2780 matches found
sip-call-spoof NSE Script
Spoofs a call to a SIP phone and detects the action taken by the target busy, declined, hung up, etc. This works by sending a fake sip invite request to the target phone and checking the responses. A response with status code 180 means that the phone is ringing. The script waits for the next...
[CAL-2012-0015] opera website spoof
CAL-2012-0015 opera website spoof CVE ID: Opera did not assign ,please [email protected] assign CAL ID: CAL-2012-0015 ref: http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-0015-opera-website-spoof/ 1 Affected Products ================= 11.61 and prior 2 Vulnerability Details ===================...
Pages can prevent navigation to a target page, spoofing the address field – Opera Security Advisories
When a user types a new URL for the browser to load, the currently active page may detect when the new page is about to load and prevent the navigation, while still leaving the new URL displayed in the address bar. This can then be used to spoof the URL of the target page. The malicious page woul...
Design/Logic Flaw
Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Flame Malware Spread Via Rogue Microsoft Security Certificates
Flame Malware Spread Via Rogue Microsoft Security Certificates Microsoft released an emergency Windows update on Sunday after revealing that one of its trusted digital signatures was being abused to certify the validity of the Flame malware that has infected computers in Iran and other Middle...
Yahoo Includes Private Key in Source File For Axis Chrome Extension
Yahoo on Wednesday launched a new browser called Axis and researchers immediately discovered that the company had mistakenly included its private signing key in the source file, a serious error that would allow an attacker to create a malicious, signed extension for a browser that the browser wil...
PT-2012-2920
Name of the Vulnerable Software and Affected Versions PostgreSQL versions 8.4.x through 8.4.10 PostgreSQL versions 9.0.x through 9.0.6 PostgreSQL versions 9.1.x through 9.1.2 Description The issue allows remote attackers to spoof connections when the host name is exactly 32 characters, due to the...
PT-2012-2824
Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions 5.x and 8.x before 8.5.0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, due to the Enterprise Console client not...
Information disclosure
The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2012-0479
Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid 1 RSS or 2 Atom XML content...
CVE-2011-3061
Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...
CVE-2012-1927
Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window associated with a different domain...
CVE-2012-1928
Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect to a different domain...
Safari For Windows 5.1.5 URL window.open() Spoof
Safari for windows 5.1.5 and prior URL window.open spoof Vendor URL: http://www.apple.com Advisore: http://lostmon.blogspot.com/2012/03/safari-for-windows-515-and-prior-and.html Vendor Notify: YES Exploit available: YES History: Safari has a serious issues with protocol handlers, for long times i...
Opera < 11.62 Multiple Vulnerabilities
Binary data 800859.prm...
PT-2012-3660
Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows remote attackers to spoof the address field. This is achieved by triggering a page reload followed by a redirect to a different domain. Recommendations For Opera versions prior to 11.6...
Carefully timed reloads and redirects can spoof the address field – Opera Security Advisories
The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site’s address, while the attacking site is still...
Puppet: Multiple vulnerabilities
Background Puppet is a system configuration management tool written in Ruby. Description Multiple vulnerabilities have been discovered in Puppet. Please review the CVE identifiers referenced below for details. Impact A local attacker could gain elevated privileges, or access and modify arbitrary...
CVE-2012-0867
PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters...
