CVE-2011-1844: Undefined Security Weakness

Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service memory consumption via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection...

Mozilla untrusted events can trigger autocomplete popup (MFSA 2011-14)

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls...

osCSS2 2.1.0 RC12 Local File Inclusion

------------------------------------------------------------------------ Software................osCSS2 2.1.0 RC12 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.oscss.org/ Disclosure Date.........4/6/2011 Tested...

UBUNTU-CVE-2011-1194

Multiple unspecified vulnerabilities in Google Chrome before 10.0.648.127 allow remote attackers to bypass the pop-up blocker via unknown vectors...

Tomato Gallery 1.2 (logged only) Persistant Xss Vunerability

Exploit for php platform in category web applications author: lemlajt software link: http://tomatogallery.yzx.se/ version: 1.2 tested on: linux cve : poc0.1 : 1. http://localhost/www/cmsadmins/tomatogallery12/edit/index.php 2. click @ "Add Separator" and type: bla'';!--alert document.cookie=& in...

Sun Java Web Start BasicServiceImpl - Remote Code Execution (Metasploit)

$Id: javabasicserviceimpl.rb 11623 2011-01-22 00:16:57Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Joomla Pinboard Remote File Inclusion

========================================================= Joomla Component compinboard RFI Vulnerability ========================================================= +Title : Joomla Component compinboard RFI Vulnerability +Author : josalijoe +Contact : [email protected] +Home :...

Sun Java Web Start BasicServiceImpl Code Execution

This module exploits a vulnerability in Java Runtime Environment that allows an attacker to escape the Java Sandbox. By injecting a parameter into a javaws call within the BasicServiceImpl class the default java sandbox policy file can be therefore overwritten. The vulnerability affects version 6...

Microsoft Windows 7 wab.exe DLL Hijacking Exploit (wab32res.dll)

Exploit for windows platform in category local exploits ================================================================ Microsoft Windows 7 wab.exe DLL Hijacking Exploit wab32res.dll ================================================================ / Exploit Title: Microsoft Windows 7 wab.exe DLL...

Unfixed XSS vulnerability at board5.dcinside.com

Security researcher NetdiversP4p3R, has submitted on 15/08/2010 a cross-site-scripting XSS vulnerability affecting board5.dcinside.com, which at the time of submission ranked 3030 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It i...

Opera Browser Multiple Vulnerabilities july-10 (Win01)

The host is installed with Opera web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnwin01july10.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser Multiple Vulnerabilities july-10 Win01 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Opera Browser < 10.60 Multiple Vulnerabilities (Jul 2010) - Windows

Opera web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2662

Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."...

Design/Logic Flaw

Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."...

CVE-2010-2662

CVE-2010-2662: Opera before 10.60 allows remote attackers to bypass the popup blocker using a javascript: URL and a fake click. Affected product is the Opera browser; vulnerability details and CVE references are documented in multiple sources. Mitigation per Gentoo GLSA 201206-03 recommends upgra...

CVE-2010-2662

Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."...

CVE-2010-2662: Undefined Security Weakness

Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."...

NetworX 1.0.3 Cross Site Scripting

------------------------------------------------------------------------ Software................NetworX 1.0.3 Vulnerability...........Reflected XSS Download................http://sourceforge.net/projects/networx/ Release Date............7/5/2010 Tested On...............Windows Vista + XAMPP...

JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability

Exploit for php platform in category web applications ===================================================================== JV2 Folder Gallery 3.1.1 popupslideshow.php Multiple Vulnerability =====================================================================...

Design/Logic Flaw

Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to create a popup window for a crafted HTML document, and then calling the parent window's close method, which triggers improper handling of a deleted window object...