UBUNTU-CVE-2011-3881

WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors related to 1 the DOMWindow::clear function and use of a selection object, 2 the...

CVE-2011-3881

CVE-2011-3881 affects WebKit as used in Google Chrome <15.0.874.102 and Android

CVE-2011-3881

WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors related to 1 the DOMWindow::clear function and use of a selection object, 2 the...

PT-2011-4752

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 15.0.874.102 Android versions prior to 4.4 Description The issue allows remote attackers to bypass the Same Origin Policy, enabling them to conduct Universal XSS UXSS attacks. This can be achieved through variou...

DHS Thinks Some SCADA Problems Are Too Big To Call "Bug"

The Stuxnet worm may be the most famous piece of malicious software ever written. When it was first detected, a little over a year ago, the worm sounded a warning to nations around the world that critical infrastructure systems were potential targets of attack for foreign governments and cyber...

Lost Door J-Revolution Denial of Service Vulnerability

This host is running Lost Door J-Revolution and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gblostdoordosvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Lost Door J-Revolution Denial of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone...

Trojan Last Door v6 (Latest version) Denial of service

Exploit for windows platform in category dos / poc / LostDoor v6 Remote Denial Of Service Author: Kevin R.V Date: 2011 License: Totally free 8- Some information: The protocol used by LastDoor v6 is a simply clear text protocol with a delimitter, thats a normal packet to connect v1ct1m\AS/My...

Synergy Protocol Information Disclosure Vulnerability (Windows)

This host is installed with Synergy and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbsynergyprotocolinfodiscvulnwin.nasl 8189 2017-12-20 09:10:19Z cfischer $ Synergy Protocol Information Disclosure Vulnerability Windows Authors: Sooraj KS Copyright: Copyrigh...

Kitchen Confidential: Mass. Case Lays Bare Unsanitary Data Security Practices

I worked in my share of kitchens when I was younger. I washed dishes, made salads, sous cheffed and worked the grill as a short order cook. And let me say this: one rule you learn when you work in the kitchen is – to borrow a phrase from the folks in ‘Vegas – ‘what happens in the kitchen stays in...

IF-CMS 2.07 - Local File Inclusion (1)

IF-CMS 2.07 - Local File Inclusion 1 !/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...

kernel security and bug fix update

2.6.18-238.5.1.0.1.el5 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory...

HTC Peep information leak

Application send twitter credentials in clear text...

CVE-2011-0685

CVE-2011-0685 affects Opera before 11.01 where the Delete Private Data feature’s Clear all email account passwords option was not properly implemented, potentially allowing a physically proximate attacker to access an email account on an unattended workstation. Connected advisories (SUSE/OpenSUSE...

Memory corruption

Memory leak in the gkcircuitinfodoinacf function in the H.323 implementation in Cisco IOS before 15.01XA allows remote attackers to cause a denial of service memory consumption via a large number of calls over a long duration, as demonstrated by InterZone Clear Token IZCT test traffic, aka Bug ID...

CVE-2010-4258

The doexit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNELDS getfs value, which allows local users to bypass intended accessok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a 1 BUG, 2 NULL pointer...

Clear iSpot / Clearspot crossite request forgery

Crossite request forgery in administration interface...

Clear iSpot/Clearspot CSRF Vulnerabilities

Exploit for hardware platform in category web applications Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com Products: iSpot / ClearSpot 4G http://www.clear.com/devices Versions affected: The observed behavior the result of a design choice, and may be present on multiple...

Clear iSpotClearspot 2.0.0.0 - Cross-Site Request Forgery

Clear iSpotClearspot 2.0.0.0 - Cross-Site Request Forgery Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com...

Clear iSpot/Clearspot 2.0.0.0 - Cross-Site Request Forgery

Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com Products: iSpot / ClearSpot 4G http://www.clear.com/devices...

Default credentials

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...