Baidu Browser suffers from dll hijacking vulnerability

Baidu Browser is a browser. Baidu Browser suffers from a dll hijacking vulnerability, which is caused by the baidubrowser.exe component in Baidu Browser loading library files insecurely, which can be exploited by constructing a malicious application and placing it in a specific path to maliciousl...

CVE-2016-8911

The CVE-2016-8911 entry concerns IBM Kenexa LMS on Cloud (versions 13.1–13.2.4) where an attacker could cause a victim to hijack click actions by luring them to a malicious site, i.e., a clickjacking-style vulnerability that could enable further attacks in the victim’s session. Connected document...

DllHijackAuditor 3.5 - Stack Overflow Vulnerability

DLL Hijack Auditor is the smart tool to Audit against the Dll Hijacking Vulnerability in any Windows application. This is one of the critical security issue affecting almost all Windows systems. Though most of the apps have been fixed, but still many Windows applications are susceptible to this...

Winhex Editor DLL Hijacking Vulnerability

Winhex Editor is a data processing tool centered on a hexadecimal editor. Winhex Editor suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to compromise an affected application and obtain sensitive information by replacing a forged .whx or .whs file with a malicious...

Spoofing

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to hijack network traffic or bypass intended Enhanced Protected Mode EPM or application container...

The net exposure of the Bank to pay the loopholes in the suspected SMS CAPTCHA by hackers hijacking-vulnerability warning-the black bar safety net

Recently, the media exposed the Bank to pay the presence of vulnerabilities. The criminals forcibly opened the depositors of the Bank only with the SMS verification code to transactions of the“e payment”service, with illegally intercepting SMS verification code, easily removed the card money. !...

IP Board 3.x - CSRF Token hjiacking

No description provided by source. Title: IP Board 3.x CSRF - Token hjiacking Date: 03.09.14 Version: = 3.4.6 Vendor: invisionpower.com Author: Piotr S. Video-PoC: https://www.youtube.com/watch?v=G5P21TA4DjY 1 Introduction Latest and propabbly previous IPB verions suffers on vulnerability, which...

Design/Logic Flaw

Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."...

CVE-2013-5054

CVE-2013-5054 affects Microsoft Office 2013 and 2013 RT. The vulnerability is an information disclosure where remote attackers can gain authentication tokens by exploiting a flaw in how Office handles specially crafted responses to file-open requests on a malicious website. The issue is described...

VulnCheck KEV: CVE-2013-5054

Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."...

Chinese Hackers targeting American Drones under Operation Beebus

FireEye experts have been tracking the Operation Beebus campaign for a few months now, and new same gang of hackers are being blamed for a set of recently discovered spear-phishing attacks that aim to steal information related to American drones. These attacks exploited previously discovered...

Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities

Document Title: =============== Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=824 ID: SWIFT-3119 URL: http://dev.kayako.com/browse/SWIFT-3119 Release Date: ============= 2013-01-21 Vulnerability...

Microsoft Internet Explorer Cookie Hijacking Vulnerability

Internet Explorer is prone to a cookie hijacking vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902613. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft Internet Explorer Cookie Hijacking Vulnerability

Internet Explorer is prone to cookie hijacking vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NCP Secure Client - Juniper Edition v.9.23.017 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ==================================================================== NCP Secure Client - Juniper Edition v.9.23.017 DLL Hijacking Exploit ==================================================================== / Exploit Title: NCP Secure Client...

[oCERT-2009-004] AjaxTerm session id collision

2009-004 AjaxTerm session id collision Description: AjaxTerm, an open source web based terminal, uses a form of random session id generation which can lead to remote session hijacking. The ajaxterm.js script allocates session ids on the client side using the following method: var...

openSUSE 10 Security Update : squirrelmail (squirrelmail-5792)

Squirrelmail was updated to use the secure flag for its cookies. Otherwise it was possible to hijack a SSL-protected session via leaked cookies. CVE-2008-3663 The previous update for the problem above contained a typo which broke squirrelmail. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE 10 Security Update : squirrelmail (squirrelmail-5778)

Squirrelmail was updated to use the secure flag for its cookies. Otherwise it was possible to hijack a SSL-protected session via leaked cookies. CVE-2008-3663 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

menalto gallery: Session hijacking vulnerability, CVE-2008-3102

menalto gallery: Session hijacking vulnerability, CVE-2008-3102 References https://vulners.com/cve/CVE-2008-3102 http://int21.de/cve/CVE-2008-3102-mantis.html http://www.mantisbt.org/bugs/view.php?id=9524 http://www.mantisbt.org/bugs/view.php?id=9533...

menalto gallery: Session hijacking vulnerability, CVE-2008-3662

menalto gallery: Session hijacking vulnerability, CVE-2008-3662 References https://vulners.com/cve/CVE-2008-3662 http://int21.de/cve/CVE-2008-3662-gallery.html http://gallery.menalto.com/gallery2.2.6released http://enablesecurity.com/2008/08/11/surf-jack-https-will-not-save-you/...