WordPress Plugin Processing Embed 0.5 - 'pluginurl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45266/info The Processing Embed plugin for Wordpress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

CVE-2010-3108

Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names...

Buffer overflow

Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names...

CVE-2010-3108

Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names...

CVE-2010-3108: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names...

Syntax High Lighter 3.0.83 Cross Site Scripting

==================================================== Syntax High Lighter 3.0.83 XSS Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

VulnCheck KEV: CVE-2006-0005

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...

Sql injection

SQL injection vulnerability in the jEmbed-Embed Anything comjembed component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a summary action to index.php...

CVE-2010-1073: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the jEmbed-Embed Anything comjembed component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a summary action to index.php...

CVE-2010-0162

The CVE-2010-0162 issue affects Mozilla Firefox 3.0.x before 3.0.18, Firefox 3.5.x before 3.5.8, and SeaMonkey before 2.0.3. The root cause is improper handling of the application/octet-stream content type in contexts involving SVG and EMBED, allowing remote attackers to bypass Same Origin Policy...

CVE-2010-0162: Improper Neutralization of Input During Web Page Generation

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote...

Mozilla bypass of same-origin policy due to improper SVG document processing (MFSA 2010-05)

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote...

Hardcoded credentials

WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document...

CVE-2009-2200

WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document...

MS Internet Explorer EMBED Memory Corruption PoC (MS09-014)

No description provided by source. BODY onload=go/BODY !-- MS09-014: MSIE EMBED element race condition memory corruption Code by SkyLined [email protected] http://skypher.com/SkyLined/Repro/MSIE/EMBED%20memory%20corruption/repro3.html...

Microsoft Internet Explorer Memory Corruption

http://skypher.com/SkyLined/Repro/MSIE/EMBED%20memory%20corruption/repro3.html http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption -- var asMimeTypes = "x-world/x-3dmf", "x-world/x-3dmf", "application/octet-stream", "application/x-authorware-bin",...

MS Internet Explorer EMBED Memory Corruption PoC (MS09-014)

Exploit for unknown platform in category dos / poc =========================================================== MS Internet Explorer EMBED Memory Corruption PoC MS09-014 =========================================================== var asMimeTypes = "x-world/x-3dmf", "x-world/x-3dmf",...

MS09-014: MSIE EMBED element race condition memory corruption

Some details + repro: http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption/ Cheers, SkyLined Berend-Jan Wever [email protected] http://skypher.com/SkyLined...

Microsoft Internet Explorer - EMBED Memory Corruption (PoC) (MS09-014)

http://skypher.com/SkyLined/Repro/MSIE/EMBED%20memory%20corruption/repro3.html http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption -- var asMimeTypes = "x-world/x-3dmf", "x-world/x-3dmf", "application/octet-stream", "application/x-authorware-bin",...

Microsoft Internet Explorer - EMBED Memory Corruption (PoC) (MS09-014)

Microsoft Internet Explorer - EMBED Memory Corruption PoC MS09-014 http://skypher.com/SkyLined/Repro/MSIE/EMBED%20memory%20corruption/repro3.html http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption -- var asMimeTypes = "x-world/x-3dmf", "x-world/x-3dmf",...