Apple Safari iPhone/iPod touch Malformed Webpage Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38994/info Apple Safari running on iPhone and iPod touch is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the...

Apple Safari for iPhone/iPod touch Malformed 'Throw' Exception Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38992/info Apple Safari on iPhone and iPod touch is prone to a remote code-execution vulnerability. Successful exploits can allow an attacker to run arbitrary code in the context of the user running the application. Faile...

iOS <= 5.1.1 Safari Browser - JS match(), search() Crash PoC

No description provided by source. !/usr/bin/env ruby - Title iOS = v5.1.1 Safari Browser JS match, search Crash PoC - Author Alberto Ortega @a0rtega [email protected] - Summary A vulnerability has been discovered in Apple Safari Browser included in the last version of iOS 5.1.1. Previous...

iOS Share 1.0 - Directory Traversal

No description provided by source. Exploit Title: Share v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350671847?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS...

How To Jailbreak iOS 7.1 And 7.1.1 Untethered Using 'Pangu' Jailbreak Tool

Quite Surprisingly, a team of Chinese hackers, Pangu have released an untethered jailbreak for iOS 7.1 and iOS 7.1.1. This untethered jailbreak is compatible with iPhone 5s, iPhone 5c, iPhone 4S, iPhone 4, iPad Air, iPad 4, iPad 3, iPad 2, iPad mini, Retina iPad mini and iPod touch 5G running iOS...

CVE-2014-0206

Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...

CVE-2014-4303

Multiple cross-site scripting XSS vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the 1 Twitter and 2 Facebook username settings...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the 1 Twitter and 2 Facebook username settings...

CVE-2014-4303

Multiple cross-site scripting XSS vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the 1 Twitter and 2 Facebook username settings...

CVE-2014-4303

CVE-2014-4303 affects the Drupal Touch theme (7.x-1.x) prior to 7.x-1.9. The vulnerability arises because the theme does not sufficiently sanitize input for Twitter and Facebook username settings, enabling cross-site scripting (XSS) by authenticated administrators with the Administer themes permi...

openSUSE Security Update : roundcubemail (openSUSE-SU-2013:1420-1)

roundcubemail was updated to version 0.9.3 bnc837436 CVE-2013-5645 - Optimized UI behavior for touch devices - Fix setting refreshinterval to 'Never' in Preferences - Fix purge action in folder manager - Fix base URL resolving on attribute values with no quotes - Fix wrong handling of links with...

SA-CONTRIB-2014-059 - Touch Theme - Cross Site Scripting (XSS)

Touch Theme is a light weight theme with modern look and feel. The theme does not sufficiently sanitize theme settings input for Twitter and Facebook username. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Administer themes". CVE identifiers...

Microsoft Windows - Touch Injection API Local Denial of Service

Microsoft Windows - Touch Injection API Local Denial of Service // source: https://www.securityfocus.com/bid/67742/info Microsoft Windows is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to crash the affected computer, denying service to legitimate user...

Microsoft Windows - Touch Injection API Local Denial of Service

// source: https://www.securityfocus.com/bid/67742/info Microsoft Windows is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to crash the affected computer, denying service to legitimate users. ifndef WIN32NOSTATUS define WIN32NOSTATUS endif include inclu...

CVE-2014-1737

The rawcmdcopyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device...

CMS Touch 2.01 Cross Site Scripting / SQL Injection

cms touch V2.01 Sql Vulnerability ================================= Author : indoushka vendor : http://cmstouch.com ================================= Dork : powered by cmstouch نظام تاتش لإدارة المواقع الإلكترونية النسخة 2.01 http://alfarrajsite.com/cmstouch/pages.php?PageID=28 inject here...

CMS Touch - pages.php?Page_ID SQL Injection

CMS Touch - pages.php?PageID SQL Injection source: https://www.securityfocus.com/bid/67377/info CMS Touch is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the...

CMS Touch - news.php?News_ID SQL Injection

CMS Touch - news.php?NewsID SQL Injection source: https://www.securityfocus.com/bid/67377/info CMS Touch is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the...

CMS Touch - 'pages.php?Page_ID' SQL Injection

source: https://www.securityfocus.com/bid/67377/info CMS Touch is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit...

CMS Touch - 'news.php?News_ID' SQL Injection

source: https://www.securityfocus.com/bid/67377/info CMS Touch is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit...