Lucene search
+L

5921 matches found

The Hacker News
The Hacker News
•added 2011/07/26 6:37 p.m.•11 views

90000 web pages infected by mass iFrame attack

90000 web pages infected by mass iFrame attack Security Experts Wayne Huang, Chris Hsiao, NightCola Lin discovered that more than 90000 web pages are infected by mass iFrame attack. There's been a mass scale injection ongoing recently, with the injected iframe pointing to willysy.com . Just Try a...

7.5AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2011/07/26 4:13 p.m.•12 views

Massive iFrame Attack Hits More than 90,000 Pages

Researchers have discovered a massive iframe injection campaign that has infected more than 90,000 Web pages. Researchers at Armorize said the injected scripts redirect users to malicious Web domains that is launching attacks targeting known vulnerabilities in Java, Adobe’s PDF, Microsoft’s...

0.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2011/07/05 12:00 a.m.•51 views

Opera Browser 'SRC' Denial of Service Vulnerability - Windows

Opera browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.3AI score0.05445EPSS
SaveExploits2References1
The Hacker News
The Hacker News
•added 2011/07/04 3:58 a.m.•14 views

Iframe Injection & Blind SQL Injection vulnerability on Apple.com exposed by Idahc(lebanese hacker)

Iframe Injection & Blind SQL Injection vulnerability on Apple.com exposed byIdahclebanese hacker After Sony hacks, Idahclebanese hacker is back to strike Apple.com . He found two vulnerability on https://consultants.apple.com/ as listed below. Iframe Injection :Click here Blind SQL INjection:Clic...

8.6AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/07/04 3:58 a.m.•28 views

Iframe Injection & Blind SQL Injection vulnerability on Apple.com exposed by Idahc(lebanese hacker)

Iframe Injection & Blind SQL Injection vulnerability on Apple.com exposed by Idahclebanese hacker After Sony hacks, Idahclebanese hacker is back to strike Apple.com . He found two vulnerability on as listed below. Iframe Injection : Click here Blind SQL INjection: Click Here Examples of the...

8.4AI score
SaveExploits0
NVD
NVD
•added 2011/07/01 10:55 a.m.•31 views

CVE-2011-2641

Opera 11.11 allows remote attackers to cause a denial of service application crash by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value...

5CVSS7.3AI score0.05445EPSS
SaveExploits2References1
NVD
NVD
•added 2011/07/01 10:55 a.m.•31 views

CVE-2011-2617

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements...

5CVSS7.2AI score0.02234EPSS
SaveExploits1References3
NVD
NVD
•added 2011/07/01 10:55 a.m.•33 views

CVE-2011-2626

Opera before 11.50 allows remote attackers to cause a denial of service application crash by using "injected script" to set the SRC attribute of an IFRAME element...

5CVSS7.3AI score0.02234EPSS
SaveExploits1References3
Prion
Prion
•added 2011/07/01 10:55 a.m.•27 views

Design/Logic Flaw

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements...

5CVSS6.9AI score0.02234EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2011/07/01 10:55 a.m.•23 views

Code injection

Opera before 11.50 allows remote attackers to cause a denial of service application crash by using "injected script" to set the SRC attribute of an IFRAME element...

5CVSS6.9AI score0.02234EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2011/07/01 10:00 a.m.•46 views

CVE-2011-2617

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements...

7.1AI score0.02234EPSS
SaveExploits1References3
CVE
CVE
•added 2011/07/01 10:00 a.m.•67 views

CVE-2011-2626

CVE-2011-2626 affects Opera browsers prior to 11.50, where an injected script could set the SRC attribute of an IFRAME, causing an application crash (DoS). Multiple vendor advisories reiterate the issue and reference Opera’s fixed release paths. Affected: Opera before 11.50; Impact: denial of ser...

5CVSS7.1AI score0.02234EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/07/01 12:00 a.m.•3 views

CVE-2011-2641: Undefined Security Weakness

Opera 11.11 allows remote attackers to cause a denial of service application crash by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value...

5CVSS5.9AI score0.05445EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/07/01 12:00 a.m.•4 views

CVE-2011-2617: Undefined Security Weakness

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements...

5CVSS5.9AI score0.02234EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/07/01 12:00 a.m.•3 views

CVE-2011-2626: Undefined Security Weakness

Opera before 11.50 allows remote attackers to cause a denial of service application crash by using "injected script" to set the SRC attribute of an IFRAME element...

5CVSS5.8AI score0.02234EPSS
SaveExploits1References2
NVD
NVD
•added 2011/06/30 3:55 p.m.•28 views

CVE-2011-2598

The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, and uninitialized data in graphics memory...

4.3CVSS6.5AI score0.013EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2011/06/30 3:55 p.m.•33 views

CVE-2011-2598

The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, and uninitialized data in graphics memory...

4.3CVSS6AI score0.013EPSS
SaveExploits1References3
Prion
Prion
•added 2011/06/30 3:55 p.m.•30 views

Design/Logic Flaw

The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, and uninitialized data in graphics memory...

4.3CVSS7AI score0.013EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2011/06/30 3:26 p.m.•40 views

CVE-2011-2598

The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, and uninitialized data in graphics memory...

6.4AI score0.013EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/06/30 12:00 a.m.•4 views

CVE-2011-2598: Exposure of Sensitive Information to an Unauthorized Actor

The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, and uninitialized data in graphics memory...

4.3CVSS5.9AI score0.013EPSS
SaveExploits1References2
Rows per page
Query Builder