CVE-2010-3325

CVE-2010-3325 affects Microsoft Internet Explorer 6–8. It is an information-disclosure vulnerability in how IE processes CSS special characters, enabling a crafted web page to disclose content from another domain/IE zone. Attack would require the user to view a malicious page; impact is informati...

Cross-domain checks may be bypassed, allowing limited data theft using CSS – Opera Security Advisories

Cross-domain checks may be bypassed, allowing limited data theft using CSS – Opera Security Advisories OPCOM Team | October 6, 2010 Severity Moderate Description CSS can be loaded cross-domain. In some cases, files that do not contain CSS may be partially interpreted as CSS. It is possible to mak...

Syscan

Asia One of Asia’s premiere security events, Syscan pitches its tent in some of the current and emerging IT capitals in the region, including Singapore, Hangzhou, Taipei, and Ho Chi Minh City with top tier security researchers, Black Hat style presentations, a capture the flag tournament and more...

TradeMC E-Ticaret - SQL Injection Cross-Site Scripting

TradeMC E-Ticaret - SQL Injection Cross-Site Scripting =================================================== TradeMC E-Ticaret - SQLi/XSS Multiple Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Special Thanks : H4x0re Securit...

gokhun asp stok 1.0 - Multiple Vulnerabilities

============================================ Gokhun ASP Stok v1.0 - Multiple Remote Vulnerabilities ============================================ My + Author : KnocKout + Greatz : DaiMon Contact : [email protected] Software info Script : Gokhun ASP Stok v1.0 Software: http://www.gokhun.com &...

CVE-2010-1823

Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger use of document APIs such as document.close during parsing, as demonstrated by ...

Microsoft Internet Explorer 'toStaticHTML()' XSS Vulnerability

Internet Explorer is prone to a cross-site scripting XSS vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.901162. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Apple Safari Webkit Button First-Letter Style Rendering Code Execution (CVE-2010-1392)

Safari is a web browsing application developed by Apple. Safari browsing functionality is built around the set of components called WebKit. WebKit is a development toolkit which allows third party developers to build applications that use Internet technologies such as HTML, HTTP, and others. A...

Fedora Update for libHX FEDORA-2010-13155

Check for the Version of libHX OpenVAS Vulnerability Test Fedora Update for libHX FEDORA-2010-13155 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for libHX FEDORA-2010-13127

Check for the Version of libHX OpenVAS Vulnerability Test Fedora Update for libHX FEDORA-2010-13127 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Nasty Data-Stealing Bug Haunts Internet Explorer 8

There’s an unpatched vulnerability in Internet Explorer 8 that enables simple data-stealing attacks by Web-based attackers and could lead to an attacker hijacking a user’s authenticated session on a third-party site. The flaw, which a researcher said may have been known since 2008, lies in the wa...

Apple WebKit / Safari DoS

Crash on SGV style parameters parsing...

Living Local V1.2 (pHbypass) Insecure Cookie Handling

Exploit for php platform in category web applications ===================================================== Living Local V1.2 pHbypass Insecure Cookie Handling ===================================================== Author : KnocKout Thankz.: DaiMon, Cyber-Warriorz. Contact: email protected Script...

Apple Webkit Button First-Letter Style Rendering Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. Authentication is not required to exploit this vulnerability. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope...

Apple Safari Webkit SVG First-Letter样式远程代码执行漏洞

BUGTRAQ ID: 42037 CVE ID: CVE-2010-1785 Safari是苹果家族机器操作系统中默认捆绑的WEB浏览器。 Safari的Webkit没有正确地实现SVG文本元素上下文中的first-letter样式，在将该样式应用到这个元素时首先会计算高度以判断 inline box的溢出。在遍历高度元素时，函数库会使用来自不存在linebox的数据。成功攻击会导致执行任意代码。 Apple Safari 5.x Apple Safari 4.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-1784

The counters functionality in the Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of servi...

CVE-2010-1784

The counters functionality in the Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of servi...

MDVA-2010:023 : kde4-style-iaora

The last iaora update introduced a litlle regression in some IaOra color schemes, like Iaora-Gray, this new package is correcting this. Also in iaora, the application's name in the titlebar wasn't correctly centered. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associat...

MDVA-2010:127 : kde4-style-iaora

This is the latest IaOra package, with fixes for some issues: - ability to align window titles to left bug 57056 - Date field on kontact calendar - New event is too small 55699 - Two bugs on IaOra colors on lists 56883 and 57079 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as...

Mandriva Linux Security Advisory : kdelibs4 (MDVSA-2010:027)

Multiple vulnerabilities was discovered and corrected in kdelibs4 : KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '' NUL character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL...