Microsoft VBScript and JScript Scripting Engines Information Disclosure Vulnerability

Description Microsoft VBScript and JScript scripting engines are prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Attackers can exploit this issue by enticing an unsuspecting user to...

WebKit - Insufficient Entropy Random Number Generator (1)

WebKit - Insufficient Entropy Random Number Generator 1 source: https://www.securityfocus.com/bid/44952/info WebKit is prone to a random-number-generator weakness. Attackers can exploit this issue by enticing an unsuspecting user into visiting a malicious webpage. Successful attacks will allow...

WebKit - Insufficient Entropy Random Number Generator (2)

WebKit - Insufficient Entropy Random Number Generator 2 source: https://www.securityfocus.com/bid/44952/info WebKit is prone to a random-number-generator weakness. Attackers can exploit this issue by enticing an unsuspecting user into visiting a malicious webpage. Successful attacks will allow...

WebKit - Insufficient Entropy Random Number Generator (1)

source: https://www.securityfocus.com/bid/44952/info WebKit is prone to a random-number-generator weakness. Attackers can exploit this issue by enticing an unsuspecting user into visiting a malicious webpage. Successful attacks will allow attackers to track user sessions and obtain personal...

CVE-2010-4212

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...

[0day] Apple QuickTime "_Marshaled_pUnk" backdoor param arbitrary code execution

HTML Version http://www.reversemode.com/index.php?option=comcontent&task=view&id=69&Itemid=1 The scenario would be as follows: Victim prerequisites: Internet Explorer. XP,Vista,W7. Apple Quicktime 7.x, 6.x 2004 versions are also vulnerable, older versions not checked 1. Victim is enticed into...

Apple QuickTime '_Marshaled_pUnk' Remote Code Execution Vulnerability

Description Apple QuickTime is prone to a remote code-execution vulnerability that affects the 'QTPlugin.ocx' ActiveX control because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful...

Microsoft XML Core Service Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability

Description Microsoft XML Core Service is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the currently...

Mozilla Firefox Browser CSS style Engine Memory Corruption (CVE-2009-1392)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

PT-2010-2965 · Microsoft · Internet Explorer 8 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 versions SP1 through SP3 Description: A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploit...

PT-2010-2967 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 SP1 through 8 Description: A remote code execution issue exists due to improper initialization or deletion of an object, leading to memory corruption. This is related to the CStyleSheet object and the fr...

Joomla Component com_extcalendar XSS Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comextcalendar XSS Vulnerability ================================================== x Joomla Component Extcalendar x Author: s4r4d0 x Contact: email protected x Team; Fatal...

Palo Alto Networks防火墙esp/editUser.esp页面存储式跨站脚本漏洞

BUGTRAQ ID: 40113 CVECAN ID: CVE-2010-0475 Palo Alto Networks是新一代的硬件防火墙设备。 Palo Alto Networks防火墙的esp/editUser.esp页面没有正确地过滤用户在URL请求中所提供的role参数，远程攻击者可以通过提交恶意参数请求执行跨站脚本攻击，导致在用户浏览器中执行任意HTML和脚本代码。 0 Palo Alto Networks firewall 3.1.x Palo Alto Networks firewall 3.0.x 厂商补丁： Palo Alto Networks...

How Criminals Hide Malware from Search Bots

Computer criminals are taking steps to block search engines bots from indexing legitimate Web pages that have been hacked and booby-trapped with hostile code. Read the full article. KrebsonSecurity...

Microsoft IE HTML渲染远程代码执行漏洞（MS10-018）

BUGTRAQ ID: 39024 CVE ID: CVE-2010-0807 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer访问已被删除的对象的方式中存在一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0 临时解决方法： 在Office 2007中禁用ActiveX控件。 不要打开意外的文件。 厂商补丁： Microsoft...

Mozilla Firefox XSL Transformation Memory Corruption (CVE-2009-1169)

A memory corruption vulnerability exists in Mozilla Firefox. The flaw is due to insufficient validation while processing a malicious XSL stylesheet. A remote attacker can exploit this vulnerability by enticing the target user to open a crafted webpage. In a successful attack that arbitrary code...

[SECURITY] Fedora 11 Update: php-5.2.13-1.fc11

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Safari for iPhone & iPod Touch Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc =============================================================== Safari for iPhone & iPod Touch Remote Denial of Service Exploit =============================================================== Exploit Title: Remote DoS on Safari for iPhone & iPod...

Safari for iPhone & iPod Touch Bad "VML" Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================================= Safari for iPhone & iPod Touch Bad "VML" Remote Denial of Service Exploit ========================================================================= Exploit Title: Bad "VML...

Update Protection against Mozilla Firefox Browser Engine Memory Corruption

A memory corruption vulnerability was reported in Mozilla Firefox, a popular Web browser developed by Mozilla Foundation. This flaw is due to the way Mozilla Firefox handles first-letter CSS style elements. A remote attacker can exploit this vulnerability by persuading a target user to open a...