Mozilla: window.fullScreen writeable by untrusted content (MFSA 2012-18)

Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a craft...

Fake Chat Screen Malware Hijacks Banking Customers

A new attack against online banking customers uses a malware platform to trick its victims into verifying bogus transactions. The attack, first described by Trusteer CTO Amit Klein, waits for an unsuspecting business banking customer to log online before telling them that “security checks” need t...

iOS 5 Flaw Allows Unfettered Access to User's Contacts, Calls

A passcode flaw in Apple’s iOS 5 could allow unauthorized access to an iPhone user’s contacts list, recent calls, voicemail, text messages and more, according to a recent blog post from CultofMac.com. The post cites a vulnerability discovered by Safwan Saba of iPhoneIslam where the phone’s missed...

Gentoo Security Advisory GLSA 201201-16 (xkeyboard-config xorg-server)

The remote host is missing updates announced in advisory GLSA 201201-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201201-16 (xkeyboard-config xorg-server)

The remote host is missing updates announced in advisory GLSA 201201-16. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

PeerBlock 1.1 - Blue Screen of Death

PeerBlock 1.1 - Blue Screen of Death -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ======================================================================================================= =======================================================================================================...

GLSA-201201-16 : X.Org X Server/X Keyboard Configuration Database: Screen lock bypass

The remote host is affected by the vulnerability described in GLSA-201201-16 X.Org X Server/X Keyboard Configuration Database: Screen lock bypass Starting with the =x11-base/xorg-server-1.11 package, the X.Org X Server again provides debugging functionality that can be used terminate an applicati...

X.Org X Server/X Keyboard Configuration Database: Screen lock bypass

Background The X Keyboard Configuration Database provides keyboard configuration for various X server implementations. Description Starting with the =x11-base/xorg-server-1.11 package, the X.Org X Server again provides debugging functionality that can be used terminate an application that...

Xpra memory disclosure

Xpra is screen for X11. This is the fork located at: http://xpra.org/ Xpra versions 0.0.7.28 r191 through to 0.0.7.34 r443 return random chunks of memory to the clients by using the wrong size multiplying by 4 for the X11 cursor memory buffer. from XFixesGetCursorImage The byte order of the data...

Fedora 16 : xkeyboard-config-2.3-3.fc16 (2012-0712)

The previous version of xkeyboard-config included the key combinations to clear and/or kill grabs in the default keymap. This enabled users to get around screen locks that use grabs to prevent input to other applications e.g. gnome-screensaver. This update moves the definition of the key...

Hyper-V CSV Backup - Blue Screen

Challenge During Hyper-V backup via CSV, a node in Hyper-V connected to the CSV shows Blue Screen error and crashes. Cause This is a known Microsoft error requiring updates. Solution Apply hotfixes mentioned in these articles to resolve this behavior. http://support.microsoft.com/kb/2494162...

Windows 7 64 bit Memory Corruption Vulnerability

Windows 7 64 bit Memory Corruption Vulnerability A person known by the alias of "w3bd3vil " on twitter released an HTML snippet that will cause the 64 bit version of Windows 7 to blue screen if viewed under Safari. The underlying vulnerability is however not a flaw in Safari but rather a flaw in...

Apple Safari - GdiDrawStream Blue Screen of Death

Exploit Title: GdiDrawStream BSoD Date: 18-12-2011 Author: webDEViL Version: Latest Tested on: Windows 7 x64 using Safari http://twitter.com/w3bd3vil ------ STACKTEXT: fffff88008b50f78 fffff8000328e3bf : 0000000000000050 fffff904c2730258 0000000000000001 fffff88008b510e0 : nt!KeBugCheckEx...

Apple Safari - GdiDrawStream Blue Screen of Death

Apple Safari - GdiDrawStream Blue Screen of Death Exploit Title: GdiDrawStream BSoD Date: 18-12-2011 Author: webDEViL Version: Latest Tested on: Windows 7 x64 using Safari http://twitter.com/w3bd3vil ------ STACKTEXT: fffff88008b50f78 fffff8000328e3bf : 0000000000000050 fffff904c2730258...

Apple iOS 7.x < 7.0.3 Multiple Vulnerabilities

Binary data 8057.prm...

Titan FTP Server 8.40 Denial Of Service

!/usr/bin/python Exploit Title : Titan FTP Server 8.40 DoS Kernel Crash Date: 25/11/2011 Author: Houssam Sahli Software Link trial version : http://southrivertech.com/software/demosoft/titanftp.exe Version: 8.40 Developed by : South River Technologies, Inc. Tested on: Windows XP SP3 French...

Titan FTP Server 8.40 - 'APPE' Remote Denial of Service

source: https://www.securityfocus.com/bid/50819/info Titan FTP Server is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the affected FTP server, denying service to legitimate users. Titan FTP Server 8.40 is vulnerable; other versions may...

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station Norwegian company FXI Technologies has been showing a USB stick-sized portable computer prototype, featuring with a dual-core 1.2-GHz CPU, 802.11n Wi-Fi, Bluetooth, HDMI-out and a microSD card slot for memory...

Microsoft Winows 7 - Keyboard Layout Blue Screen of Death (MS10-073)

Microsoft Winows 7 - Keyboard Layout Blue Screen of Death MS10-073 //Crash: / win7 Access violation - code c0000005 !!! second chance !!! win32k!ReadLayoutFile+0x62: 9566d591 8b4834 mov ecx,dword ptr eax+34h kd r eax=ffffffe8 ebx=00000000 ecx=fe978b2e edx=000000e0 esi=fe4e0168 edi=00000000...

Microsoft Winows 7 - Keyboard Layout Blue Screen of Death (MS10-073)

//Crash: / win7 Access violation - code c0000005 !!! second chance !!! win32k!ReadLayoutFile+0x62: 9566d591 8b4834 mov ecx,dword ptr eax+34h kd r eax=ffffffe8 ebx=00000000 ecx=fe978b2e edx=000000e0 esi=fe4e0168 edi=00000000 eip=9566d591 esp=985ad8a0 ebp=985ad8bc iopl=0 nv up ei pl nz ac pe cy...