xss – Page 2 – :: Deepquest ::

>> [webapps] – Synology DiskStation Manager (DSM) 4.3-3776 – Multiple Vulnerabilities

USER: deepcore // 2013-09-12 // 0 CMT

Synology DiskStation Manager (DSM) 4.3-3776 – Multiple Vulnerabilities

>> Apple Security Advisory 2013-09-06-1

USER: deepcore // 2013-09-07 // 0 CMT

Apple Security Advisory 2013-09-06-1 – AirPort Base Station Firmware Update 7.6.4 is now available and addresses a security issue. An associated client may be able to cause an unexpected base station system termination.

[APPLE]

>> Packet Storm Exploit 2013-0827-1 – Oracle Java ByteComponentRaster.verify() Memory Corruption

USER: deepcore // 2013-08-27 // 0 CMT

The ByteComponentRaster.verify() method in Oracle Java versions prior to 7u25 is vulnerable to a memory corruption vulnerability that allows bypassing of “dataOffsets[]” boundary checks. This exploit code demonstrates remote code execution by popping calc.exe. It was obtained through the Packet Storm Bug Bounty program.

[APPLE]

>> FBI Agent Claims Hacking Group Anonymous is on Lockdown

USER: deepquest // 2013-08-23 // 0 CMT

FBI officials are claiming to have all but shut down hacker collective Anonymous because arrests have acted as a deterrent and freaked out hacktivists don’t trust each other.

[EXPLOIT]

>> [remote] – dreamMail e-mail client v4.6.9.2 Stored XSS

USER: deepcore // 2013-08-23 // 0 CMT

dreamMail e-mail client v4.6.9.2 Stored XSS

[EXPLOIT]

>> [papers] – Win32-Worm:VBS/Jenxcus.A Malware Report

USER: deepcore // 2013-08-21 // 0 CMT

Win32-Worm:VBS/Jenxcus.A Malware Report

[APPLE]

>> Oracle Java storeImageArray() Invalid Array Indexing Code Execution

USER: deepcore // 2013-08-12 // 0 CMT

Oracle Java versions prior to 7u25 suffer from an invalid array indexing vulnerability that exists within the native storeImageArray() function inside jre/bin/awt.dll.