CORS requests can incorrectly retrieve contents of cross origin pages

CORS Cross-Origin Resource Sharing allows web pages to retrieve the contents of pages from other sites, with their permission, as they would appear for the current user. When requests are made in this way, the browser should only allow the page content to be retrieved if the target site sends the...

http-cors NSE Script

Tests an http server for Cross-Origin Resource Sharing CORS, a way for domains to explicitly opt in to having certain methods invoked by another domain. The script works by setting the Access-Control-Request-Method header field for certain enumerated methods in OPTIONS requests, and checking the...

Fedora Core 12 FEDORA-2009-11487 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-11487. OpenVAS Vulnerability Test $Id: fcore200911487.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11487 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Fedora Core 10 FEDORA-2009-11488 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-11488. OpenVAS Vulnerability Test $Id: fcore200911488.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11488 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Fedora Core 11 FEDORA-2009-11491 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-11491. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 10 : qt-4.5.3-9.fc10 (2009-11488)

A security flaw was found in the WebKit's Cross-Origin Resource Sharing CORS implementation. Multiple security flaws integer underflow, invalid pointer dereference, buffer underflow and a denial of service were found in the way WebKit's FTP parser used to process remote FTP directory listings. No...

Fedora 12 : qt-4.5.3-9.fc12 (2009-11487)

A security flaw was found in the WebKit's Cross-Origin Resource Sharing CORS implementation. Multiple security flaws integer underflow, invalid pointer dereference, buffer underflow and a denial of service were found in the way WebKit's FTP parser used to process remote FTP directory listings. No...

Cross site request forgery (csrf)

The implementation of Cross-Origin Resource Sharing CORS in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to...

CVE-2009-2816

The implementation of Cross-Origin Resource Sharing CORS in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to...

CVE-2009-2816

The implementation of Cross-Origin Resource Sharing CORS in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to...

CVE-2009-2816

Technical details for CVE-2009-2816 are not provided in the connected documents. The materials mention WebKit/CORS context and related products, but no concrete exploit specifics, impacted versions, or fixes are included. Monitor for updates.

CVE-2009-2816

The implementation of Cross-Origin Resource Sharing CORS in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to...

Mac OS X : Apple Safari < 4.0.4

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.4. As such, it is potentially affected by several issues : - Multiple use-after-free issues exist in libxml2, the most serious of which could lead to a program crash. CVE-2009-2414, CVE-2009-2416 - An issue in t...

Safari < 4.0.4 Multiple Vulnerabilities

Binary data 801003.prm...

Safari < 4.0.4 Multiple Vulnerabilities

Binary data 5232.prm...

User about antivirus real-time monitoring and memory antivirus-vulnerability warning-the black bar safety net

Antivirus real-time monitoring with in-memory scanning is a thing? Of course not. If not, then they have what is the difference? In General, real-time monitoring is mainly to monitor the virus on the hard disk of the rewrite operation, the memory scan is mainly scans the memory of all processes a...

Hack how to implement network overload attack completely resolves-bug warning-the black bar safety net

In network overload attack, a shared resource or service due to the need to process large amounts of request that cannot be met from other users of the arrival of the request. For example, a user generates a lot of processes, then other users cannot run own processes. If a user uses a lot of...

Hummingbird Connectivity FTP Service XCWD Command Overflow

The remote host is running the Hummingbird Connectivity FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. This problem allows an attacker to prevent the remote site from sharing some resources with the rest of the world...