HackerOne: Window Opener Property Bug

The bug mentioned in 23386 is not yet correctly patched I believe. See, if a user sets his/her profile's website link to a similar page as mentioned in 23386. I mean a page that can manipulate the window.opener property would be able to accomplish similar results as in 23386 Proof-of-Concept: 1...

HackerOne: Redirect while opening links in new tabs

Hello HackerOne, I'd like to report to you a nice little bug about opening links in new tabs. When you open a link in a new tab target="blank" , the page that opens in a new tab can access the initial tab and change it's location using the window.opener property. POC:...

Free Opener Local Denial of Service

No description provided by source. !/usr/bin/perl Exploit Title: Free Opener Local Denial of Service Date: 09-12-11 Author: Iolo Morganwg Download: http://dl.installiq.com/download/downloadpop.aspx?shortname=freeopener&a=13193&f=FO-Main Tested on: Windows XP SP3 To trigger: Run script open with...

[SECURITY] Fedora 18 Update: kde-baseapps-4.10.4-1.fc18

Core applications for KDE 4, including: dolphin : File manager kdepasswd : Changes a UNIX password. kdialog : Nice dialog boxes from shell scripts keditbookmarks : Bookmark oranizer and editor kfind : File find utility kfmclient : Tool for opening URLs from the command line konqueror : Web browse...

[SECURITY] Fedora 19 Update: kde-baseapps-4.10.4-1.fc19

Core applications for KDE 4, including: dolphin : File manager kdepasswd : Changes a UNIX password. kdialog : Nice dialog boxes from shell scripts keditbookmarks : Bookmark oranizer and editor kfind : File find utility kfmclient : Tool for opening URLs from the command line konqueror : Web browse...

Free Opener Denial Of Service

!/usr/bin/perl Exploit Title: Free Opener Local Denial of Service Date: 09-12-11 Author: Iolo Morganwg Download: http://dl.installiq.com/download/downloadpop.aspx?shortname=freeopener&a=13193&f=FO-Main Tested on: Windows XP SP3 To trigger: Run script open with Free opener, program dies!. my $file...

Free Opener - Local Denial of Service

Free Opener - Local Denial of Service !/usr/bin/perl Exploit Title: Free Opener Local Denial of Service Date: 09-12-11 Author: Iolo Morganwg Download: http://dl.installiq.com/download/downloadpop.aspx?shortname=freeopener&a=13193&f=FO-Main Tested on: Windows XP SP3 To trigger: Run script open wit...

Free Opener Local Denial of Service

Exploit for windows platform in category dos / poc !/usr/bin/perl Exploit Title: Free Opener Local Denial of Service Date: 09-12-11 Author: Iolo Morganwg Download: http://dl.installiq.com/download/downloadpop.aspx?shortname=freeopener&a=13193&f=FO-Main Tested on: Windows XP SP3 To trigger: Run...

Free Opener - Local Denial of Service

!/usr/bin/perl Exploit Title: Free Opener Local Denial of Service Date: 09-12-11 Author: Iolo Morganwg Download: http://dl.installiq.com/download/downloadpop.aspx?shortname=freeopener&a=13193&f=FO-Main Tested on: Windows XP SP3 To trigger: Run script open with Free opener, program dies!. my $file...

Internet Explorer JavaScript Opener Object Information Disclosure (MS11-018; CVE-2011-1245)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. A remote attacker could exploit this issue by convincing a user to open a maliciously crafted HTML file with Internet Explorer, which may allow the attacker to view data from a Web page in another Internet...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1727)

The Mozilla Firefox was updated to version 3.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - MFSA 2009-65/CVE-2009-3979/CVE-2009-3981 Crashes with evidence of memory corruption 1.9.0.16 - MFSA 2009-68/CVE-2009-3983 bmo487872 NTLM reflection vulnerability...

SeaMonkey < 2.0.1 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.1. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2009-65 - Multiple vulnerabilities in 'liboggplay' can lead to arbitrary code execution. MFSA 2009-66...

SWF Opener 1.3 (.swf File) Off By One Buffer Overflow PoC

No description provided by source. SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to exploit, but who knows? -- At least, there still exist Underground stack overflows in :d Version: 1.3 http://www.browsertools.net/downloads/SWFOpenerSetup.exe usage perl poc.pl xpl.swf In Th...

SWF Opener 1.3 - .swf Off-by-One Buffer Overflow (PoC)

SWF Opener 1.3 - .swf Off-by-One Buffer Overflow PoC SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to exploit, but who knows? -- At least, there still exist Underground stack overflows in :d Version: 1.3 http://www.browsertools.net/downloads/SWFOpenerSetup.exe usage perl...

SWF Opener 1.3 Buffer Overflow

SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to exploit, but who knows? -- At least, there still exist Underground stack overflows in :d Version: 1.3 http://www.browsertools.net/downloads/SWFOpenerSetup.exe usage perl poc.pl xpl.swf In The Stack 0012BBE8 41 41 41 41 41 41 ...

SWF Opener 1.3 - '.swf' Off-by-One Buffer Overflow (PoC)

SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to exploit, but who knows? -- At least, there still exist Underground stack overflows in :d Version: 1.3 http://www.browsertools.net/downloads/SWFOpenerSetup.exe usage perl poc.pl xpl.swf In The Stack 0012BBE8 41 41 41 41 41 41 ...

SWF Opener 1.3 (.swf File) Off By One Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= SWF Opener 1.3 .swf File Off By One Buffer Overflow PoC ========================================================= SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to...

MS Outlook Express Window Opener Vulnerability

Exploit for unknown platform in category remote exploits ============================================== MS Outlook Express Window Opener Vulnerability ============================================== Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this...