SAWStudio 3.9i - .prf Local Buffer Overflow (PoC)

SAWStudio 3.9i - .prf Local Buffer Overflow PoC SAWStudio 3.9i prf file Buffer overflow Poc By:Encrypt3d.M!nd Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends when you import Prefernces File "prf file" contain long characters an overflow will occure,and the registers will be ju...

thunderbird security update

1.5.0.12-17.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove - thunderbird-redhat-default-prefs.js 1.5.0.12-17 - Update patchset to fix regression as per 1.8.1.18...

Mozilla Foundation Security Advisory 2008-40

Mozilla Foundation Security Advisory 2008-40 Title: Forced mouse drag Impact: Low Announced: September 23, 2008 Reporter: Paul Nickerson, Liu Die Yu Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 SeaMonkey 1.1.12 Description Mozilla developer Paul Nickerson reported a varia...

PHP iCalendar 2.24 - cookie_language Local File Inclusion Arbitrary File Upload

PHP iCalendar 2.24 - cookielanguage Local File Inclusion Arbitrary File Upload '.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. el...

Design/Logic Flaw

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

CVE-2008-2312

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

CVE-2008-2312

CVE-2008-2312 affects Apple Mac OS X 10.4.11: Network Preferences stores PPP passwords in cleartext in a world-readable file, allowing local users to read sensitive credentials. Root cause: credentials stored insecurely. Impact: confidentiality of PPP passwords isCOMPLETE; exploitation is local. ...

CVE-2008-2312

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

CVE-2008-2312: Undefined Security Weakness

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

Directory traversal

Directory traversal vulnerability in core/langapi.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page accountprefsupdate.php...

CVE-2008-3333

Directory traversal vulnerability in core/langapi.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page accountprefsupdate.php...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

DEBIAN-CVE-2008-0165

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

CVE-2008-0165

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

CVE-2008-0165

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

CVE-2008-0165

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

CVE-2008-0165: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

firefox security update

1.5.0.12-15.el51.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-15 - Update patchset to fix regressions as per 1.8.1.14...

ikiwiki -- cross site request forging

The ikiwiki development team reports: Cross Site Request Forging could be used to construct a link that would change a logged-in user's password or other preferences if they clicked on the link. It could also be used to construct a link that would cause a wiki page to be modified by a logged-in...

Session isn't invalidated on logout

When the user logs out the HttpSession isn't invalidated. The important details of the logged in user and other information is correctly cleared but other properties such as user preferences are not. The impact is things like the label's section and location section's openness state isn't correct...