Conficker worm continues to evolve, confound researchers

The Conficker worm has been wreaking havoc on the Internet for several months now, and despite the concerted efforts of dozens of security organizations around the world, it is showing no signs of fading. A new analysis of Conficker by SRI International shows that the worm’s authors have added...

Dogfood CRM 2.0.10 spell.php Command Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Firefox 3.0.5 Status Bar Obfuscation / Clickjacking

No description provided by source. Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =========================================== html body div id="mydiv" onmouseover="document.location='http://www.milw0rm.com';" style="position:absolute;width:2px;height:2px;background:FFFFFF;border:0px"/div...

CVE-2009-0253

Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Status Bar Obfuscation" and "Clickjacking" attack...

Mozilla Firefox 3.0.5 - Status Bar Obfuscation Clickjacking

Mozilla Firefox 3.0.5 - Status Bar Obfuscation Clickjacking Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =========================================== function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY;...

Firefox 3.0.5 Status Bar Obfuscation / Clickjacking

Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =========================================== function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'mydiv'.style.left=mouseX-1;...

Firefox 3.0.5 Status Bar Obfuscation / Clickjacking

Exploit for unknown platform in category remote exploits =================================================== Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =================================================== function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX;...

Mozilla Firefox 3.0.5 - Status Bar Obfuscation / Clickjacking

Firefox 3.0.5 Status Bar Obfuscation / Clickjacking =========================================== function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'mydiv'.style.left=mouseX-1;...

Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability

No description provided by source. html titleGoogle Chrome MetaCharacter URI Obfuscation Vulnerability./title head/head bodybrbr h2centerGoogle Chrome MetaCharacter URI Obfuscation Vulnerability.brbrC SecNiche Security / Proof of Concept/br/br /center/h2 center bBy:- Aditya K Sood./bbrbr hr/hr...

Updated: Google Chrome 0.4.154.25 URI Meta Character URL Obfuscation

Hi All The Google chrome new version 0.4.154.25 is also suffering from this vulnerability.The full POC have been released at milw0rm. Have a look at it: http://milw0rm.com/exploits/7226 The problem is this most of web servers have anti viruses which treated it as URL Spoofing virus. Anyways the P...

Google Chrome - MetaCharacter URI Obfuscation

Google Chrome - MetaCharacter URI Obfuscation Google Chrome MetaCharacter URI Obfuscation Vulnerability. Google Chrome MetaCharacter URI Obfuscation Vulnerability.C SecNiche Security / Proof of Concept By:- Aditya K Sood. This POC has been designed with minimum object usage. This can be made more...

Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability

Exploit for unknown platform in category dos / poc ================================================================= Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability ================================================================= Google Chrome MetaCharacter URI Obfuscation...

Google Chrome MetaCharacter URI Obfuscation Vulnerability

Advisory: Google Chrome MetaCharacter URI Obfuscation Vulnerability. Version Affected: All Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Description: Google chrome is vulnerable to URI Obfuscation vulnerability. An attacker can easily perform malicious redirection by manipulating the...

Google Chrome - MetaCharacter URI Obfuscation

Google Chrome MetaCharacter URI Obfuscation Vulnerability. Google Chrome MetaCharacter URI Obfuscation Vulnerability.C SecNiche Security / Proof of Concept By:- Aditya K Sood. This POC has been designed with minimum object usage. This can be made more critical dependent on the object usage. Check...

Email Address Obfuscated Within HTML Comments

Binary data 4710.prm...

Gentoo Security Advisory GLSA 200407-15 (opera)

The remote host is missing updates announced in advisory GLSA 200407-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200407-15 (opera)

The remote host is missing updates announced in advisory GLSA 200407-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

runcms-overwrite.txt

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

Microsoft ActiveSync弱口令混淆信息泄露漏洞

BUGTRAQ ID: 25976 CVECAN ID: CVE-2007-5460 Microsoft ActiveSync是用于同步计算机与PDA的应用程序。 ActiveSync设备建立连接口令交换的过程实现上存在漏洞，攻击者可能利用此漏洞获取口令信息。 插入到USB口时设备会使用类似于标准网络接口的连接，获得IP地址后设备会通过RAPI在990/TCP端口初始化与主机的通讯，这个过程也会经历一个小型的握手例程，如果合适的话，会对主机挑战设备PIN或口令。用户提供了主机的PIN/口令后，会通过XOR与E9固定密钥进行混淆，然后通过USB网络连接发送给设备进行验证。...

PT-2007-6496 · Microsoft · Activesync

Name of the Vulnerable Software and Affected Versions: Microsoft ActiveSync version 4.1 Description: The issue concerns the use of weak encryption, specifically XOR obfuscation with a fixed key, when sending the user's PIN/Password over the USB connection from the host to the device. This might...