iOS Safari - Remote DoS

No description provided by source. Exploit Title: Remote DoS on Safari for iPhone & iPod Touch Date: 26/03/2010 Author: Nishant Das Patnaik For more of Nishant's research, please visit: http://nishantdaspatnaik.yolasite.com/research.php Tested on: iPod Touch 3G iPhone OS 3.1.3 Description: An...

iOS Share 1.0 - Directory Traversal

No description provided by source. Exploit Title: Share v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350671847?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS...

How To Jailbreak iOS 7.1 And 7.1.1 Untethered Using 'Pangu' Jailbreak Tool

Quite Surprisingly, a team of Chinese hackers, Pangu have released an untethered jailbreak for iOS 7.1 and iOS 7.1.1. This untethered jailbreak is compatible with iPhone 5s, iPhone 5c, iPhone 4S, iPhone 4, iPad Air, iPad 4, iPad 3, iPad 2, iPad mini, Retina iPad mini and iPod touch 5G running iOS...

CVE-2014-0206

Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...

CVE-2014-4303

Multiple cross-site scripting XSS vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the 1 Twitter and 2 Facebook username settings...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the 1 Twitter and 2 Facebook username settings...

CVE-2014-4303

CVE-2014-4303 affects the Drupal Touch theme (7.x-1.x) prior to 7.x-1.9. The vulnerability arises because the theme does not sufficiently sanitize input for Twitter and Facebook username settings, enabling cross-site scripting (XSS) by authenticated administrators with the Administer themes permi...

CVE-2014-4303

Multiple cross-site scripting XSS vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the 1 Twitter and 2 Facebook username settings...

CVE-2014-4303: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the 1 Twitter and 2 Facebook username settings...

openSUSE Security Update : roundcubemail (openSUSE-SU-2013:1420-1)

roundcubemail was updated to version 0.9.3 bnc837436 CVE-2013-5645 - Optimized UI behavior for touch devices - Fix setting refreshinterval to 'Never' in Preferences - Fix purge action in folder manager - Fix base URL resolving on attribute values with no quotes - Fix wrong handling of links with...

SA-CONTRIB-2014-059 - Touch Theme - Cross Site Scripting (XSS)

Touch Theme is a light weight theme with modern look and feel. The theme does not sufficiently sanitize theme settings input for Twitter and Facebook username. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Administer themes". CVE identifiers...

Microsoft Windows - Touch Injection API Local Denial of Service

// source: https://www.securityfocus.com/bid/67742/info Microsoft Windows is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to crash the affected computer, denying service to legitimate users. ifndef WIN32NOSTATUS define WIN32NOSTATUS endif include inclu...

Microsoft Windows - Touch Injection API Local Denial of Service

Microsoft Windows - Touch Injection API Local Denial of Service // source: https://www.securityfocus.com/bid/67742/info Microsoft Windows is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to crash the affected computer, denying service to legitimate user...

CVE-2014-1737

The rawcmdcopyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device...

CMS Touch - pages.php?Page_ID SQL Injection

CMS Touch - pages.php?PageID SQL Injection source: https://www.securityfocus.com/bid/67377/info CMS Touch is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the...

CMS Touch - news.php?News_ID SQL Injection

CMS Touch - news.php?NewsID SQL Injection source: https://www.securityfocus.com/bid/67377/info CMS Touch is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the...

CMS Touch 2.01 Cross Site Scripting / SQL Injection

cms touch V2.01 Sql Vulnerability ================================= Author : indoushka vendor : http://cmstouch.com ================================= Dork : powered by cmstouch نظام تاتش لإدارة المواقع الإلكترونية النسخة 2.01 http://alfarrajsite.com/cmstouch/pages.php?PageID=28 inject here...

CMS Touch - 'news.php?News_ID' SQL Injection

source: https://www.securityfocus.com/bid/67377/info CMS Touch is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit...

CMS Touch - 'pages.php?Page_ID' SQL Injection

source: https://www.securityfocus.com/bid/67377/info CMS Touch is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit...

CVE-2014-2706

Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service system crash via network traffic that improperly interacts with the WLANSTAPSSTA state aka power-save mode, related to stainfo.c and tx.c...