4Images 1.7.6 Cross Site Request Forgery

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

4Images 1.7.6-9 - Cross-Site Request Forgery / PHP Code Injection

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

GreenBrowser iframe content Double Free Vulnerability

GreenBrowser searchbar iframe content Double Free Vulnerability ------------------------------------------------------------------ I. Summary All versions of GreenBrowser is prone to a vulnerability which leads to arbitrary code execution. A Double Free of iframe object is triggered by its shortc...

GreenBrowser double free

Double free on iframe tag...

Microsoft Windows Kernel 'win32k.sys' Memory Corruption Vulnerability

Microsoft Windows 7 Professional 64-bit is prone to a memory corruption vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902810. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

CVE-2011-5046

The Graphics Device Interface GDI in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers...

Android浏览器证书伪造漏洞

Open Handset Alliance Android是一款超过30家科技与移动电话公司所组成的团体开发的免费的移动电话平台 由于浏览器显示错误证书信息，可通过iframe可使用其他合法站点的证书，使用户信任当前网页内容 0 Android 3.x 厂商解决方案 目前没有详细解决方案提供： http://www.android.com/...

Google Crome for Androind certificate information spoofing

It's possible to spoof certificate information by using IFRAME...

Windows 7 64 bit Memory Corruption Vulnerability

Windows 7 64 bit Memory Corruption Vulnerability A person known by the alias of "w3bd3vil " on twitter released an HTML snippet that will cause the 64 bit version of Windows 7 to blue screen if viewed under Safari. The underlying vulnerability is however not a flaw in Safari but rather a flaw in...

Researchers Warn of New Windows 7 Vulnerability

Researchers are warning about a new remotely exploitable vulnerability in 64-bit Windows 7 that can be used by an attacker to run arbitrary code on a vulnerable machine. The bug was first reported a couple of days ago by an independent researcher and confirmed by Secunia. In a message on Twitter,...

Microsoft Internet Explorer IFRAME装载信息泄露漏洞

Bugtraq ID: 51065 CVE ID：CVE-2011-4689 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer 6到9版本中存在漏洞，在IFRAME加载尝试过程中，没有正确防止在违反同源策略所需的时间里采集数据，远程攻击者构建包含恶意JavaScript代码的WEB页，诱使用户解析，可判断目标用户浏览器缓存中的文件 0 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 9 Microsoft...

Google Chrome IFRAME装载信息泄露漏洞

Bugtraq ID: 51068 CVE ID：CVE-2011-4691 Google Chrome是一款流行的WEB浏览器。 Google Chrome 15.0.874.121及其之前的版本中存在漏洞，在IFRAME加载尝试过程中，没有正确防止在违反同源策略所需的时间里采集数据，远程攻击者构建包含恶意JavaScript代码的WEB页，诱使用户解析，可判断目标用户浏览器缓存中的文件。 0 Google Chrome = 15.0.874.121 厂商解决方案 目前没有详细解决方案提供： http://www.google.com/chrome 测试方法...

i4Style Web Design SQL Injection / Cross Site Scripting

Title : i4Style web design SQL Injection / IFrame Injection + Author : AngelParrot + Vendor : http://i4style.com/ + Google Dork : inurl:webpage.php?PageID= "i4Style" + Exploit - http://example.com/webpage.php?PageID=SQL - http://example.com/webpage.php?PageID=IFrame + Example -...

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities

FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

CVE-2011-4688

Mozilla Firefox 8.0.1 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

Design/Logic Flaw

Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

Design/Logic Flaw

Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

CVE-2011-4690

Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

CVE-2011-4688

CVE-2011-4688 affects Mozilla Firefox 8.0.1 and earlier. The issue enables an attacker to infer whether a document is present in the browser cache by observing data related to the timing of Same Origin Policy violations during iframe load attempts, via crafted JavaScript. The OpenVAS entries corr...

CVE-2011-4690

CVE-2011-4690 affects Opera 11.60 and earlier. The vulnerability arises because Opera does not prevent capturing timing data related to Same Origin Policy violations during IFRAME loading, enabling remote attackers to determine whether a document exists in the browser cache via crafted JavaScript...