Mozilla Thunderbird < 12.0 Multiple Vulnerabilities

Binary data 6792.prm...

Mozilla SeaMonkey 2.x < 2.9.0 Multiple Vulnerabilities

Binary data 801320.prm...

A section of the asp of the cms application injection vulnerabilities-vulnerability warning-the black bar safety net

Brief description: Google Baidu search keyword inurl:HomeMarket. asp in the domain name behind add the following code to blast out the management account password/NewsType. asp? SmallClass='%20union%20select%2 0 0,username%2BCHR1 2 4%2Bpassword,2,3,4,5,6,7,8,9%20from%20admin%20union%20select%2...

KingCMS 1.0 SQL Injection vulnerability-vulnerability warning-the black bar safety net

Official website: EXP http://127.0.0.1/kingcmsphp1.0/index.php/list-13 and 1=1-1.html !...

Yahoo! Browser for Android 地址栏伪造漏洞(CVE-2013-2307)

Bugtraq ID:59525 CVE ID:CVE-2013-2307 Yahoo! Browser for Android是一款安卓平台下的浏览器 Yahoo! Browser for Android 1.4.3之前版本打开新窗口时存在一个安全漏洞，允许远程攻击者利用漏洞伪造地址栏，可进行网络钓鱼等攻击 0 Yahoo! Browser v1.4.2 厂商解决方案 用户可联系厂商获得相应的升级程序或补丁： https://play.google.com/store/apps/details?id=jp.co.yahoo.android.ybrowser&hl=en...

CVE-2013-2306

The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site...

CVE-2013-2307

The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site...

Code injection

The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site...

Open redirect

The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site...

CVE-2013-2307

CVE-2013-2307 affects the Yahoo! Browser for Android (versions before 1.4.3). The vulnerability allows remote attackers to spoof the address bar via a crafted web site, enabling phishing-like spoofing. The provided documents state the affected range (pre-1.4.3) and describe the impact, but do not...

CVE-2013-2306

The CVE-2013-2306 vulnerability affects jigbrowser+ for Android prior to version 1.6.4. The issue arises when opening a new window, which allows remote attackers to spoof the address bar via a crafted web site, enabling phishing-like deception by forging the displayed URL. Public references consi...

CVE-2013-2307

The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site...

Yahoo! Browser vulnerable to address bar spoofing

Overview Yahoo! Browser contains an issue when opening a new window, which may result in the address bar being spoofed. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact This...

jigbrowser+ for Android vulnerable to address bar spoofing

Overview jigbrowser+ for Android contains an issue when opening a new window, which may result in the address bar being spoofed. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Th...

JVN#55074201: Yahoo! Browser vulnerable to address bar spoofing

Yahoo! Browser contains an issue when opening a new window, which may result in the address bar being spoofed. Impact This vulnerability could be leveraged to forge the contents of the address bar for conducting phishing attacks. Solution Update the software Update to the latest version according...

JVN#01313594: jigbrowser+ for Android vulnerable to address bar spoofing

jigbrowser+ for Android contains an issue when opening a new window, which may result in the address bar being spoofed. Impact This vulnerability could be leveraged to forge the contents of the address bar for conducting phishing attacks. Solution Update the software Update to the latest version...

Critical flaw in Viber app allows full access to Smartphones

More than 50 millions of Smartphone users worldwide are facing a risk posed by a critical flaw in Viber app. The security company Bkav announced that it has found a way to gain full access to Android phones using the popular Viber messaging app. Unlike the Samsung lockscreen issue we reported on...

MS-some common local mention of the right to exploit-vulnerability warning-the black bar safety net

Ms08-0 2 3 local vulnerability to mention the right to ! clipimage002 Add a user 4 5 6 View this user ! clipimage004 With this user login ! clipimage006 Provide the right to fail Using vulnerability to mention the right to ! clipimage008 ! Provide the right to succeed MS10-0 4 8 Use the...

N-point virtual host management system Business Edition SQL injection vulnerability-vulnerability warning-the black bar safety net

Brief description: All versions of N-point virtual host management system of the commercial version are receiving this vulnerability affects visually more than half of Taobao virtual host merchant caught quickly fix it N point is so I Detailed description:...

Sleipnir for Windows vulnerable to address bar spoofing

Overview Sleipnir for Windows contains an issue in displaying colors and the padlock icon on the address bar, which may result in the address bar being spoofed. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...