[SECURITY] Fedora 15 Update: arora-0.11.0-3.fc15

Arora is a simple, cross platform web browser based on the QtWebKit engine. Currently, Arora is still under development, but it already has support for browsing and other common features such as web history and bookmarks...

Fedora 16 : arora-0.11.0-3.fc16 (2011-14719)

Fixes CVE-2011-3367, an input validation flaw. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 16 Update: arora-0.11.0-3.fc16

Arora is a simple, cross platform web browser based on the QtWebKit engine. Currently, Arora is still under development, but it already has support for browsing and other common features such as web history and bookmarks...

CVE-2011-3367

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

CVE-2011-3367

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

Design/Logic Flaw

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

CVE-2011-3367

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

CVE-2011-3367

CVE-2011-3367 concerns Arora (possibly 0.11 and related builds), where rendering certificate fields in a security dialog does not use a specific font, allowing a remote attacker to spoof the certificate’s CN via rich text. Multiple connected advisories confirm Arora is the affected component and ...

CVE-2011-3367: Improper Input Validation

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM

I recently discovered that various Qt applications including KSSL the KDE class library responsible for SSL negotiation, Rekonq, Arora and Psi IM are vulnerable to UI spoofing due to their use of QLabel objects to render externally controlled security critical information. The primary area of...

InterVideo WinDVD 5 DLL Hijacking Exploit

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Ganesha Site : www.BeenuArora.com Exploit Title: InterVideo WinDVD 5 DLL Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , WinDVD 5 Vulnerable extensions: .ifo , .mpg Compi...

Microsoft Office Groove 2007 - 'mso.dll' DLL Hijacking

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora, Anirban ,Ganesha, Dinesh Arora Site : www.beenuarora.com Exploit Title: Microsoft Office Groove 2007 DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , Microsoft Office Groove...

Microsoft Address Book 6.00.2900.5512 - 'wab32res.dll' DLL Hijacking

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban , Dinesh Arora Site : www.beenuarora.com Exploit Title: Microsoft Address Book DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , Microsoft Address Book 6.00.2900.5512...

Microsoft Vista - fveapi.dll BitLocker Drive Encryption API Hijacking

Microsoft Vista - fveapi.dll BitLocker Drive Encryption API Hijacking Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora / Exploit Title: Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows ...

Microsoft Vista - 'fveapi.dll' BitLocker Drive Encryption API Hijacking

Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora / Exploit Title: Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .wbcat Compile and rename to fveapi.dll,...

Microsoft Address Book 6.00.2900.5512 - wab32res.dll DLL Hijacking

Microsoft Address Book 6.00.2900.5512 - wab32res.dll DLL Hijacking / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban , Dinesh Arora Site : www.beenuarora.com Exploit Title: Microsoft Address Book DLL Hijacking Date: 25/08/2010 Author: Beenu Arora...

Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================================================= Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit ================================================================= Greetz to :b0nd, Fbih2s,r45c4l,Charles...

Microsoft Office Groove 2007 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================================== Microsoft Office Groove 2007 DLL Hijacking Exploit ================================================== / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh...

SnapProof SQL Injection

Exploit Title: SnapProof SQL Injection Vulnerability Date: 29th july 2010 Author: Dinesh Arora Critical:high Product : Commercial Sample Affected Parameter: pID contact: [email protected] Greetz to :b0nd, Fbih2s,Beenu,Charles ,j4ckh4x0r, punter,eberly Shoutz to : http://www.garage4hackers.co...

SnowFlake CMS 1.0 Beta5.2 SQL Injection

Exploit Title: Powered by SnowFlake Content Management System SQL Injection Date: 19th july 2010 Author: Dinesh Arora Critical:high Affected / Tested Version : 1.0 beta5.2 Sample Affected Parameter: uid contact: [email protected] Greetz to :b0nd, Fbih2s,Beenu,Charles ,j4ckh4x0r, punter,eberl...