94 matches found
Curl Ruby Gem Remote command execution
Curl Ruby Gem Remote command execution 3/12/2013 https://github.com/tg0/curl Specially crafted URLs can result in remote code execution: In ./lib/curl.rb the following lines: 131 cmd = "curl cookiesstore browsertype @setupparams ref "url" " 132 if @debug 133 puts cmd.red 134 end 135 result =...
Mozilla Firefox - Cookie Verification Denial of Service
Mozilla Firefox - Cookie Verification Denial of Service source: https://www.securityfocus.com/bid/62969/info Mozilla Firefox is prone to a denial-of-service vulnerability because it fails to verify the user supplied input. Successfully exploiting this issue will allow an attacker to inject specia...
Google Chrome - Cookie Verification Denial of Service
Google Chrome - Cookie Verification Denial of Service source: https://www.securityfocus.com/bid/58857/info Google Chrome is prone to a denial-of-service vulnerability because it fails to verify the user supplied input. Successfully exploiting this issue will allow an attacker to inject special...
CVE-2011-0231
CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue."...
Design/Logic Flaw
CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue."...
CVE-2011-0231
CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue."...
CVE-2011-0231: Exposure of Sensitive Information to an Unauthorized Actor
CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue."...
Ubuntu Update for firefox USN-1149-2
Ubuntu Update for Linux kernel vulnerabilities USN-1149-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN11492.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for firefox USN-1149-2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
Raiders: CAPTCHA cracking-vulnerability warning-the black bar safety net
The so-called verification code, is a string of randomly generated numbers or symbols, to generate a picture, the pictures of Riga on some interference pixel to prevent OCR, and by the user to visually identify where the verification code information, The input form submission site verification,...
CVE-2005-3429
Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting XSS vulnerabilitie...
phpGroupWare Admin/Setup Password Plaintext Cookie Storage
The version of PhpGroupWare installed on the remote host is reported to be affected by a plaintext cookie authentication credentials information disclosure vulnerability. If web administration of PhpGroupWare is not conducted over an encrypted link, an attacker with the ability to sniff network...
PT-2002-2522 · Phprank · Phprank
Name of the Vulnerable Software and Affected Versions: phpRank version 1.8 Description: The issue allows remote attackers to retrieve the administrative password because it is stored in plaintext on the server and in the ap cookie. Recommendations: For phpRank version 1.8, consider disabling the...