SUSE SLED11 / SLES11 Security Update : orca (SUSE-SU-2015:2172-1)

This orca update fixes the following security issue. - Don't try to import modules from current working directory bsc916835, CVE-2013-4245. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2015:2172-1 Security update for orca

This orca update fixes the following security issue. - Don't try to import modules from current working directory bsc916835, CVE-2013-4245...

PT-2019-6938

Name of the Vulnerable Software and Affected Versions Orca affected versions not specified Description The issue is related to arbitrary code execution due to an insecure Python module load. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2014-8184

A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable in liblouis. An attacker could create a malicious file that would cause applications that use liblouis such as Orca to crash, or potentially execute arbitrary code when opened...

PT-2014-8435 · Gnome +5 · Orca +5

Name of the Vulnerable Software and Affected Versions: liblouis versions 2.5.x before 2.5.4 Description: A stack-based buffer overflow was found in the findTable function in liblouis. This issue could allow an attacker to create a malicious file that causes applications using liblouis, such as...

UBUNTU-CVE-2014-8184

A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable in liblouis. An attacker could create a malicious file that would cause applications that use liblouis such as Orca to crash, or potentially execute arbitrary code when opened...

Orca Forum 4.3 Forum.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15565/info Orca Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

Orca Blog 1.3 Blog.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15638/info Orca Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

Orca Knowledgebase 2.1 Knowledgebase.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15637/info Orca Knowledgebase is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Orca Ringmaker 2.3 Ringmaker.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15639/info Orca Ringmaker is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation cou...

Orca Browser Remoter Denial Of Service Exploit 0day

Exploit for windows platform in category dos / poc =================================================== Orca Browser Remoter Denial Of Service Exploit 0day =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Interactive Forum Script Remote File Inclusion

Tilte: Orca - Interactive Forum Script Remote File Inclusion Vulnerability. Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Orca Interactive Forum Script. Site Software ..........:...

Orca Browser 1.1 Build 2 Command Execution

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...

Orca Browser Version Detection

This script detects the installed version of Orca Browser and sets the result in KB. OpenVAS Vulnerability Test $Id: gborcabrowserdetect.nasl 7332 2017-09-29 14:16:56Z cfischer $ Orca Browser Version Detection Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Orca Browser 'javascript:' And 'data:' URI XSS Vulnerability

This host is installed with Orca Browser Browser and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gborcabrowserjsndataurixssvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Orca Browser 'javascript:' And 'data:' URI XSS Vulnerability Authors: Sharath S Copyright:...

Orca Browser 'javascript:' And 'data:' URI XSS Vulnerability

Orca Browser Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Orca Browser Detection (Windows SMB Login)

SMB login-based detection of Orca Browser. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800900...

CVE-2009-3017

Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, ...

Cross site scripting

Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, ...

CVE-2009-3017

Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, ...