100 matches found
Gentoo Security Advisory GLSA 200811-01 (opera)
The remote host is missing updates announced in advisory GLSA 200811-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-4696
Cross-site scripting XSS vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier aka the "optional fragment", which is not properly escaped before storage in the History Search database aka md.dat...
CVE-2008-4725
Cross-site scripting XSS vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database aka md.dat, a different vector than CVE-2008-4696. NOTE: some of these...
DSquare Exploit Pack: D2SEC_OPERAXSS
Name| d2secoperaxss ---|--- CVE| CVE-2008-4696 Exploit Pack| D2ExploitPack Description| Opera Web Browser History Search Input Validation Vulnerability Notes|...
CVE-2008-4696
Cross-site scripting XSS vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier aka the "optional fragment", which is not properly escaped before storage in the History Search database aka md.dat...
Cross site scripting
Cross-site scripting XSS vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database aka md.dat, a different vector than CVE-2008-4696. NOTE: some of these...
CVE-2008-4696
Opera history search, a cross-site scripting flaw in History Search results (CVE-2008-4696), occurs when certain anchor identifiers are not properly escaped before storage in md.dat. Affected product: Opera (Windows/macOS/Linux) prior to version 9.61/9.62 per advisories; root cause is insufficien...
CVE-2008-4696
Cross-site scripting XSS vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier aka the "optional fragment", which is not properly escaped before storage in the History Search database aka md.dat...
Opera 9.50 9.61 historysearch Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ requir...
Opera 9.50/9.61 historysearch - Command Execution (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...
CVE-2008-4696
creationtimestamp| type| source ---|---|--- 2008-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6801 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9944 2010-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16304 2018-05-29...
CVE-2007-4696
CVE-2007-4696 is a race-condition vulnerability in WebCore/Safari on Apple Mac OS X 10.4–10.4.10. The flaw occurs during page transitions in Safari, allowing remote attackers to obtain information entered into forms on other sites. The affected component is Safari/WebKit’s handling of page transi...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
Microsoft Windows Server Service SMB Rename Code Execution (MS06-063; CVE-2006-4696)
SMB Server Message Block is a file, print, and other network services suite used by Windows operating systems. By sending a specially crafted SMB Rename request, an attacker may cause a remote Windows server to reboot or halt. In combination with successful code injection, this could also lead to...
Microsoft Server Service fails to properly handle network messages
Overview A vulnerability in the way Microsoft Server Service handles network messages may lead to execution of arbitrary code. Description Microsoft Server Service provides support for Remote Proceedure Call RPC, resource sharing, and named pipe communication over the network. Microsoft Server...
CVE-2006-4696
CVE-2006-4696 is a remote code execution vulnerability in the Windows Server Service (SMB Rename Vulnerability). It affects Windows 2000 SP4, Windows XP SP2 and earlier, and Windows Server 2003 SP1 and earlier, where a crafted SMB Rename request could cause the Server service to dereference an in...
CVE-2005-4696
CVE-2005-4696 concerns the Microsoft Wireless Zero Configuration system (WZCS). The vulnerability arises because WZCS stores WEP keys and pair‑wise Master Keys (PMKs) for the WPA pre‑shared key in plaintext in the memory of the explorer process, enabling attackers with local memory access to extr...
