CVE-2010-4554

functions/pageheader.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2011-2535

chaniax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a deni...

CVE-2011-2535

chaniax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a deni...

Multiple vulnerabilities in Winamp 5.61

Luigi Auriemma Application: Winamp http://www.winamp.com Versions: = 5.61 Platforms: Windows Bugs: A vp6 heap corruption B h263 heap corruption C nsvdecvp5 frame heap overflow D nsvdecvp6 frame integer overflow E nsvdecvp3 frame heap overflow F inmod heap corruption Date: 27 Jun 2011 Author: Luig...

Google Releases Chrome 12.0.742.100

Google released Chrome 12.0.742.100 for Windows, Mac, Linux, and Chrome Frame to address a critical vulnerability in the Flash player plug-in. This vulnerability could allow an attacker to take control of the affected system. US-CERT encourages users and administrators to review the Google Chrome...

Google Chrome Releases 12.0.742.91

Google has released Chrome 12.0.742.91 for Windows, Mac, Linux, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the Google Chrome Releases blog entry and update to...

frame-oshop SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

frame-oshop is a e-Commerce system, the frame-oshop in the presence ofSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: frame-oshop SQL Injection Vulnerability product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno...

frame-oshop - SQL Injection

frame-oshop - SQL Injection product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno... PoC: http://www.host.com/shop/main.php?id=1111&show=rubrik&rid=-1%20union%20select%201,2,3,4,version,6,7,8,9,10,11,12 Dork: "2006 by Sdaxx Rostock" intitle:"frame-oshop"...

frame-oshop SQL Injection Vulnerability

Exploit for php platform in category web applications product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno... PoC: http://www.host.com/shop/main.php?id=1111&show=rubrik&rid=-1%20union%20select%201,2,3,4,version,6,7,8,9,10,11,12 Dork: "2006 by Sdaxx...

frame-oshop - SQL Injection

product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno... PoC: http://www.host.com/shop/main.php?id=1111&show=rubrik&rid=-1%20union%20select%201,2,3,4,version,6,7,8,9,10,11,12 Dork: "2006 by Sdaxx Rostock" intitle:"frame-oshop" Note: -sessid had to be fre...

Frame-Oshop SQL Injection

product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno... PoC: http://www.host.com/shop/main.php?id=1111&show=rubrik&rid=-1%20union%20select%201,2,3,4,version,6,7,8,9,10,11,12 Dork: "2006 by Sdaxx Rostock" intitle:"frame-oshop" Note: -sessid had to be fre...

CVE-2011-1248

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted packets, related to unintended stack-frame values...

Stable Channel Update

The Stable channel has been updated to 11.0.696.68 for the Macintosh, Windows, Linux and Chrome Frame platforms Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with th...

Google Releases Chrome 11.0.696.68

Google released Chrome 11.0.696.68 for Windows, Mac, Linux, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the Google Chrome Releases blog entry and update to Chrome...

Microsoft Windows Internet Name Service (WINS)失败响应远程代码执行漏洞

Bugtraq ID: 47730 Microsoft Windows是一款微软发行的操作系统。 Microsoft Windows 2003 Server分发的wins.exe服务存在缺陷。此服务设计用于解析NetBIOS请求，并接收42端口的连接，当处理套接字发送异常时存在一个逻辑错误，部分用户提供的值会遗留在栈帧中，并在其他上下文中重用。远程攻击者可以利用这个缺陷调用LeaveCriticalSection，并在一个可控的位置上进行操作。这个条件可导致远程代码在SYSTEM用户上下文执行。 Microsoft Windows Server 2003 Datacenter Editi...

Microsoft WINS Service Failed Response Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Internet Name Service WINS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wins.exe service distributed with Microsoft Windows...

RedHat Update for firefox RHSA-2011:0471-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2011:0471-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mozilla integer overflow in frameset spec (MFSA 2011-12)

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...

eyeos 1.9.0.2 - Persistent Cross-Site Scripting Using Image Files

eyeos 1.9.0.2 - Persistent Cross-Site Scripting Using Image Files Title: eyeOS alert"XSS done"; - Risks and consequences: Malicious users can inject code inside image files malware, browser exploits, etc... to attack other users and compromise the whole system via shared files or internal message...

eyeos 1.9.0.2 - Persistent Cross-Site Scripting Using Image Files

Title: eyeOS alert"XSS done"; - Risks and consequences: Malicious users can inject code inside image files malware, browser exploits, etc... to attack other users and compromise the whole system via shared files or internal messages. - Mitigations: Disallow public dirs. Avoid work with images. -...