402 matches found
Webutler CMS 3.2 Cross Site Request Forgery
Exploit Title: Webutler CMS Cross-Site Request Forgery Date: 18 April 2016 Exploit Author: Keerati T. Post Vendor Homepage: http://webutler.de/en Software Link: http://webutler.de/download/webutlerv3.2.zip Version: 3.2 Tested on: Linux 1.Description The Webutler is a simple online page editor for...
[SECURITY] Fedora 20 Update: drupal7-ckeditor-1.16-2.fc20
This module will allow Drupal to replace textarea fields with the CKEditor - a visual HTML editor 1, usually called a WYSIWYG editor. This HTML text edi tor brings many of the powerful WYSIWYG editing functions of known desktop edit ors like Word to the web. It's very fast and doesn't require any...
[SECURITY] Fedora 19 Update: drupal7-ckeditor-1.16-2.fc19
This module will allow Drupal to replace textarea fields with the CKEditor - a visual HTML editor 1, usually called a WYSIWYG editor. This HTML text edi tor brings many of the powerful WYSIWYG editing functions of known desktop edit ors like Word to the web. It's very fast and doesn't require any...
[SECURITY] Fedora 21 Update: drupal7-ckeditor-1.16-2.fc21
This module will allow Drupal to replace textarea fields with the CKEditor - a visual HTML editor 1, usually called a WYSIWYG editor. This HTML text edi tor brings many of the powerful WYSIWYG editing functions of known desktop edit ors like Word to the web. It's very fast and doesn't require any...
AlleyCode 2.21 SEH Overflow PoC
No description provided by source. What is AlleyCode? AlleyCode is a free html editor. Alleycode was chosen as one of the best freebies on the Net. The entire list of the ' 101 Fabulous Freebies' was featured in the May 2006 issue of PCWorld Magazine. Thanks PCWorld... Alleycode is a fast, sleek...
openSUSE Security Update : xulrunner (openSUSE-SU-2013:0466-1)
xulrunner was updated to 17.0.4esr bnc808243 to fix a important security issue : - MFSA 2013-29/CVE-2013-0787 bmo848644 Use-after-free in HTML Editor %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
openSUSE Security Update : seamonkey (openSUSE-SU-2013:0468-1)
seamonkey was updated to version 2.16.1 fixing a severe security issue. - MFSA 2013-29/CVE-2013-0787 bmo848644 Use-after-free in HTML Editor %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:0467-1)
Mozilla Firefox was updated to 19.0.2 bnc808243 fixing : - MFSA 2013-29/CVE-2013-0787 bmo848644 Use-after-free in HTML Editor could be used for code execution - blocklist updates %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Mail.ru: Stored XSS on http://cards.mail.ru
Эксперементируя с html редактором на странице отправки открытки http://cards.mail.ru/card/compose.html?cid=7842 был найден вектор, который проходит проверки и остаётся: asdf iframe src=javascript:alert2 В итоге, хранимый xss на страницах...
openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:0431-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SpearPhisher] A Simple Phishing Email Generation Tool
SpearPhisher is a simple point and click Windows GUI tool designed for mostly non-technical people who would like to supplement the education and awareness aspect of their information security program. Not only is it useful to non-technical folks, penetration testers may find it handy for sending...
Oracle Linux 4 : seamonkey (ELSA-2010-0967)
From Red Hat Security Advisory 2010:0967 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base score...
Oracle Linux 3 / 4 : seamonkey (ELSA-2008-0104)
From Red Hat Security Advisory 2008:0104 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...
Oracle Linux 3 / 4 : seamonkey (ELSA-2010-0113)
From Red Hat Security Advisory 2010:0113 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...
Oracle Linux 3 / 4 : seamonkey (ELSA-2008-0547)
From Red Hat Security Advisory 2008:0547 : Updated SeaMonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security...
Oracle Linux 3 / 4 : seamonkey (ELSA-2009-0398)
From Red Hat Security Advisory 2009:0398 : Updated SeaMonkey packages that fix two security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...
Oracle Linux 3 / 4 : seamonkey (ELSA-2008-1037)
From Red Hat Security Advisory 2008:1037 : Updated SeaMonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security...
Mozilla Firefox / Thunderbird / Seamonkey use-after-free vulnerability
HTML editor use-after-free...
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8506)
MozillaFirefox has been updated to the 17.0.4ESR release. Besides the major version update from the 10ESR stable release line to the 17ESR stable release line, this update brings critical security and bugfixes : - VUPEN Security, via TippingPoint's Zero Day Initiative, reported a use-after-free...
