7404 matches found
[SA15074] Turba Parent Frame Page Title Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Turba Parent Frame Page Title Cross-Site Scripting...
CVE-2005-1317
Cross-site scripting XSS vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1316
Cross-site scripting XSS vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1315
Cross-site scripting XSS vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1318
Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1313
Cross-site scripting XSS vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
Horde Imp < 3.2.8 Parent Frame Page Title XSS
Binary data 2856.prm...
Horde Chora < 1.2.3 Parent Frame Page Title XSS
Binary data 2853.prm...
Horde Nag < 1.1.3 Parent Frame Page Title XSS
Binary data 2852.prm...
Horde Vacation < 2.2.2 Parent Frame Page Title XSS
Binary data 2850.prm...
Horde Accounts < 2.1.2 Parent Frame Page Title XSS
Binary data 2854.prm...
Horde Forwards < 2.2.2 Parent Frame Page Title XSS
Binary data 2855.prm...
CVE-2005-0961
Cross-site scripting XSS vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title...
CVE-2003-1059
Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access...
DEBIAN-CVE-2004-0991
Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files...
mpg123 -- buffer overflow vulnerability
Yuri D'Elia has found a buffer overflow vulnerability in mpg123's parsing of frame headers in input streams. This vulnerability can potentially lead to execution of arbitrary code with the permissions of the user running mpg123, if the user runs mpg123 on a specially crafted MP2 or MP3 file...
CVE-2004-2383
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain...
Microsoft Internet Explorer buffer overflow
Buffer overflow in FRAME and IFRAME tags parameters...
[Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
Since nobody else posted an exploit I figured I might aswell slap the BoF together with my default exploit JavaScript for the scriptkiddies to rejoice and the sysadmins to worry about. TECHNICAL The JavaScript creates a large amount of heap-blocks filled with 0x0D byte nopslides followed by the...
RHEL 2.1 / 3 : kdelibs, kdebase (RHSA-2004:412)
Updated kdelib and kdebase packages that resolve multiple security issues are now available. The kdelibs packages include libraries for the K Desktop Environment. The kdebase packages include core applications for the K Desktop Environment. Andrew Tuitt reported that versions of KDE up to and...