Firefox 3.6 < 3.6.26 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox 3.6 is earlier than 3.6.26. Such versions are potentially affected by multiple vulnerabilities : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly enforced...

Mozilla Thunderbird 3.1.x < 3.1.18 Multiple Vulnerabilities

The installed version of Thunderbird 3.1.x is earlier than 3.1.18 and is, therefore, potentially affected by the following vulnerabilities: - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly...

PT-2012-1734

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.26 and 4.x through 6.0 Thunderbird versions prior to 3.1.18 and 5.0 through 6.0 SeaMonkey versions prior to 2.4 Description The issue allows remote attackers to obtain sensitive information by making...

Overly permissive IPv6 literal syntax — Mozilla

For historical reasons Firefox has been generous in its interpretation of web addresses containing square brackets around the host. If this host was not a valid IPv6 literal address, Firefox attempted to interpret the host as a regular domain name. Gregory Fleischer reported that requests made...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2012-01 Miscellaneous memory safety hazards rv:10.0/ rv:1.9.2.26 MFSA 2012-02 Overly permissive IPv6 literal syntax MFSA 2012-03 iframe element exposed across domains via name attribute MFSA 2012-04 Child nodes from nsDOMAttribute still accessible after removal o...

vBSEO 3.6.0 - proc_deutf() Remote PHP Code Injection (Metasploit)

vBSEO 3.6.0 - procdeutf Remote PHP Code Injection Metasploit require 'msf/core' class Metasploit3 'vBSEO %q This module exploits a vulnerability in the 'procdeutf' function defined in /includes/functionsvbseocpabstract.php. User input passed through 'charrepl' POST parameter isn't properly...

Fully automated MySQL5 boolean based enumeration tool

Fully automated MySQL5 boolean based enumeration tool Blackhatacademy Developers releases Fully automated MySQL5 boolean based enumeration tool. By default, this script will first determine username, version and database name before enumerating the informationschema information. When the -q flag ...

SuSE 10 Security Update : bind (ZYPP Patch Number 7851)

This update fixes the issue that specially crafted DNS queries could crash the bind name server. CVE-2011-4313 Additionally, a syntax check warning complaining about every include file that only provides a snippet for the overall configuration has been removed. %NASLMINLEVEL 70300 C Tenable Netwo...

Whois.com Cross Site Scripting

Exploit Title: whois.com XSS Date: 26.11.2011 - 19.23 Author: Mr.PaPaRoSSe Tested On: Win7 Platform: Php ------------------------------------------------------------- http://domains.whois.com/hosting.php?type= "alert"DarkDevilZ / Mr.PaPaRoSSe"...

CVE-2011-3723

Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by READMEFILES/livehelp.php and certain other files...

Information disclosure

Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by READMEFILES/livehelp.php and certain other files...

CVE-2011-3723

Crafty Syntax 3.0.2 is affected by an information-disclosure vulnerability: remote attackers can obtain sensitive data by directly requesting a PHP file, causing an error message that reveals the installation path (demonstrated by README_FILES/livehelp.php and related files). This occurs due to t...

CVE-2011-3723

Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by READMEFILES/livehelp.php and certain other files...

PT-2011-4613

Name of the Vulnerable Software and Affected Versions Crafty Syntax version 3.0.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as README FILES/livehelp.php, which reveals the...

CVE-2011-3723: Exposure of Sensitive Information to an Unauthorized Actor

Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by READMEFILES/livehelp.php and certain other files...

Nginx Code Execution with Null Bytes to several hidden points and critical points-vulnerability warning-the black bar safety net

Last night, the Black pot on the microblogging made a foreigner explosion Nginx vulnerability, the beginning and few people pay attention, the ego immediately frame environmental testing to verify that my product is good handy online and tried the two sites also verify this vulnerability, so...

Fedora Update for curl FEDORA-2011-8640

Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2011-8640 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 15 Update: dokuwiki-0-0.9.20110525.a.fc15

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at crea ting documentation of any kind. It has a simple but powerful syntax which makes sure the datafiles remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

Discuz! X1-1.5 notify_credit.php Blind SQL injection exploit

No description provided by source. ?php printr' +---------------------------------------------------------------------------+ Discuz! X1-1.5 notifycredit.php Blind SQL injection exploit by toby57 2010.11.05 mail: toby57 at 163 dot com team: http://www.wolvez.org...

Nmap NSE net: nfs-ls

Attempts to get useful information about files from NFS exports. The output is intended to resemble the output of 'ls'. The script starts by enumerating and mounting the remote NFS exports. After that it performs an NFS GETATTR procedure call for each mounted point in order to get its ACLs. For...