iPhone Springboard Malformed Character Crash

!/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running this exploit on the iPhone. Unable to debug any of...

iPhone Springboard Malformed Character Crash PoC

No description provided by source. !/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running this exploit on t...

iPhone Springboard Malformed Character Crash PoC

Exploit for hardware platform in category dos / poc ================================================ iPhone Springboard Malformed Character Crash PoC ================================================ !/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1...

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premium Line 9.1 and 9.2 is also affected. Other versions may also be affected...

iPhone Springboard - Malformed Character Crash (PoC)

iPhone Springboard - Malformed Character Crash PoC !/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running...

iPhone Springboard - Malformed Character Crash (PoC)

!/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running this exploit on the iPhone. Unable to debug any of...

ZDI-10-021: Novell NetStorage xsrvd Long Pathname Remote Code Execution Vulnerability

ZDI-10-021: Novell NetStorage xsrvd Long Pathname Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-021 February 23, 2010 -- Affected Vendors: Novell -- Affected Products: Novell NetStorage -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers...

GLSA-201001-09 : Ruby: Terminal Control Character Injection

The remote host is affected by the vulnerability described in GLSA-201001-09 Ruby: Terminal Control Character Injection Giovanni Pellerano, Alessandro Tanasi and Francesco Ongaro reported that WEBrick does not filter terminal control characters, for instance when handling HTTP logs. Impact : A...

Debian DSA-1910-1 : mysql-ocaml - missing escape function

It was discovered that mysql-ocaml, OCaml bindings for MySql, was missing a function to call mysqlrealescapestring. This is needed, because mysqlrealescapestring honours the charset of the connection and prevents insufficient escaping, when certain multibyte character encodings are used. The adde...

Debian DSA-1909-1 : postgresql-ocaml - missing escape function

It was discovered that postgresql-ocaml, OCaml bindings to PostgreSQL's libpq, was missing a function to call PQescapeStringConn. This is needed, because PQescapeStringConn honours the charset of the connection and prevents insufficient escaping, when certain multibyte character encodings are use...

Multiple Browsers - Address bar Characters

Securitylab.ir Application Info: Name: Internet Explorer Version: 8.0 Other tested browsers that also automatically convert "" to "/": - Firefox v3.6 - Google Chrome 4.0.249.78 36714 Vulnerability: IE address bar characters into a small feature My IE 8 on the address bar will automatically enter...

RealPlayer: URL unescape buffer overflow

Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a URL argument containing a % percent...

DEBIAN-CVE-2010-0562

The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an SSL X.509 certificate containing non-printabl...

Advisory: jBCrypt < 0.3 character encoding vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 jBCrypt security advisory ========================= jBCrypt is a Java implementation of OpenBSD's Blowfish password hashing algorithm, as described in "A Future-Adaptable Password Scheme" by Niels Provos and David Mazieres USENIX, 1999. Versions of...

Sendmail SSL certificate spoofing

It's possible to spoof SSL certificate by using NULL character in CN...

Ruby: Terminal Control Character Injection

Background Ruby is an interpreted scripting language for quick and easy object-oriented programming. It comes bundled with a HTTP server "WEBrick". Description Giovanni Pellerano, Alessandro Tanasi and Francesco Ongaro reported that WEBrick does not filter terminal control characters, for instanc...

CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities

Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...

CentOS 5 : kernel (CESA-2008:0957)

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 12th November 2008 The original packages distributed wi...

Joomla! Component com_kk - Blind SQL Injection

Joomla Component comkk Blind SQL Injection Vulnerability Author : Pyske | Bug Researchers Name : comkk Bug Type : Blind SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : TRUE+ http://localhost/index.php?option=comkk&kat=1 and 1=1 FALSE-...

Sendmail Update Patches Memory Leak Flaws

Version 8.14.4 of Sendmail, the open source mail transfer agent MTA, includes fixes for several security vulnerabilities including some integer overflows, memory leaks and for the SSL NUL character problem disclosed in mid 2009. Read the full article. The H Security...