4630 matches found
openSUSE Security Update : samba (openSUSE-SU-2013:0277-1)
Samba was updated to 3.6.7 fixing bugs and security issues : - The Samba Web Administration Tool SWAT in Samba versions 3.0.x to 4.0.1 are affected by a cross-site request forgery; CVE-2013-0214; bnc799641. - The Samba Web Administration Tool SWAT in Samba versions 3.0.x to 4.0.1 could possibly b...
Mozilla Releases Security Updates for Firefox, Firefox ESR, Thunderbird, and Netscape Portable Runtime
The Mozilla Foundation has released security updates to address multiple vulnerabilities in Firefox, Firefox ESR, Thunderbird, and Netscape Portable Runtime. Exploitation of these vulnerabilities may allow attackers to execute arbitrary code, cause a denial of service, or conduct clickjacking...
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2013:1343-1)
This version upgrade of phpMyAdmin fixed various security issues SQL injection, XSS, full path disclosure, Clickjacking %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-647. The...
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Buffer overflows, memory corruptions, clickjacking...
CVE-2014-1539
Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image...
CVE-2014-1539
Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image...
Mozilla Patches Seven Flaws in Firefox 30
Mozilla has fixed seven security vulnerabilities in Firefox 30, including five critical flaws that could enable remote code execution. Firefox 30 is a relatively minor release of the popular browser, with the most notable change being the addition of a sidebar button that allows users to quickly...
CVE-2014-1539
Technical details for CVE-2014-1539 are not publicly available in the provided documents. Please monitor for official updates or vendor advisories to obtain affected products, impact, and fixes.
CVE-2014-1539
Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image...
CVE-2014-1539: Improper Input Validation
Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image...
PT-2014-4219
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 30.0 Thunderbird versions prior to 24.6.1 on OS X, versions through 24.6 Description The issue makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake curs...
Firefox < 30.0 Multiple Vulnerabilities (Mac OS X)
The version of Firefox installed on the remote Mac OS X host is a version prior to version 30.0. It is, therefore, affected by multiple vulnerabilities : - Memory issues exist that could lead to arbitrary code execution. Note that these issues only affect Firefox 29. CVE-2014-1533, CVE-2014-1534 ...
Clickjacking through cursor invisibility after Flash interaction — Mozilla
Security researcher Jordi Chancel reported a mechanism where the cursor can be rendered invisible after it has been used on an embedded flash object when used outside of the object. This flaw can be in used in combination with an image of the cursor manipulated through JavaScript, leading to...
Mozilla Firefox < 30.0 Multiple Vulnerabilities
Binary data 8290.prm...
FanFootage: Reporting Bugs
1This page allows visitors to upload files to the server. Various web applications allow users to upload files such as pictures, images, sounds, .... Uploaded files may pose a significant risk if not handled correctly. A remote attacker could send a multipart/form-data POST request with a...
Mavenlink: Clickjacking at https://www.mavenlink.com/ main website
Hello , i found clickjacking on main webpage. CSRF testing frame opacity: 0.5; border: none; position: absolute; top: 0px; left: 0px; z-index: 1000; window.onbeforeunload = function return " Do you want to leave ?"; site is vulnerable for clickjacking! by Vineet bhardwaj same as last bug but its ...
Mavenlink: Clickjacking & CSRF attack can be done at https://app.mavenlink.com/login
Hello, My name is Vineet bhardwaj. i am security researcher and i pen test your website https://app.mavenlink.com/login and i found there is click jacking attack and CSRF attack can be done. POC: CSRF testing frame opacity: 0.5; border: none; position: absolute; top: 0px; left: 0px; z-index: 1000...
Factlink: Click jacking
Vulnerability description Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or...