Another iPhone Passcode Bypass Vulnerability Discovered

It’s getting hard to keep track of all the bugs piling up for Apple’s iPhone. Now it seems a glitch in the iOS kernel of Apple’s much maligned iOS 6.1 is responsible for yet another passcode bypass vulnerability, the second to surface this month. Attackers can apparently access users’ photos,...

Facebook OAuth flaw allows gaining full control over any Facebook account

Facebook OAuth is used to communicate between Applications & Facebook users, to grant additional permissions to your favorite apps. To make this possible, users have to 'allow or accept' the application request so that app can access your account information with required permissions. As a normal...

[SECURITY] Fedora 17 Update: tinymce-spellchecker-2.0.5-8.fc17

This plugin adds spellchecker functionality to TinyMCE by providing a new button that performs a AJAX call to a back-end PHP page that uses PSpell/ASpell or Google spellchecker...

Renren seven years activities of the lottery machine can break through the limit of infinite shake-vulnerability warning-the black bar safety net

http://seven.renren.com/websitecelebrate There is a lottery machine, shake it out, the results did not, suggesting that the next rocker to be in the next one hour. ! http://s.xnimg.cn/a49632/actimg/12anniversary/js/anniversary.js Found so a JS file that contains the 7 anniversary of the page the...

Internet Explorer CButton Use After Free Vulnerability

Added: 01/04/2013 CVE: CVE-2012-4792 BID: 57070 OSVDB: 88774 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem All references to DOM button objects are not properly removed when a DOM buttom object is deleted. If the stale reference...

Internet Explorer CButton Use After Free Vulnerability

Added: 01/04/2013 CVE: CVE-2012-4792 BID: 57070 OSVDB: 88774 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem All references to DOM button objects are not properly removed when a DOM buttom object is deleted. If the stale reference...

Internet Explorer CButton Use After Free Vulnerability

Added: 01/04/2013 CVE: CVE-2012-4792 BID: 57070 OSVDB: 88774 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem All references to DOM button objects are not properly removed when a DOM buttom object is deleted. If the stale reference...

Addressbook v8.1.24.1 Group Name XSS

Instructions. After authentication, click on the Group tab at the top. Click on the New Group Button on the group page. For the group name the first field enter the following XSS test string: SCRIPTalertString.fromCharCode88,83,83/SCRIPT Then call the XSS string from the URL -- technically one...

Addressbook 8.1.24.1 / 8.2.5 Cross Site Scripting

Instructions. After authentication, click on the Group tab at the top. Click on the New Group Button on the group page. For the group name the first field enter the following XSS test string: alertString.fromCharCode88,83,83 Then call the XSS string from the URL -- technically one calls the group...

GreenBrowser iframe Handling Double Free Vulnerability (Windows)

This host is installed with GreenBrowser and is prone to double free vulnerability. OpenVAS Vulnerability Test $Id: gbgreenbrowserdoublefreevulnwin.nasl 6022 2017-04-25 12:51:04Z teissa $ GreenBrowser iframe Handling Double Free Vulnerability Windows Authors: Rachana Shetty Copyright: Copyright c...

Apple Safari WebKit Button Column Blocks Memory Corruption (CVE-2012-1520)

A type confusion vulnerability has been reported in Apple Safari...

Microsoft Changes Mind; Will Patch Flash on IE 10 Before Windows 8 Ships

Microsoft has reversed course and said it will patch a serious Adobe Flash vulnerability in Windows 8 and Internet Explorer 10 before the new Microsoft OS ships Oct. 26. Microsoft had previously said it would wait until after the ship date to update Flash, which is integrated into the browser...

Mandriva Linux Security Advisory : acpid (MDVSA-2012:137)

Multiple vulnerabilities has been discovered and corrected in acpid : Oliver-Tobias Ripka discovered that an ACPI script incorrectly handled power button events. A local attacker could use this to execute arbitrary code, and possibly escalate privileges CVE-2011-2777. Helmut Grohne and Michael...

Mandriva Update for acpid MDVSA-2012:137 (acpid)

Check for the Version of acpid OpenVAS Vulnerability Test Mandriva Update for acpid MDVSA-2012:137 acpid Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2012-1835

Multiple cross-site scripting XSS vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to app/view/agenda-widget-form.php; 2 args, 3 title, 4 beforetitle, or 5 aftertitle parameter...

WordPress Plugin WP-Predict 1.0 - Blind SQL Injection

WordPress Plugin WP-Predict 1.0 - Blind SQL Injection Exploit Title: WordPress WP-Predict v1.0 Blind SQL Injection Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.pootlepress.co.uk/ Software Link: http://downloads.wordpress.org/plugin/wp-predict.zip Version: 1.0...

Null pointer dereference

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

CVE-2012-3553

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

WordPress Simple Download Button Shortcode 1.0 File Disclosure

Description : Wordpress Plugins - Simple Download Button Shortcode Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/simple-download-button-shortcode/ Plugins : http://downloads.wordpress.org/plugin/simple-download-button-shortcode.1.0.0.zip Date :...

WordPress Plugin Simple Download Button ShortCode 1.0 - Remote File Disclosure

Description : Wordpress Plugins - Simple Download Button Shortcode Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/simple-download-button-shortcode/ Plugins : http://downloads.wordpress.org/plugin/simple-download-button-shortcode.1.0.0.zip Date :...