CVE-2008-4549

The CVE-2008-4549 entry concerns the ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7 (possibly including 4.5.7.69). The vulnerability is that the BuildSlideShow method accepts a file: URI argument, allowing a remote attacker to force the upload of arbitrary ...

Firefox BETA中的Skype工具栏扩展剪贴板安全漏洞

BUGTRAQ ID: 31613 CNCAN ID：CNCAN-2008100807 Skype工具栏可以安装在多个浏览器中作为插件使用。 针对Firefox的Skype工具栏存在一个安全弱点，允许攻击者注入任意内容到用户的剪贴板。 攻击者可以构建恶意WEB页，诱使用户访问，攻击者可以写内容到目标用户的剪贴板，导致攻击者提供的URI一直在目标用户的剪贴板中。 Skype Technologies Skype Toolbars Extension for Firefox BETA 2.2 .95 目前没有解决方案提供：...

Stack overflow

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control LPControl.dll, as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the 1 url, 2 toolbar, and 3 enableZoomPastMax methods...

Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC

No description provided by source. ----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)

----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk...

najdisi-overflow.txt

----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk...

Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)

Najdi.si Toolbar - ActiveX Remote Buffer Overflow PoC ----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written...

Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC =================================================== ----------------------------------------------------------------------------- Najdi.si...

Design/Logic Flaw

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3435

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3435

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3435

The CVE-2008-3435 issue affects the LinkedIn Browser Toolbar (version 3.0.3.1100 and earlier) where the update mechanism does not properly verify authenticity, enabling a man-in-the-middle to deliver a Trojan horse update and execute arbitrary code. Documented impact is arbitrary code execution v...

KLA10244 ACE vulnerability in LinkedIn Browser Toolbar

Improper update verification was found in the LinkedIn Browser Toolbar. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a man-in-the-middle attack. Original advisories - Related products LinkedIn-Internet-Explorer-Toolb...

gapicms 9.0.2 (dirDepth) Remote File Inclusion Vulnerability

No description provided by source. gapicms v9.0.2 dirDepth Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM |, .-. .-. ,| HOME : www.Real-Hack.net | o/ \o | Email : [email protected] |/ /\ | Script : gapicms v9.0.2 Download Script :...

gapicms 9.0.2 (dirDepth) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ gapicms 9.0.2 dirDepth Remote File Inclusion Vulnerability ============================================================ gapicms v9.0.2 dirDepth Remote File Inclusion Vulnerabilit...

Diigo Toolbar crossite scripting

Crossite scripting with publiс comments...

Diigo Toolbar and Diigolet Comment Feature - HTML Injection Information Disclosure

Diigo Toolbar and Diigolet Comment Feature - HTML Injection Information Disclosure source: https://www.securityfocus.com/bid/29611/info Diigo Toolbar and Diigolet are prone to an HTML-injection vulnerability and an information-disclosure vulnerability when handling data via the 'comment' feature...

diigo-xss.txt

Diigo Toolbar - Global XSS and Information Leakage in SSL URLs == Global XSS == Diigo is http://www.diigo.com/ a social bookmarking and sharing application which allows users to see other users comments and notes for every website. For this feature users should use Diigolet bookmarklet or Diigo...

Diigo Toolbar and Diigolet Comment Feature - HTML Injection / Information Disclosure

source: https://www.securityfocus.com/bid/29611/info Diigo Toolbar and Diigolet are prone to an HTML-injection vulnerability and an information-disclosure vulnerability when handling data via the 'comment' feature. An attacker can exploit the HTML-injection issue to run arbitrary HTML and script...

Hatena Toolbar sends URL information unecnrypted

Overview Hatena Toolbar improperly sends URL information to the Hatena server without being encrypted when a user views a web page secured by SSL. Impact When a user of Hatena Toolbar views a SSL secured web page, an attacker could obtain the information contained in the URL such as a session ID...