290 matches found
Mozilla: Code installation through holding down Enter (MFSA 2011-40)
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site...
PT-2010-2479 · Gtk+ Team +1 · Gtk+ +1
Name of the Vulnerable Software and Affected Versions: GTK+ versions prior to 2.18.5 gnome-screensaver versions prior to 2.28.1 Description: The issue allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times, due to...
Dit.CMS 1.3 Cross Site Scripting
| D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' [email protected] '--''--''--' = DIT.CMS 1.3 XSS | | "ENTER KEYWORDS" FORM FIELD IN DAMNED FRONT PAGE @ DITCMS.ORG /...
CVE-2009-1872
Multiple cross-site scripting XSS vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to 2 wizards/common/logintowizard.cfm, 3...
Mandriva Update for gdm MDKA-2007:116 (gdm)
Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDKA-2007:116 gdm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
CVE-2006-3538
Multiple cross-site scripting XSS vulnerabilities in demo.php in BeatificFaith Eprayer Alpha allow remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the 1 "Your name" field and 2 "Enter Prayer Request here" field...
phpMyChat 0.15.0dev (SYS enter) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================= phpMyChat 0.15.0dev SYS enter Remote Code Execution Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on works with...
CVE-2005-0957: Undefined Security Weakness
Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt...
CVE-1999-0908
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutexenter...
Solaris 7.0 - Recursive mutex_enter Remote Panic (Denial of Service)
source: https://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an active listening port and the server listening on that port is then...