CVE-2016-9628

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9623

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9626

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page...

CVE-2016-9624

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9422

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feedtabletag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service stack and/or heap buffer overflow and possibly execute arbitrary code via a...

chromium-browser: out of bounds memory access in v8

V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2016-5200

V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Cross site request forgery (csrf)

Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery CSRF attacks via a request without the authenticitytoken, as demonstrated by a crafted HTML page that creates a new administrator account...

Microsoft Internet Explorer CButton Object Use-After-Free Vulnerability

No description provided by source. //rop 68byte var rop = unescape "%u34b4%u51bf" + // 0x51bf34b4, POP ESI RETN hxds.dll "%u10b8%u51bd" + // 0x51bd10b8, ptr to &VirtualProtect IAT hxds.dll "%u2d97%u51bd" + // 0x51bd2d97, MOV EAX,DWORD PTR DS:ESI RETN hxds.dll "%ucba0%u51bd" + // 0x51bdcba0, XCHG...

Fedora 16 : bugzilla-4.0.6-1.fc16 (2012-6368)

The following security issues have been discovered in Bugzilla : - When abusing the X-FORWARDED-FOR header, an attacker could bypass the lockout policy allowing a possible brute-force discovery of a valid user password. - An attacker can get access to some bug information using the victim's...

Pandora FMS v3.2.1 Cross Site Request Forgery

Exploit for php platform in category web applications Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1...

Touch22 Image22 ActiveX Control Buffer Overflow

Added: 09/13/2010 BID: 41547 Background Touch22 Software Image22 ActiveX enables dynamic graphic creation and image manipulation from within an application. Problem Touch22 Software Image22 ActiveX Control 1.1.1 is vulnerable to buffer overflow due to a boundary error when handling the function...

Touch22 Image22 ActiveX Control Buffer Overflow

Added: 09/13/2010 BID: 41547 Background Touch22 Software Image22 ActiveX enables dynamic graphic creation and image manipulation from within an application. Problem Touch22 Software Image22 ActiveX Control 1.1.1 is vulnerable to buffer overflow due to a boundary error when handling the function...

Yahoo Toolbar Internet Explorer 6 Policy Bypass

Yahoo! Toolbar is a toolbar for web browsers and can be installed on the Internet Explorer and Firefox browsers. It allows access to several functions, including Yahoo! Search and Yahoo! Mail. It also contains built-in algorithms to prevent pop-ups and spyware. A policy bypass situation occurs wh...

Amaya 11.1 XHTML Buffer Overflow

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =Amaya 11.1 XHTML Parser Buffer Overflow==/= == =Advisory & Vulnerability Information=== Title: Amaya 11.1 XHTML Parser Buffer Overflow Advisory ID: VUDO-2009-0104 Advisory URL: http://research.voodoo-labs.org/advisories/2 Date founded:...

SecureBlackbox (PGPBBox.dll 5.1.0.112) Arbitary Data Write Exploit

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: PGPBBox.dll 5.1.0.112 SecureBlackbox Arbitary Data Write Exploit. ================================================================ Test in patched XP SP2 IE 6.0/7.0 and Vista IE 7.0...