Apple Safari / WebKit protection bypass

Integer overflow allows to bypass destination port limitations...

Cross-site scripting cookie theft

Added: 03/09/2010 Background Many web sites include scripts, which are lists of commands which, when executed in sequence, provide some enhancement to a web page. Web browsers are able to recognize scripts in web pages by the tag and handle them accordingly. Problem By sending an HTTP request...

Security Best Practice: Protect Yourself from Multiple IMAP Vulnerabilities

The Internet Message Access Protocol IMAP is one of the two most prevalent Internet standard protocols for e-mail retrieval, the other being the Post Office Protocol POP.Virtually all modern e-mail clients and mail servers support both protocols as a means of transferring e-mail messages from a...

Security Best Practice: Protect Yourself from Multiple SMTP Vulnerabilities

Simple Mail Transfer Protocol SMTP is an Internet standard for electronic mail e-mail transmission across Internet Protocol IP networks. SMTP is specified for outgoing mail transport and uses TCP port 25. There are several serious security limitations with the SMTP protocol that allow malicious...

NTP mode 7 denial-of-service vulnerability

Overview NTP contains a vulnerability in the handling of mode 7 requests, which can result in a denial-of-service condition. Description NTP mode 7 MODEPRIVATE is used by the ntpdc query and control utility. In contrast, ntpq uses NTP mode 6 MODECONTROL, while routine NTP time transfers use modes...

Bruce Schneier On Identification-Based Security

Security expert Bruce Schneier discusses the problems and limitations of identification-based security, from driver’s licenses to national ID cards and the REAL ID program...

Break IE security restrict access to the iframe sub-frame within the local cookie-vulnerability warning-the black bar safety net

Source: aullik5 Today this article is mainly to say the following so a few things: 1. iframe limitations 2. Break the iframe to get the local cookie ideas 3. Use Cross Iframe Trick breakthrough iframe security restrictions My test environment is: IE 7 7.0.5730.13 All of the following content all...

Novell Client NetIdentity Agent XTIERRPCPIPE pointer dereference vulnerability

Added: 07/24/2009 CVE: CVE-2009-1350 BID: 34400 OSVDB: 53351 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem A vulnerability in the xtagent.exe program allows remote, authenticated attackers to execute arbitrary commands by sending a specially crafted...

Find Metadata

Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...

Find Metadata

Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...

Password Hash Grabber

Added: 05/27/2009 Background This tool grabs the windows SAM file or password hashes of the target. The SAM file / password hashes can be viewed in the exploit tools previous results section. Results may be used with third party programs to obtain passwords in plain text. Limitations Password Has...

MySQL password weakness

Added: 05/11/2009 Background MySQL is an open-source database software package available for multiple platforms. Problem A MySQL database account has no password or an easily guessed password, allowing a remote attacker to make unauthorized queries. Resolution Set a strong password for all MySQL...

MySQL password weakness

Added: 05/11/2009 Background MySQL is an open-source database software package available for multiple platforms. Problem A MySQL database account has no password or an easily guessed password, allowing a remote attacker to make unauthorized queries. Resolution Set a strong password for all MySQL...

MySQL password weakness

Added: 05/11/2009 Background MySQL is an open-source database software package available for multiple platforms. Problem A MySQL database account has no password or an easily guessed password, allowing a remote attacker to make unauthorized queries. Resolution Set a strong password for all MySQL...

CVE-2008-6792

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully condu...

Symantec Alert Management System Intel File Transfer service command execution

Added: 05/06/2009 CVE: CVE-2009-1431 BID: 34675 OSVDB: 54160 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. The Intel File Transfer service is a component of AMS2 which is used to aid communication between the core server and managed clients. It...

Apollo 37zz - .m3u Local Heap Overflow (PoC)

Apollo 37zz - .m3u Local Heap Overflow PoC !/usr/bin/perl Apollo 37zz .M3U File Local Heap Overflow PoC Found By : Cyber-Zone ABDELKHALEK E-mail : [email protected] Home : WwW.IQ-TY.CoM , WwW.No-Exploit.CoM Greetz to: Hussin X , Jiko , ZoRLu , Stack ,Nabilx , Mag!c ompo , And All MoroCCaN...

Ubuntu Update for icu vulnerabilities USN-591-1

Ubuntu Update for Linux kernel vulnerabilities USN-591-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5911.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for icu vulnerabilities USN-591-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for pidgin vulnerabilities USN-675-1

Ubuntu Update for Linux kernel vulnerabilities USN-675-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6751.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for pidgin vulnerabilities USN-675-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Keystroke Logger

Added: 03/05/2009 Background This tool records all keystrokes which are typed at a computer's console. The keystrokes can be viewed in the exploit server's log. Limitations Logger works on Windows targets. A connection to the target is required to run this tool. Platforms Windows...