27 matches found
Lulzsec hacker Jeffrey could face Life Imprisonment
Lulzsec Hacker , Jeffrey Hammond faces a potential prison sentence of more than 30 years if found guilty of all charges filed against him. U.S. District Court chief judge Loretta Preska, who presided over a bail hearing for Hammond want last week. Hammond was also charged with using some of the...
FBI actually leak Stratfor e-mails just to bust Julian Assange?
FBI actually leak Stratfor e-mails just to bust Julian Assange? Internal emails disclosed by Anonymous and WikiLeaks suggest that Stratfor, a private intelligence firm working with the U.S. Justice Department. But The FBI turned a computer hacker to build its case against a group of people it...
RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability
CVE-2008-3064 An illegal resource reference vulnerability exists in the ActiveX Control of RealNetworks RealPlayer. For exploiting the vulnerability, the attacker may build a special web page and entrap the victim into visiting it, if the local system has installed RealPlayer, the local resources...
FreeBSD : firefox -- OnUnload Javascript browser entrapment vulnerability (e24797af-803d-11dc-b787-003048705d5a)
RedHat reports : Several flaws were found in the way in which Firefox displayed malformed web content. A web page containing specially crafted content could potentially trick a user into surrendering sensitive information. CVE-2007-1095, CVE-2007-3844, CVE-2007-3511, CVE-2007-5334 %NASLMINLEVEL...
MSIE7 entrapment again (+ FF tidbit)
Hello again, Microsoft Internet Explorer seems to have a soft spot for browser entrapment vulnerabilities. Just to recap, in these attacks, the user is made believe he had left a webpage and the URL bar or SSL state data reinforce him in this belief - but in reality, is prevented from doing so, a...
RE: MSIE7 browser entrapment vulnerability (probably Firefox, too)
Tested on Opera 9.20 build 8713 with JRE 1.5 resulting in the following behaviour: After loading the initial site http://lcamtuf.coredump.cx/ietrap/ I couldn't navigate away to google.com etc, however Opera correctly displayed http://lcamtuf.coredump.cx/ietrap/ in the address bar, thus no real...
MSIE7 browser entrapment vulnerability (probably Firefox, too)
There is a cool combination-type vulnerability in MSIE7 that allows the attacker to: a Trap the visitor in a Matrix-esque tarpit webpage that cannot be left by normal means this is a known brain-damaged design of onUnload Javascript handlers, b Spoof transitions between pages so that the user...