2574 matches found
Ubuntu 10.04 LTS / 10.10 : xulrunner-1.9.2 vulnerabilities (USN-1353-1)
Jesse Ruderman and Bob Clary discovered memory safety issues affecting the Gecko Browser engine. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of t...
Mozilla Thunderbird 3.1.x Multiple Vulnerabilities
Binary data 801371.prm...
Mozilla Firefox 3.6.x < 3.6.26 Multiple Vulnerabilities
Binary data 6307.prm...
Mandriva Update for mozilla MDVSA-2012:013 (mozilla)
Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2012:013 mozilla Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mozilla Products IPv6 Literal Syntax Cross Domain Information Disclosure Vulnerability (MAC OS X)
The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsipv6literalsyntaxinfodiscvulnmacosx.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products IPv6 Literal Syntax Cross Domain...
RHEL 4 : seamonkey (RHSA-2012:0084)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0084 advisory. - Mozilla: Same-origin bypass using IPv6-like hostname syntax MFSA 2012-02 CVE-2011-3670 - Mozilla: memory safety hazards in 10.0/1.9.2.26...
Mozilla: Same-origin bypass using IPv6-like hostname syntax (MFSA 2012-02)
Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and...
Mozilla Thunderbird 3.1.x < 3.1.18 Multiple Vulnerabilities
The installed version of Thunderbird 3.1.x is earlier than 3.1.18 and is, therefore, potentially affected by the following vulnerabilities: - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly...
Firefox 3.6 < 3.6.26 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox 3.6 is earlier than 3.6.26. Such versions are potentially affected by multiple vulnerabilities : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly enforced...
Overly permissive IPv6 literal syntax — Mozilla
For historical reasons Firefox has been generous in its interpretation of web addresses containing square brackets around the host. If this host was not a valid IPv6 literal address, Firefox attempted to interpret the host as a regular domain name. Gregory Fleischer reported that requests made...
mozilla -- multiple vulnerabilities
The Mozilla Project reports: MFSA 2012-01 Miscellaneous memory safety hazards rv:10.0/ rv:1.9.2.26 MFSA 2012-02 Overly permissive IPv6 literal syntax MFSA 2012-03 iframe element exposed across domains via name attribute MFSA 2012-04 Child nodes from nsDOMAttribute still accessible after removal o...
vBSEO 3.6.0 - proc_deutf() Remote PHP Code Injection (Metasploit)
vBSEO 3.6.0 - procdeutf Remote PHP Code Injection Metasploit require 'msf/core' class Metasploit3 'vBSEO %q This module exploits a vulnerability in the 'procdeutf' function defined in /includes/functionsvbseocpabstract.php. User input passed through 'charrepl' POST parameter isn't properly...
Fully automated MySQL5 boolean based enumeration tool
Fully automated MySQL5 boolean based enumeration tool Blackhatacademy Developers releases Fully automated MySQL5 boolean based enumeration tool. By default, this script will first determine username, version and database name before enumerating the informationschema information. When the -q flag ...
SuSE 10 Security Update : bind (ZYPP Patch Number 7851)
This update fixes the issue that specially crafted DNS queries could crash the bind name server. CVE-2011-4313 Additionally, a syntax check warning complaining about every include file that only provides a snippet for the overall configuration has been removed. %NASLMINLEVEL 70300 C Tenable Netwo...
Whois.com Cross Site Scripting
Exploit Title: whois.com XSS Date: 26.11.2011 - 19.23 Author: Mr.PaPaRoSSe Tested On: Win7 Platform: Php ------------------------------------------------------------- http://domains.whois.com/hosting.php?type= "alert"DarkDevilZ / Mr.PaPaRoSSe"...
CVE-2011-3723
Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by READMEFILES/livehelp.php and certain other files...
Information disclosure
Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by READMEFILES/livehelp.php and certain other files...
CVE-2011-3723
Crafty Syntax 3.0.2 is affected by an information-disclosure vulnerability: remote attackers can obtain sensitive data by directly requesting a PHP file, causing an error message that reveals the installation path (demonstrated by README_FILES/livehelp.php and related files). This occurs due to t...
CVE-2011-3723
Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by READMEFILES/livehelp.php and certain other files...
CVE-2011-3723: Exposure of Sensitive Information to an Unauthorized Actor
Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by READMEFILES/livehelp.php and certain other files...