2600 matches found
CVE-2009-2087: Undefined Security Weakness
The Web Services functionality in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial ...
[CSS09-01] SlideShowPro Director File Disclosure Vulnerability
CSS09-01: SlideShowPro Director File Disclosure Vulnerability August 5, 2009 SUMMARY SlideShowPro Director is vulnerable to a file disclosure flaw because it fails to perform proper validation and handling of input parameters. Attackers can exploit this vulnerability to read arbitrary files from...
Sguil/PADS SQL Injection / Crash
Sguil/PADS SQL injection and server crash exploit by Ataraxia Benjamin Rose Public announcement made 7/15/09. Please visit http://allmybase.com/ my blog for more up-to-date information, and a quick patch. This exploit has the ability to render any Intrusion Detection System utilizing the sguil...
TekRADIUS Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nth Dimension Security Advisory NDSA20090412 Date: 12th April 2009 Author: Tim Brown URL: / Product: TekRADIUS 3.0 Vendor: Yasin KAPLAN Risk: Medium Summary This advisory comes in 3 related parts: 1 By default, TekRADIUS connects to SQL Server as the ...
Conficker worm continues to evolve, confound researchers
The Conficker worm has been wreaking havoc on the Internet for several months now, and despite the concerted efforts of dozens of security organizations around the world, it is showing no signs of fading. A new analysis of Conficker by SRI International shows that the worm’s authors have added...
Dogfood CRM 2.0.10 spell.php Command Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Firefox 3.0.5 Status Bar Obfuscation / Clickjacking
No description provided by source. Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =========================================== html body div id="mydiv" onmouseover="document.location='http://www.milw0rm.com';" style="position:absolute;width:2px;height:2px;background:FFFFFF;border:0px"/div...
CVE-2009-0253
Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Status Bar Obfuscation" and "Clickjacking" attack...
CVE-2009-0253: Undefined Security Weakness
Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Status Bar Obfuscation" and "Clickjacking" attack...
Firefox 3.0.5 Status Bar Obfuscation / Clickjacking
Exploit for unknown platform in category remote exploits =================================================== Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =================================================== function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX;...
Mozilla Firefox 3.0.5 - Status Bar Obfuscation / Clickjacking
Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =========================================== function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'mydiv'.style.left=mouseX-1;...
Firefox 3.0.5 Status Bar Obfuscation / Clickjacking
Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =========================================== function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'mydiv'.style.left=mouseX-1;...
Mozilla Firefox 3.0.5 - Status Bar Obfuscation Clickjacking
Mozilla Firefox 3.0.5 - Status Bar Obfuscation Clickjacking Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =========================================== function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY;...
Updated: Google Chrome 0.4.154.25 URI Meta Character URL Obfuscation
Hi All The Google chrome new version 0.4.154.25 is also suffering from this vulnerability.The full POC have been released at milw0rm. Have a look at it: http://milw0rm.com/exploits/7226 The problem is this most of web servers have anti viruses which treated it as URL Spoofing virus. Anyways the P...
Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability
No description provided by source. html titleGoogle Chrome MetaCharacter URI Obfuscation Vulnerability./title head/head bodybrbr h2centerGoogle Chrome MetaCharacter URI Obfuscation Vulnerability.brbrC SecNiche Security / Proof of Concept/br/br /center/h2 center bBy:- Aditya K Sood./bbrbr hr/hr...
Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability
Exploit for unknown platform in category dos / poc ================================================================= Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability ================================================================= Google Chrome MetaCharacter URI Obfuscation...
Google Chrome - MetaCharacter URI Obfuscation
Google Chrome - MetaCharacter URI Obfuscation Google Chrome MetaCharacter URI Obfuscation Vulnerability. Google Chrome MetaCharacter URI Obfuscation Vulnerability.C SecNiche Security / Proof of Concept By:- Aditya K Sood. This POC has been designed with minimum object usage. This can be made more...
Google Chrome MetaCharacter URI Obfuscation Vulnerability
Advisory: Google Chrome MetaCharacter URI Obfuscation Vulnerability. Version Affected: All Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Description: Google chrome is vulnerable to URI Obfuscation vulnerability. An attacker can easily perform malicious redirection by manipulating the...
Google Chrome - MetaCharacter URI Obfuscation
Google Chrome MetaCharacter URI Obfuscation Vulnerability. Google Chrome MetaCharacter URI Obfuscation Vulnerability.C SecNiche Security / Proof of Concept By:- Aditya K Sood. This POC has been designed with minimum object usage. This can be made more critical dependent on the object usage. Check...
