Mozilla FirefoxThunderbirdSeaMonkey - Chrome-Loaded About:Blank Script Execution

Mozilla FirefoxThunderbirdSeaMonkey - Chrome-Loaded About:Blank Script Execution source: https://www.securityfocus.com/bid/25142/info Mozilla Firefox, Thunderbird, and SeaMonkey are prone to a vulnerability that allows JavaScript to execute with unintended privileges. A malicious site may be able...

CVE-2007-3949

CVE-2007-3949 affects lighttpd’s mod_access.c. In lighttpd 1.4.15, trailing slash handling in URLs is ignored, enabling bypass of url.access-deny settings. Multiple sources link this with lighttpd versions prior to 1.4.16; remediation cited is to upgrade to 1.4.16 or later. Exploitation details a...

Unfixed XSS vulnerability at www.kwalu.com

Security researcher Nullfloq, has submitted on 20/06/2007 a cross-site-scripting XSS vulnerability affecting www.kwalu.com, which at the time of submission ranked 4644700 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/06/2007. It is current...

Solaris 9 (x86) : 117468-20

SunOS 5.9x86: NFS patch. Date this patch was last updated by Sun : Mar/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

[SECURITY] Fedora Core 5 Update: lha-1.14i-20

LHA is an archiving and compression utility for LHarc format archives. LHA is mostly used in the DOS world, but can be used under Linux to extract DOS files from LHA archives. Install the lha package if you need to extract DOS files from LHA archives...

Unfixed XSS vulnerability at www.rittmeyer.com

Security researcher A.D.T, has submitted on 20/05/2007 a cross-site-scripting XSS vulnerability affecting www.rittmeyer.com, which at the time of submission ranked 1536674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It is...

Unfixed XSS vulnerability at www.angelreisen.com

Security researcher A.D.T, has submitted on 20/05/2007 a cross-site-scripting XSS vulnerability affecting www.angelreisen.com, which at the time of submission ranked 8361707 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It is...

Unfixed XSS vulnerability at www.haberrize.com

Security researcher THE-SH0CK-B0Y, has submitted on 20/05/2007 a cross-site-scripting XSS vulnerability affecting www.haberrize.com, which at the time of submission ranked 1276641 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It i...

Solaris 9 (x86) : 121582-20

commcli 6.4-3.02x86: core patch. Date this patch was last updated by Sun : Apr/20/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 121582-20 (deprecated)

commcli 6.4-3.02x86: core patch. Date this patch was last updated by Sun : Apr/20/09 This plugin has been deprecated and either replaced with individual 121582 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 9 (sparc) : 121581-20

commcli 6.4-3.02: core patch. Date this patch was last updated by Sun : Apr/20/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

dproxy 0.5 - Remote Buffer Overflow (Metasploit)

dproxy 0.5 - Remote Buffer Overflow Metasploit MetaSploit exploit for remote buffer overflow issue in dproxy Written in 2007 by Alexander Klink c 2007 Cynops GmbH released under the same license as MSF Artistic, GPL dual-licensed $Revision: 1.1 $ package Msf::Exploit::dproxy; use strict; use base...

caid-msgeng.txt

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...

CA BrightStor ARCserve (msgeng.exe) Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= CA BrightStor ARCserve msgeng.exe Remote Stack Overflow Exploit ================================================================= !/usr/bin/python This one was listed in the...

CA BrightStor ARCserve - 'msgeng.exe' Remote Stack Overflow

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow !/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflo...

Unfixed XSS vulnerability at www.gencbilim.com

Security researcher 0ssi3, has submitted on 20/02/2007 a cross-site-scripting XSS vulnerability affecting www.gencbilim.com, which at the time of submission ranked 15928 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/02/2007. It is currentl...

GLSA-200701-20 : Centericq: Remote buffer overflow in LiveJournal handling

The remote host is affected by the vulnerability described in GLSA-200701-20 Centericq: Remote buffer overflow in LiveJournal handling When interfacing with the LiveJournal service, Centericq does not appropriately allocate memory for incoming data, in some cases creating a buffer overflow. Impac...

Apple iChat 3.1.6 v441 aim:// URL Handler Format String Exploit PoC

Exploit for macOS platform in category dos / poc =================================================================== Apple iChat 3.1.6 v441 aim:// URL Handler Format String Exploit PoC =================================================================== MOAB-20-01-2007 function boom var str = '';...

Adobe Acrobat AcroPDF ActiveX control fails to properly handle malformed input

Overview The Adobe Acrobat AcroPDF ActiveX control fails to properly handle malformed input to its methods. This could allow an attacker to cause the application using the ActiveX control to crash. Description Adobe Acrobat and Adobe Reader provide an ActiveX control to allow applications such as...