CVE-2010-2105

Removed by vendor...

This Week In Security: Privacy, RedPhone and Adobe

In case you needed any reminders that privacy is one of the more pressing problems on the Web right now, this week’s news provided plenty of them. Along with stories of Facebook’s continued privacy missteps, this week gave us the gift of Google letting users install some Google code to opt out of...

Google Patches 'High Risk' Chrome Flaws

Google has pushed out another automatic Chrome browser update to fix multiple security issues that could expose users to hacker attacks. Google Chrome 5.0.375.55, available for Windows, Mac and Linux, addresses at least two “high risk” vulnerabilities and several security-related denial-of-servic...

Google Chrome < 5.0.375.55 Multiple Vulnerabilities

Binary data 5553.pasl...

Google Chrome < 5.0.375.55 Multiple Vulnerabilities

Binary data 800925.prm...

Google Chrome < 5.0.375.55 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 5.0.375.55. As such, it is reportedly affected by multiple vulnerabilities : - URLs do not closely match the Safe Browsing specification. Issue 7713 - It is possible to spoof URLs with unload event handlers. Issue 16535 - A...

New Tabbed Browsing Phishing Attack Exploits User Trust

A researcher has developed a new type of phishing attack that takes advantage of the way that browsers handle tabbed browsing and enables an attacker to use a script running in one tab to completely change the content in another tab. The attack, demonstrated by Aza Raskin of Mozilla, could be use...

New Phishing Attack Exploits Tabbed Browsing

In this video, Aza Raskin of Mozilla demonstrates a new class of phishing attack in which the attacker is able to use malicious code in one browser tab to completely change the content in another tab on a victim’s browser...

Java Mini Web Server <= 1.0 Path Traversal and Cross Site Scripting

Exploit for multiple platform in category remote exploits =================================================================== Java Mini Web Server | www.DigitalWhisper.co.il Software Link: http://www.jibble.org/miniwebserver/ Version: YOURXSSHEREWork?Index of %00"Work?Index of %00"Work? Work?...

Image src redirect to mailto: URL opens email editor — Mozilla

phpBB developer Henry Sudhof reported that when an image tag points to a resource that redirects to a mailto: URL, the external mail handler application is launched. This issue poses no security threat to users but could create an annoyance when browsing a site that allows users to post arbitrary...

Storm library vulnerability construct thinking-vulnerability warning-the black bar safety net

Author:lonely the prodigal son Storm library vulnerability ODAY,celebration 2 0 1 0 the first day of the I in the testing a website got the SHELL,see if there's other ideas, I suddenly remembered the Browse inc directory see conn. asp /inc/conn. asp this method of attack has never worked conn. as...

CentOS 5 : vim (CESA-2008:0580)

Updated vim packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Vim Visual editor IMproved is an updated and improved version of the vi editor. Several input...

New Attack Locates Web Users Via XSS, Google Data

The security researcher who created the MySpace XSS worm in 2005 has developed a technique that enables an attacker to accurately locate a Web user with GPS coordinates, without using IP-based geolocation. Samy Kamkar, the author of the infamous Samy worm that spread through MySpace, on Monday...

[SECURITY] Fedora 11 Update: pcmanx-gtk2-0.3.8-11.fc11

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

[SECURITY] Fedora 11 Update: galeon-2.0.7-19.fc11

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

GeckoActiveXObject exception messages can be used to enumerate installed COM objects — Mozilla

Security researcher Gregory Fleischer reported that the exception messages generated by Mozilla's GeckoActiveXObject differ based on whether or not the requested COM object's ProgID is present in the system registry. A malicious site could use this vulnerability to enumerate a list of COM objects...

Microsoft Windows Folder GUID Code Execution (MS06-045; CVE-2006-3281)

Microsoft Windows is a very popular operating system that is deployed the majority of desktops and workstations in business and home user environments. Included with the operating system is a graphical file browsing and execution shell called Windows Explorer. The application is capable of...

CVE-2009-4107

Buffer overflow in Invisible Browsing 5.0.52 allows user-assisted remote attackers to execute arbitrary code via a crafted .ibkey file containing a long string...

Buffer overflow

Buffer overflow in Invisible Browsing 5.0.52 allows user-assisted remote attackers to execute arbitrary code via a crafted .ibkey file containing a long string...

CVE-2009-4107

CVE-2009-4107 affects Invisible Browsing 5.0.52. The vulnerability is a buffer overflow in processing a crafted .ibkey file containing a long string, enabling user‑assisted remote code execution. Impact per sources is complete confidentiality, integrity, and availability compromise. The documente...