CVE-2007-5858

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting XSS attacks and obtain sensitive information...

Cross site scripting

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting XSS attacks and obtain sensitive information...

CVE-2007-5858

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting XSS attacks and obtain sensitive information...

PT-2007-6818 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions 10.4.11 and 10.5.1 iPhone versions 1.0 through 1.1.2 iPod touch versions 1.1 through 1.1.2 Description: The issue allows remote attackers to navigate the subframes of any other page, which can be leveraged to conduct cross-sit...

HP notebooks remote code execution vulnerability (multiple series)

Advisory: ///////// Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access. Overview: ///////// Software called "HP Info...

CVE-2007-5361

The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and uses this IP address as the destination for all subsequent VoIP packets to this phone, which allows remote attackers to cause a denial of service lo...

[SECURITY] Fedora 7 Update: kdeedu-3.5.8-2.fc7

Educational/Edutainment applications, including: blinken: Simon Says Game kalzium: Periodic Table of Elements kanagram: Letter Order Game kbruch: Exercise Fractions keduca: Tests and Exams kgeography: Geography Trainer khangman: Hangman Game kig: Interactive Geometry kiten: Japanese Reference/Stu...

CVE-2007-5450

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

Code injection

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

CVE-2007-5450

CVE-2007-5450 affects Safari on Apple iPod touch and iPhone (v1.1.1). The vulnerability allows user-assisted remote attackers to crash the application and enable local filesystem browsing by processing a crafted TIFF file, exposing a denial-of-service risk and local data exposure. The PT-2007-648...

CVE-2007-5450

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

PT-2007-6486 · Apple · Safari

Name of the Vulnerable Software and Affected Versions: Safari on Apple iPod touch and iPhone version 1.1.1 Description: The issue allows user-assisted remote attackers to cause an application crash and enable filesystem browsing by the local user via a certain TIFF file. This can result in a deni...

RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0

Dear all, for your information. ------------------------------------------------------------------------ RUS-CERT Security Announcement 2007-06:01 1380 ================================================ The built-in Mini Switch in Alcatel-Lucent's IP-Touch Telephones under OmniPCX Enterprise 7.0 an...

CVE-2007-2512

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

Design/Logic Flaw

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

CVE-2007-2512

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

CVE-2007-2512

CVE-2007-2512 affects Alcatel-Lucent OmniPCX Enterprise Release 7.0 and later, where the built‑in mini switch on IP-Touch phones is enabled by default. This allows unauthenticated access to the voice VLAN through a daisy‑chained computer system, effectively bypassing 802.1x in some scenarios and ...

Mozilla Firefox <= 1.5.0.4 Javascript Navigator Object Code Execution PoC

No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...

CVE-2006-3762

The Touch Control ActiveX control 2.0.0.55 allows remote attackers to read and possibly execute arbitrary files via a "file///" URI in the sPath parameter to the Execute function...

CVE-2006-3762

The CVE-2006-3762 entry concerns the Touch Control ActiveX control 2.0.0.55. A remote attacker can read, and possibly execute, arbitrary files by supplying a file:/// URI in the sPath parameter to the Execute function. This indicates a failure in input handling for file paths within the ActiveX c...