4205 matches found
Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion
=================================================================================================================== o Joomla Component Gadget Factory Local File Inclusion Vulnerability Software : comgadgetfactory version 1.0.0 Vendor : http://www.thefactory.ro/ Author : AntiSecurity NoGe Vrs-hCk...
Mozilla Code *sighs*
Mozilla Code sighs I reported a memory corruption vulnerability in Mozilla Codesighs, a "set of tools to help you determine the code and data size of shared libraries and executables. Once you can measure the code and data size, then you can measure drifts in size as code changes occur". Mozilla...
Microsoft Windows Vista Feed Headlines Gadget Code Execution (MS07-048; CVE-2007-3033)
Gadgets are mini applications with a variety of possible uses. They can connect to web services to deliver business data, weather information, news updates, traffic maps, Internet radio streams, and even slide shows of on-line photo albums. Windows Vista is shipped with a set of gadgets, includin...
CVE-2008-7037
The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...
Sql injection
The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...
CVE-2008-7037
The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...
CVE-2008-7037
The CVE-2008-7037 entry affects the ITN News Gadget (ITN Hub Gadget) 1.06 for Windows Vista and possibly earlier versions up to 1.23. Affected component: the gadget’s short_title response, where an attacker-controlled remote server or MITM can inject script to execute arbitrary commands on the us...
CVE-2008-7037: Improper Input Validation
The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...
Microsoft Security Bulletin MS07-048 - Important Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)
Microsoft Security Bulletin MS07-048 - Important Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution 938123 Published: August 14, 2007 Version: 1.0 General Information Executive Summary This important security update resolves two privately reported vulnerabilities in addition to...
Microsoft Windows Vista Weather Gadget vulnerability
Overview The Windows Vista Weather gadget contains a vulnerability that may allow and attacker to execute code. Description From Microsoft Security Bulletin MS07-048:Gadgets are mini-applications designed to provide the user with information or utilities. Windows Vista treats gadgets similar to t...
Microsoft Windows Vista Contacts Gadget vulnerability
Overview The Windows Vista Contacts gadget contains a vulnerability that may allow an attacker to execute code. Description From Microsoft Security Bulletin MS07-048:Gadgets are mini-applications designed to provide the user with information or utilities. Windows Vista treats gadgets similar to t...
Design/Logic Flaw
Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...
CVE-2007-3032
Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...
CVE-2007-3032
Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...
CVE-2007-3032
CVE-2007-3032 is a Windows Vista vulnerability in the Contacts Gadget that could allow remote code execution when a user imports specially crafted contact data. The issue, described across multiple sources, arises from insufficient validation of imported contact information, enabling code executi...
CVE-2007-3033: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Windows Vista Feed Headlines Gadget aka Sidebar RSS Feeds Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zo...
CVE-2007-3032: Undefined Security Weakness
Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...
Hacker chickens concealed the whereabouts of the Let account stealth-vulnerability warning-the black bar safety net
Analyzing a hack whether excellent, not a single look at his of the invasion means, whether smart, more important is to see he won't be hiding their whereabouts. I believe we have mastered a variety of invasion means that the hands control the broiler also everywhere is. However, your stealth...
Debian DSA-1097-1 : kernel-source-2.4.27 - several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0038 'Solar Designer' discovered that arithmet...
Debian DSA-1103-1 : kernel-source-2.6.8 - several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3359 Franz Filz discovered that some socket...