Apple QuickTime mvhd Atom Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2010-0664

Google Chrome prior to version 4.0.249.78 is affected by a stack consumption vulnerability in ChildProcessSecurityPolicy::CanRequestURL. The issue allows remote attackers to trigger memory consumption and a crash by supplying a URL that uses multiple protocols (e.g., repeated view-source: sequenc...

DCP-Portal 6.0 - '/admin/inc/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of the...

Byshell Backdoor:no process without DLL no disk file-the vulnerability warning-the black bar safety net

For readers: invasion enthusiasts, network administrators, black Controller fans Pre-knowledge: C basic syntax Liu stream: the back door is the hackers of the eternal topic in each big website such as the 1 6 3, Yahoo, Peking University, etc. have been black after that, more and more people began...

Linux kernel in/out ports access

Mask for input/output permissions is not cleared for child process. It may lead to unauthorized access to i/o ports...

Console Root On OSX up to 10.2.8

On all versions of OSX up to and including 10.2.7 and possibly 10.2.8, init can be crashed using a USB keyboard by holding down CTRL-C immediately after boot, and keeping it held down. Init crashes two or three minutes into the boot process and drops you into a root shell. At this point, you can ...

bypass.viruscheck.txt

Greetings All, I originally released this vulnerability over the Christmas holidays on NTBugTraq. I spoke with a member of the Security Focus staff about getting it onto the web site and was told that I should post the problem here. During our conversation we decided that I hadn't been clear in m...