Group picker popup JSP has XSS hole if group names are XSS shaped

If a group name has a XSS shaped name, then the group picker will allow scripts to be executed...

Mozilla Foundation Security Advisory 2010-15

Mozilla Foundation Security Advisory 2010-15 Title: Asynchronous Auth Prompt attaches to wrong window Impact: Low Announced: March 23, 2010 Reporter: Justin Dolske Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Mozilla developer Justin Dolske reported that the new asynchronous...

Asynchronous Auth Prompt attaches to wrong window — Mozilla

Mozilla developer Justin Dolske reported that the new asynchronous Authorization Prompt HTTP username and password was not always attached to the correct window. Although we have not demonstrated this, it may be possible for a malicious page to convince a user to open a new tab or popup to a...

Internet Explorer Popup Title Bar Spoofing (CVE-2005-0500)

Microsoft Internet Explorer is a popular, all-purpose browser, bundled with the Microsoft Windows operating systems. Microsoft Internet Explorer IE 6 Service Pack 2 is a release with major security enhancements. One of the new security features is the way IE displays text in the title bar for...

CVE-2010-0655

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site...

Design/Logic Flaw

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event...

CVE-2010-0650

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event...

CVE-2010-0655

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site...

CVE-2010-0650

Removed by vendor...

CVE-2010-0650

CVE-2010-0650 affects WebKit used by Google Chrome (pre-4.0.249.78) and Apple Safari. The flaw allows remote attackers to bypass restrictions on popup windows via crafted mouse click events. Public updates exist: openSUSE/SUSE and Mandriva advisories reference libwebkit/webkit updates addressing ...

CVE-2010-0655

Removed by vendor...

Microsoft Internet Explorer MHTML URI Buffer Overflow (CVE-2006-2766)

There exists a buffer overflow vulnerability in the Microsoft Internet Explorer product. The flaw is caused by an improper check of the MHTML URI string. An attacker may exploit this vulnerability to cause a denial of service condition. A code execution attack is not possible as a stack integrity...

E-Pay - Remote File Inclusion

======================================================================================== | Title : E-Pay RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | | Script :...

35mm Slide Gallery - Cross-Site Scripting

35mm Slide Gallery - Cross-Site Scripting | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | | Script : powered by 35mm Slide Gallery http://www.andymack.com/freescripts/ | | Tested on: windows SP2 Français...

35mm Slide Gallery Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ===================================================== 35mm Slide Gallery Cross Site Scripting Vulnerability ===================================================== | Script : powered by 35mm Slide Gallery http://www.andymack.com/freescripts/...

CVE-2009-4056

The CVE-2009-4056 entry concerns Betsy CMS 3.5, where a directory traversal flaw exists in admin/popup.php. The vulnerability allows remote attackers to cause local file inclusion and arbitrary code execution by supplying a .. (dot dot) sequence in the popup parameter. Affected component: Betsy C...

CVE-2009-3746

XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711...

Design/Logic Flaw

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different...

CVE-2009-1276

XScreenSaver in Sun Solaris 10 and OpenSolaris before snv109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail...

Ubuntu: Security Advisory (USN-592-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...