Mozilla Foundation Security Advisory 2010-15

Mozilla Foundation Security Advisory 2010-15 Title: Asynchronous Auth Prompt attaches to wrong window Impact: Low Announced: March 23, 2010 Reporter: Justin Dolske Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Mozilla developer Justin Dolske reported that the new asynchronous...

Asynchronous Auth Prompt attaches to wrong window — Mozilla

Mozilla developer Justin Dolske reported that the new asynchronous Authorization Prompt HTTP username and password was not always attached to the correct window. Although we have not demonstrated this, it may be possible for a malicious page to convince a user to open a new tab or popup to a...

Internet Explorer Popup Title Bar Spoofing (CVE-2005-0500)

Microsoft Internet Explorer is a popular, all-purpose browser, bundled with the Microsoft Windows operating systems. Microsoft Internet Explorer IE 6 Service Pack 2 is a release with major security enhancements. One of the new security features is the way IE displays text in the title bar for...

Design/Logic Flaw

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event...

CVE-2010-0650

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event...

CVE-2010-0655

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site...

CVE-2010-0655

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site...

CVE-2010-0650

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event...

CVE-2010-0650

CVE-2010-0650 affects WebKit used by Google Chrome (pre-4.0.249.78) and Apple Safari. The flaw allows remote attackers to bypass restrictions on popup windows via crafted mouse click events. Public updates exist: openSUSE/SUSE and Mandriva advisories reference libwebkit/webkit updates addressing ...

CVE-2010-0655

Removed by vendor...

CVE-2010-0650

Removed by vendor...

CVE-2010-0650: Undefined Security Weakness

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event...

CVE-2010-0655: Undefined Security Weakness

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site...

Microsoft Internet Explorer MHTML URI Buffer Overflow (CVE-2006-2766)

There exists a buffer overflow vulnerability in the Microsoft Internet Explorer product. The flaw is caused by an improper check of the MHTML URI string. An attacker may exploit this vulnerability to cause a denial of service condition. A code execution attack is not possible as a stack integrity...

E-Pay - Remote File Inclusion

======================================================================================== | Title : E-Pay RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | | Script :...

35mm Slide Gallery Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ===================================================== 35mm Slide Gallery Cross Site Scripting Vulnerability ===================================================== | Script : powered by 35mm Slide Gallery http://www.andymack.com/freescripts/...

35mm Slide Gallery - Cross-Site Scripting

35mm Slide Gallery - Cross-Site Scripting | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | | Script : powered by 35mm Slide Gallery http://www.andymack.com/freescripts/ | | Tested on: windows SP2 Français...

CVE-2009-4056

The CVE-2009-4056 entry concerns Betsy CMS 3.5, where a directory traversal flaw exists in admin/popup.php. The vulnerability allows remote attackers to cause local file inclusion and arbitrary code execution by supplying a .. (dot dot) sequence in the popup parameter. Affected component: Betsy C...

CVE-2009-3746

XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711...

CVE-2009-3746: Undefined Security Weakness

XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711...