Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation // source: https://www.securityfocus.com/bid/45010/info // // Apple iOS is prone to a local privilege-escalation vulnerability. // // Local attackers running malicious code can exploit this issue to elevate their privileges...

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation

// source: https://www.securityfocus.com/bid/45010/info // // Apple iOS is prone to a local privilege-escalation vulnerability. // // Local attackers running malicious code can exploit this issue to elevate their privileges. Successful attacks will completely compromise an affected device. // int...

Military Cautions Troops About Facebook's Location Revealing Risks

Computer security firms and military personnel have issued warnings about certain Facebook features that could compromise both personal and national security. On Thursday, Sophos, a computer security developer, warned that Facebook's new online messaging service could increase users' vulnerabilit...

CVE-2010-1843

Networking in Apple Mac OS X 10.6.2 through 10.6.4 allows remote attackers to cause a denial of service NULL pointer dereference and system crash via a crafted PIM packet...

Null pointer dereference

Networking in Apple Mac OS X 10.6.2 through 10.6.4 allows remote attackers to cause a denial of service NULL pointer dereference and system crash via a crafted PIM packet...

CVE-2010-1843

Networking in Apple Mac OS X 10.6.2 through 10.6.4 allows remote attackers to cause a denial of service NULL pointer dereference and system crash via a crafted PIM packet...

CVE-2010-1843

CVE-2010-1843 : In Mac OS X 10.6.2–10.6.4, the Networking component mishandles Protocol Independent Multicast (PIM) packets, causing a NULL pointer dereference and a denial of service (system crash) when a crafted PIM packet is received. Affected: Mac OS X 10.6.2–10.6.4. Root cause: NULL pointer ...

Chameleon Social Networking Software Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================================= Chameleon Social Networking Software Persistent XSS Vulnerability ================================================================= Exploit Title: AbleDating script 2010 Critica...

Chameleon Social Networking Software - Persistent Cross-Site Scripting

Chameleon Social Networking Software - Persistent Cross-Site Scripting Exploit Title: AbleDating script 2010 Critical XSS Vulnerability Date: 15.11.2010 Author: Dr-mosta Category: webapps/0day Script url: http://www.abk-soft.com/matchmakingsoftwaredemo.html Version: N/A Tested on: CVE : EXPL0!T I...

Chameleon Social Networking Software - Persistent Cross-Site Scripting

Exploit Title: AbleDating script 2010 Critical XSS Vulnerability Date: 15.11.2010 Author: Dr-mosta Category: webapps/0day Script url: http://www.abk-soft.com/matchmakingsoftwaredemo.html Version: N/A Tested on: CVE : EXPL0!T IL vaut faut inscrire au site apres aller a la partie forum ou par le li...

Fedora 13 : libguestfs-1.6.0-1.fc13.1 (2010-17202)

This update moved from the heavily patched version of stable 1.4 that we offered previously in Fedora 13, to the new stable branch 1.6. Please note the low-risk security problem which is fixed in this release. CVE-2010-3851 libguestfs: missing disk format specifier when adding a disk...

Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities. Mac OS X 10.6.5 contains security fixes for the following products : - AFP Server - Apache modperl - Apache - AppKit - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services -...

OpenJDK HttpURLConnection request splitting (6952017)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

OpenJDK HttpURLConnection request splitting (6952017)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU...

Preemptive Protection against Multiple Microsoft Forefront UAG Cross-Site Scripting Vulnerabilities (MS10-089)

Multiple cross-site scripting vulnerabilities have been reported in Microsoft Forefront Unified Access Gateway UAG. Microsoft Forefront UAG is a virtual private networking solution that provides secure remote access to corporate networks for remote employees and business partners. It incorporates...

Creator Defends FireSheep: App Does More Good Than Harm

One of a pair of developers who created FireSheep, a Firefox browser plug-in that makes it easy to snoop on others’ social networking sessions, has written a blog post defending his creation, saying it has helped elevate discussion about security on the Web. In a post on his blog, Eric Butler, a...

Week in Security: Toorcon and SecTor Wrap-up, Bugs and Stuxnet Stances

Autumn conferences grabbed the headlines this week as presentations at the Toorcon Conference in San Diego and SecTor in Toronto wrapped up October, with revelations about the vulnerability of social networking sessions and critical infrastructure headlining. In San Diego, talks at Toorcon came...

Alstrasoft E-Friends 4.96 Local File Inclusion / Shell Upload / SQL Injection

AlstraSoft E-Friends 4.96 Multiple Remote Vulnerabilities Name AlstraSoft E-Friends Vendor http://www.alstrasoft.com Versions Affected 4.96 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-27 X. INDEX I. ABOUT THE...

Oracle Java SE Multiple Vulnerabilities (Windows)

This host is installed with Oracle Java JDK/JRE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavasemultvulnoct10win.nasl 11742 2010-10-25 15:43:20Z oct$ Oracle Java SE Multiple Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...