7331 matches found
SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 6007)
Mozilla Firefox was updated to 10.0.3 ESR to fix various bugs and security issues. The following security issues have been fixed : - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed...
Tivoli Provisioning Manager Express for Software Distribution Multiple SQL Injections
The remote web application fails to properly sanitize user-supplied input to the following servlets : - Printer.getPrinterAgentKey in the SoapServlet servlet - User.updateUserValue in the register.do servlet - User.isExistingUser in the logon.do servlet - Asset.getHWKey in the CallHomeExec servle...
Mozilla Thunderbird 3.1.x < 3.1.20 Multiple Vulnerabilities
Binary data 801378.prm...
Mozilla Firefox 3.6.x < 3.6.28 Multiple Vulnerabilities
Binary data 801364.prm...
Mozilla Thunderbird 10.x < 10.0.3 Multiple Vulnerabilities
Binary data 801370.prm...
Mozilla Thunderbird 10.0.x < 10.0.3 Multiple Vulnerabilities
The installed version of Thunderbird 10.0.x is potentially affected by the following security issues : - Multiple memory corruption issues. By tricking a user into visiting a specially crafted page, these issues may allow an attacker to execute arbitrary code in the context of the affected...
CVE-2012-0458
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which...
CVE-2012-0458
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which...
Mozilla: Escalation of privilege with Javascript: URL as home page (MFSA 2012-16)
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which...
Mozilla: Escalation of privilege with Javascript: URL as home page (MFSA 2012-16)
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which...
TVersity 1.9.7 Arbitrary File Download
Luigi Auriemma Application: TVersity http://tversity.com Versions: = 1.9.7 Platforms: Windows Bug: arbitrary files downloading Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1...
Escalation of privilege with Javascript: URL as home page — Mozilla
Security researcher Mariusz Mlynski reported that an attacker able to convince a potential victim to set a new home page by dragging a link to the "home" button can set that user's home page to a javascript: URL. Once this is done the attacker's page can cause repeated crashes of the browser,...
Your Xbox is Watching You
Last year researchers from Cornell took a Microsoft Xbox and tweaked its Kinect motion sensing device to analyze what exactly people are doing – be it brushing their teeth, cooking or writing. The device is based around a webcam-like peripheral that uses a RGBD Red, Green, Blue, Depth camera...
HomeSeer HS2 and HomeSeer PRO - Multiple Vulnerabilities
HomeSeer Home Automation Software Multiple Web Vulnerabilities 0day Date: 3/6/12 Author: SilentDream Software Link: http://www.homeseer.com/pub/setuphs25049.exe Version: 2.5.0.49 Tested on: Win XP CERT VU796883: http://www.kb.cert.org/vuls/id/796883 Note: This affects both HomeSeer HS2 and HomeSe...
vixie-cron security, bug fix, and enhancement update
4:4.1-81 - 455664 adoptions of crontab orphans, forgot add buffer for list of orphans - Related: rhbz455664 4:4.1-80 - 654961 crond process ignores the changes of user's home directory needs bigger changes of code. The fix wasn't applied, detail in comment11. - Related: rhbz249512 4:4.1-79 -...
Anfibia Remote Command Execution
Exploit Title: Anfibia Remote Command Execution RCE Vulnerability Date: 2012-02-03 GMT +7 Author: BHG Security Center Discovered : Nitrojen90 Software Link: http://www.anfibia.com.br/ Dork: intext:"/op1.txt" "command" filetype:php Tested on: ubuntu 11.04 CVE : -...
phpShowtime Directory Traversal
Title : phpShowtime Directory Travel Author : Red Security TEAM Date : 31/01/2012 Download : http://phpshowtime.kybernetika.de/ Demo : http://phpshowtime.kybernetika.de/demo/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...
phux Download Manager Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Title : phux Download Manager Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 30/01/2012 Risk : High Demo : http://demos.phux.org/downloadmanager/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...
Android Network Toolkit (ANTI) Review - Pentest at the push of a button
This Post reviews the newly released ANTI3 version. We've received a platinum account of ANTI3, before its official release, and this is our review: Recently White-Hat Hacker, Itzhak "Zuk" Avraham, the founder of zImperium unveiled its new app in Blackhat / Defcon19, introducing a new concept whe...
php ireport v1.0 Remote Html Code injection
Exploit for php platform in category web applications !/usr/bin/perl Title = phpireport v1.0 = Remote Html Code injection Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpireport/phpireport%20v1.0%20alpha%20revision%2025.rar Thnks : +----------------------------------+ | xS...