Code injection

Google Chrome before 28.0.1500.71 does not properly prevent pop-under windows, which allows remote attackers to have an unspecified impact via a crafted web site...

CVE-2013-2867

Google Chrome before 28.0.1500.71 does not properly prevent pop-under windows, which allows remote attackers to have an unspecified impact via a crafted web site...

CVE-2013-2867

This CVE (CVE-2013-2867) affects Google Chrome/Chromium prior to version 28.0.1500.71, where pop-under windows were not properly prevented, enabling a remote attacker to trigger an unspecified impact via a crafted web page. Publicly available connected sources (e.g., Debian DSA-2724-1, Gentoo GLS...

CVE-2013-2867

Removed by vendor...

Google Chrome < 28.0.1500.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 28.0.1500.71 and is, therefore, affected by multiple vulnerabilities : - A vulnerability exists that exposes HTTP in SSL to a man-in-the-middle attack. CVE-2013-2853 - Block pop-unders in various scenarios...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: A special reward for Andrey Labunets for his combination of CVE-2013-2879 and CVE-2013-2868 along with some since fixed server-side bugs. 252216 Low CVE-2013-2867: Block pop-unders in various scenarios. 252062 High CVE-2013-2879: Confusion setting up sign-in and...

(Pwn2Own) Microsoft Internet Explorer Protected Mode Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Sql injection

SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS...

CVE-2013-3524

The CVE-2013-3524 entry describes a SQL injection vulnerability in the Pop Up News module (popupnewsitem/) of phpVMS, affecting version 2.0 and possibly earlier. The issue allows remote attackers to modify and retrieve data by injecting SQL through the itemid parameter. CVSS data from NVD indicat...

CVE-2013-3524

SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS...

jeecms官方论坛逻辑与定向xss

简要描述： 逻辑错误。外加N个 XSS跨站 详细说明： http://bbs.jeecms.com 登陆了以后有一个积分。在积分兑换的时候。出现了逻辑错误。我没太仔细看代码。应为你们论坛不停的弹窗。烦 附送一个xss指定用户的漏洞 漏洞证明： img src="https://images.seebug.org/upload/201305/09152003d9c607aeef924ed9219cee8c64cc742d.jpg" alt="4.jpg" width="...

CVE-2013-0919

Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window...

Design/Logic Flaw

Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window...

CVE-2013-0919

Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window...

CVE-2013-0919

Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window...

Lime Pop Emerges as the Latest Strain of Android Enesoluty Malware

A new variant of Android.Enesoluty, the Android data-stealing Trojan that spreads through spam messages, has recently surfaced in Japan. This time the malware is reportedly being spread through a malicious app, Lime Pop, that disguises itself as a popular game. According to a post on Symantec’s...

ALLMediaServer 0.94 SEH Overflow

!/usr/bin/python import socket, sys Exploit Title: ALLMediaServer 0.94 SEH Overflow Exploit Date: 07/03/2013 Exploit Author: metacom E-mail:[email protected] Software Link:http://allmediaserver.org/download Version: ALLMediaServer 0.94 Tested On: Windows 7 German ALLMediaServer run online mod...

Phishers hijacking Facebook Pages using apps

Another phishing campaign come in action recently targeting Facebook accounts and company pages with millions of followers. Phishers continue to devise new fake apps for the purpose of harvesting confidential information. Not a new method, but very creative phishing example in Facebook hacking...

Mozilla Firefox nsSVGPathElement::GetPathLengthScale越界读取漏洞

BUGTRAQ ID: 57195 CVECAN ID: CVE-2013-0767 Firefox是一款非常流行的开源WEB浏览器。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox 18, ESR 17.0.1, ESR 10.0.12的nsSVGPathElement::GetPathLengthScale内存在越界读取漏洞，可导致远程代码执行。 0 Mozilla Firefox 18.0 Mozilla Firef...

Link hijacking attack one, two, three-vulnerability warning-the black bar safety net

Blog post author: lake2 TSRC Release date: 2012-11-09 Blog post content: With application security development, we are more concerned about application security vulnerabilities, in fact, in the application layer below the Transport Layer there are also many security risks and the security risks...