5018 matches found
Mozilla Admits Malware Sneaked into Firefox Add-ons
Mozilla says a pair of malicious Firefox add-ons slipped by its security checks and infected approximately 4,600 Windows computers over the last five months. The browser add-ons, described my Mozilla as “experimental,” contained a Trojan horse that executed when Firefox started and infected the...
[slackware-security] pidgin
New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2010-0013 Here are the details from the Slackware 13.0...
MP4 Player 4.0 - Local Crash (PoC)
MP4 Player 4.0 - Local Crash PoC !usr/bin/perl Exploits title :MP4 Player 4.0 Local Crash Poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://mp4-player.ivefound.com tested on :win xp sp2 MP4 Player 4.0 Greatz 2 : aB0 M0haM3d and lezr crew $file="SarBoT511.m4v"; $boom="A" x 2000;...
HTML Help Workshop 4.74 (hhp) Buffer Overflow Exploit (Universal)
No description provided by source. Exploit Title: HTML Help Workshop 4.74 hhp Buffer Overflow Exploit Universal Date: 2009-12-05 Author: Dzattacker Software Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=00535334-c8a6-452f-9aa0-d597d16580cc&displaylang=en Version: 4.74 Tested on: ...
UseBB BBcode Parsing Remote Denial Of Service Vulnerability
This host has UseBB installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodusebbbbcodedosvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ UseBB BBcode Parsing Remote Denial Of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...
PHP-Nuke <= 8.0 Downloads Module XSS
Exploit for unknown platform in category web applications ==================================== PHP-Nuke = 8.0 Downloads Module XSS ==================================== Exploit Title: XSS Downloads Module PHP-Nuke = 8.0 Date: 19 Nov 2009 Author: Rohit Bansal Version: PHP-Nuke = 8.0 Tested on:...
PHP-Nuke <= 8.0 Downloads Module XSS
No description provided by source. Exploit Title: XSS Downloads Module PHP-Nuke = 8.0 Date: 19 Nov 2009 Author: Rohit Bansal Version: PHP-Nuke = 8.0 Tested on: independent platform Code : -------------------------------------------------------------- |XSS Downloads Module PHP-Nuke = 8.0 |Grab...
Foxy
Foxy is a Traditional Chinese peer to peer file sharing application. It is widely used in Hong Kong, Mainland China and Taiwan. Unlike other peer to peer software, Foxy is very easy to use and has unlimited download capabilities. The use of Foxy may circumvent the organizational security policy...
Firefox: Predictable /tmp pathname use
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...
Firefox: Predictable /tmp pathname use
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...
'Avalanche' Crimeware Kit Fuels Phishing Attacks
A single cybercrime group called “Avalanche” was responsible for nearly one-quarter of all identity theft-related phishing attacks in the first half of 2009, according to a new report by the Anti-Phishing Work Group APWG. According to the report, phishing sites on Avalanche domains target the...
CVE-2009-3492: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathToIndex parameter to 1 Calendar.php, 2 Comment.php, 3 Rss.php and 4 Trackback.php in lib/Loggix/Module/; and 5...
CVE-2009-3274
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...
CVE-2009-3274
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...
PHP-IPNMonitor (maincat_id) Remote SQL Injection Vulnerability
No description provided by source. + + SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit =...
PHP-IPNMonitor SQL Injection
SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit = -null+union+select+concatusername,0x3a,userpassword+from+ipntblpasswords-- + Example + :...
PHP-IPNMonitor - maincat_id SQL Injection
PHP-IPNMonitor - maincatid SQL Injection + + SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit =...
PHP-IPNMonitor - 'maincat_id' SQL Injection
SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit = -null+union+select+concatusername,0x3a,userpassword+from+ipntblpasswords-- + Example + :...
Apple Patches 15 Java for Mac Security Flaws
Apple today released a new version of Java for Mac to plug a total of 15 documented security vulnerabilities that could lead to remote code execution attacks via rigged Web pages. The Java for Mac OS X 10.5 Update 5 includes patches for security holes covered by Sun Microsystems last month. From...
Snow Leopard Gets an Anti-Virus Scanner
Apple’s commercials may give the impression that Macs are virus-free but the company isn’t taking any chances with the newest Mac OS X refresh. Apple has quietly added a new Snow Leopard feature to scan software downloads for malware, a no-brainer move that coincides with a noticeable spike in...