBrowserPassView is a password recovery tool that reveals the passwords stored by the following Web browsers: Internet Explorer Version 4.0 - 11.0, Mozilla Firefox All Versions, Google Chrome, Safari, and Opera. This tool can be used to recover your lost/forgotten password of any Website,...

Phabricator: Content Spoofing through URL

Hello I hope this is upto the level you guys think of accepting reports. Specified content can be injected into the webpage as text using the URL Consider this...

Django: CSRF protection bypass on any Django powered site via Google Analytics

I shall explain all the steps to create the final PoC in order to be more clear. Part 1. Cookie Injection via Google Analytics --------------------- Reported to Google, rewarded, still working Google Analytics sets the cookie to track user source:...

Content injection caused by failing to encode the url

The exampleURLPrefix variable given to the single-xml-header.vm|https://stash.atlassian.com/projects/JIRA/repos/jira/browse/jira-components/jira-core/src/main/resources/templates/plugins/issueviews/single-xml-header.vm11 or...

Mavenlink: privilege escalation

Consider Two browsers say X and Y, also consider two users say A and B. 2. Sign in to https://app.mavenlink.com using user A through browser X, same as login with user B through browser Y. 3. Now create a project through user A, and add user B as a consultant with Team Lead privilege. 4. Now...

HTML5 Canvas Fingerprint — Widely Used Unstoppable Web Tracking Technology

Till Now we have seen many traditional way of tracking web users, such as using cookies that get saved on user’s system may not be available forever to many companies, but a new method of tracking users has emerged that worked without the use of cookies. From last two years, many websites and...

Browser Password Remover - Browser Website Login Password Removal Software

Browser Password Remover is the free software to quickly display and remove all the stored website login passwords from popular browsers. Most of the web browsers allow users to remember passwords and stores them into local database file. This file and all the stored passwords within it can be...

WebBrowserPassView - Recover lost passwords stored in your Web browser

WebBrowserPassView is a password recovery tool that reveals the passwords stored by the following Web browsers: Internet Explorer Version 4.0 - 10.0, Mozilla Firefox All Versions, Google Chrome, Safari, and Opera. This tool can be used to recover your lost/forgotten password of any Website,...

Oracle JRE - java.net.URLConnection class – Same-of-Origin (SOP) Policy Bypass

No description provided by source. Description Security-Assessment.com discovered that a Java Applet making use of java.net.URLConnection class can be used to bypass same-of-origin SOP policy and domain based security controls in modern browsers when communication occurs between two domains that...

All Browsers - Long Unicode DoS PoC

No description provided by source. html titleDrIDE - All Browsers - Long Unicode DoS PoC/title head script function boom //The number of strings increases the amount of memory consumed, quicker crash where applicable. var longunistring1 = unescape%u4141%u4141; var longunistring2 =...

Mozilla Browsers - x (Link) Code Execution Exploit

No description provided by source. !-- Comment placed below to keep the author info together: /str0ke Contact Informations Michael Krax [email protected] http://www.mikx.de/?p=15 mikx -- html head titleFirelinking - Proof-of-Concept/title link rel=SHORTCUT ICON href=favicon.ico script...

Internet Explorer 6.0,Firefox 0.8/0.9.x JavaScript Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10998/info Web browsers from various vendors are reported prone to a JavaScript denial-of-service vulnerability. The specified JavaScript code will consume 100% of the CPU resources of the affected computer, crashing the...

Netscape 7.0 JavaScript Regular Expression Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6959/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when executing certain JavaScript methods. If a malicious page containing a specially crafted JavaScript regul...

MS IE 6.0,Mozilla 0.9.6,Opera 5.1 Image Count Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3684/info An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered. An unusually high image count may cause a denial of services to users who view the webpage containing the...

Verity K2 Toolkit 2.20 Query Builder Search Script Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8074/info It has been reported that the K2 Toolkit does not sufficiently sanitize input by users. Because of this, it may be possible for an attacker to launch an attack that results in the execution of hostile HTML or...

Browser Navigation Download Trick

No description provided by source. Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate third-party...

Firefox 1.x JavaScript Key Filtering Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18308/info Multiple web browsers are prone to a JavaScript key-filtering vulnerability because the browsers fail to securely handle keystroke input from users. This issue is demonstrated to allow attackers to divert...

Internet Explorer 5,Firefox 0.8,OmniWeb 4.x URI Protocol Handler Arbitrary File Creation/Modification Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10336/info A vulnerability has been identified in multiple products from multiple vendors that may allow a remote attacker to create or modify arbitrary files; these issues relate to the processing of URI requests via...