9312 matches found
IE Aurora vulnerability of the principles of the quest-bug warning-the black bar safety net
Details: http://bbs.xfocusx.com/thread-7873-1-1.html by:xuanyuan small Cong The present article refer to the following article: 1http://www.geoffchappell.com/viewer.htm?doc=notes/security/aurora/index.htm 2http://securitylabs.websense.com/content/Blogs/3530.aspx...
Microsoft Internet Explorer Multiple Vulnerabilities (978207)
This host is missing a critical security update according to Microsoft Bulletin MS10-002. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS10-002 Microsoft Internet Explorer Object Memory Use-After-Free
This module exploits a vulnerability found in Internet Explorer's mshtml component. Due to the way IE handles objects in memory, it is possible to cause a pointer in CTableRowCellsCollectionCacheItem::GetNext to be used even after it gets freed, therefore allowing remote code execution under the...
Ubuntu: Security Advisory (USN-883-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Security Bulletin MS10-001 - Critical Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution (972270)
Microsoft Security Bulletin MS10-001 - Critical Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution 972270 Published: January 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft...
Adobe Flash Player < 10.0.42.34 Remote Code Execution Vulnerability - Windows
Adobe Flash Player is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CentOS 5 : kernel (CESA-2008:0957)
Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 12th November 2008 The original packages distributed wi...
CentOS 5 : ruby (CESA-2009:1140)
Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an extensible, interpreted, object-oriented, scripting language. It has...
CentOS 5 : java-1.6.0-openjdk (CESA-2009:1201)
Updated java-1.6.0-openjdk packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. These packages provide the OpenJDK 6 Java Runtime Environment and...
Mandriva Linux Security Advisory : firefox (MDVSA-2009:339)
Security issues were identified and fixed in firefox 3.0.x : Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service memory corruption and...
FreeBSD : mozilla -- multiple vulnerabilities (01c57d20-ea26-11de-bd39-00248c9b4be7)
Mozilla Project reports : MFSA 2009-71 GeckoActiveXObject exception messages can be used to enumerate installed COM objects MFSA 2009-70 Privilege escalation via chrome window.opener MFSA 2009-69 Location bar spoofing vulnerabilities MFSA 2009-68 NTLM reflection vulnerability MFSA 2009-67 Integer...
Oracle eBusiness Suite Cross Site Scripting / Bypass
Hacktics Research Group Security Advisory http://www.hacktics.com/details=;view=Resources%7CAdvisory By Shay Chen, Hacktics. 14-Dec-2009 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, certain vulnerabilities were identified in the Oracle eBusiness...
Hacktics Advisory Dec09: Oracle eBusiness Suite - Multiple Vulnerabilities Allow Remote Takeover
Hacktics Research Group Security Advisory http://www.hacktics.com/details=;view=Resources7CAdvisory By Shay Chen, Hacktics. 14-Dec-2009 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, certain vulnerabilities were identified in the Oracle eBusiness Sui...
Mandriva Security Advisory MDVSA-2009:331 (kdegraphics)
The remote host is missing an update to kdegraphics announced via advisory MDVSA-2009:331. OpenVAS Vulnerability Test $Id: mdksa2009331.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:331 kdegraphics Authors: Thomas Reinke Copyright: Copyright c 2009...
Mandriva Security Advisory MDVSA-2009:331 (kdegraphics)
The remote host is missing an update to kdegraphics announced via advisory MDVSA-2009:331. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Advisory 03/2009: Piwik Cookie unserialize() Vulnerability
SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Piwik Cookie Unserialize Vulnerability Release Date: 2009/12/09 Last Modified: 2009/12/09 Author: Stefan Esser stefan.esseratsektioneins.de Application: Piwik = 0.4.5 Severity: Piwik unserializes user input which allows an...
Monopoly provide the right overview-vulnerability warning-the black bar safety net
Preface:webshell provide the right has been is scripts one of the most popular question, of course, is one of the most difficult issues,so I according to their usual mention of the right of some of the methods and network to collect the text Chapter total into this set webshell to mention the rig...
Microsoft Internet Explorer 'Style' Object RCE Vulnerability
This host is missing a critical security update according to Microsoft Bulletin MS09-072. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Mandriva Linux Security Advisory : firefox (MDVSA-2009:290-1)
Security issues were identified and fixed in firefox 3.0.x : Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code...
PHP vulnerability full solution-vulnerability warning-the black bar safety net
PHP web page security issues For PHP website mainly exist the following types of attacks: 1. Command injectionCommand Injection 2. eval injectionEval Injection 3. Client scripting attacksScript Insertion 4. Cross-site scripting attacksCross Site Scripting, XSS 5. SQL injectionattacksSQL injection...