551 matches found
Mozilla Foundation Security Advisory 2012-03
Mozilla Foundation Security Advisory 2012-03 Title: iframe element exposed across domains via name attribute Impact: High Announced: January 31, 2012 Reporter: Alex Dvorov Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 10.0 Thunderbird 10.0 SeaMonkey 2.7 Description Alex Dvorov...
CVE-2012-0056 Linux privilege escalation [Video Demonstration]
CVE-2012-0056 Linux privilege escalation Video Demonstration The Linux kernel is prone to a local privilege-escalation vulnerability.Attackers can exploit this issue to gain escalated privileges and execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will resul...
ZDI-10-172: Mozilla Firefox tree Object Removal Remote Code Execution Vulnerability
ZDI-10-172: Mozilla Firefox tree Object Removal Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-172 September 13, 2010 -- CVE ID: CVE-2010-3168 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Mozilla Firefox -- Affected Products: Mozilla Firefox...
UTF-7 XSS by overriding document charset using <object> type attribute — Mozilla
Security researchers David Huang and Collin Jackson of Carnegie Mellon University CyLab Silicon Valley campus reported that the type attribute of an tag can override the charset of a framed HTML document, even when the document is included across origins. A page could be constructed containing su...
NSA Director to Head U.S. Cyber Command
The U.S. Senate has approved Lt. Gen. Keith Alexander, director of the National Security Agency, to also head the military’s recently created U.S. Cyber Command. Read the full article. Computerworld...
Oracle 10g SYS. LT. COMPRESSWORKSPACETREE local injection vulnerability-vulnerability warning-the black bar safety net
Oracle 10g SYS. LT. COMPRESSWORKSPACETREE local injection vulnerability This is slightly modified version of: This is based on cursor injection and does not need create function privileges: DECLARE D NUMBER; BEGIN D := DBMSSQL. OPENCURSOR; DBMSSQL. PARSED,'declare pragma autonomoustransaction;...
Unfixed XSS vulnerability at www.tv24.lt
Security researcher F3nix, has submitted on 03/03/2008 a cross-site-scripting XSS vulnerability affecting www.tv24.lt, which at the time of submission ranked 53817 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently...
Oracle Workspace Manager LT软件包SQL注入漏洞
BUGTRAQ ID: 26098 Oracle Database是一款商业性质大型数据库系统。 Oracle中捆绑的Workspace Manager包含有名为LT的软件包，LT软件包的实现上存在SQL注入漏洞，远程攻击者可能利用此漏洞获取非授权访问。 LT软件包属于SYS用户，可被PUBLIC执行，LT中的FINDRICSET过程调用了LTRIC软件包中的FINDRICSET ，而这个调用过程中存在SQL注入漏洞，允许远程攻击者通过提交恶意的SQL查询请求获得SYS权限。 Oracle Oracle9i Oracle Oracle10g Release 2 Oracle...
PHP chunk_split()函数整数溢出漏洞
PHP是一种流行的WEB服务器端编程语言。 PHP中的chunksplit函数在处理畸形参数时存在整数溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 PHP中chunksplit函数的1963行试图为函数结果分配充分的内存大小，但没有执行任何检查便使用了srclen和chunklen参数块。如果值的块和endlen大于65534字节的话，就会触发整数溢出，分配错误的内存大小，导致堆溢出。 ext/standard/string.c： 1953 static char phpchunksplitchar src, int srclen, char end, int endlen, in...
TSEP <= 0.942 (colorswitch.php) Remote Inclusion Vulnerability
No description provided by source. Script: TSEP = 0.942 URL: www.tsep.info Discovered: beford xbefordx gmail com Comments: "registerglobals" must be enabled duh. document.this != http://www.milw0rm.com/exploits/2098 Vulnerable Files/Code:...
