SeaMonkey < 1.1.15 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.15. Such versions are potentially affected by the following security issues : - There are several stability bugs in the browser engine that may lead to crashes with evidence of memory corruption. MFSA 2009-01 - Cookies marked HTTPOnly are...

Mozilla Thunderbird < 2.0.0.21 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 2.0.0.21. Such versions are potentially affected by the following security issues : - There are several stability bugs in the browser engine that could lead to crashes with evidence of memory corruption. MFSA 2009-01 - By exploiting stability...

PPLive URI处理器LoadModule参数多个代码执行漏洞

BUGTRAQ ID: 34128 PPLive是非常流行的P2P网络视频客户端。 PPLive的synacast://、Play://、pplsv://和ppvod:// URI处理器在评估命令行参数时没有正确地验证URI参数，如果用户受骗跟随的链接中包含有特制的/LoadModule参数的话，就可能导致Internet Explorer加载远程VNC路径所指定的dll。 聚力传媒 PPLive = 1.9.21 厂商补丁： 聚力传媒 -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

PPLive &lt;= 1.9.21 (/LoadModule) URI Handlers Argument Injection vulnerability

No description provided by source. -------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers "/LoadModule" remote argument injection by Nine:Situations:Group::strawdog...

PPLive &lt;= 1.9.21 (/LoadModule) URI Handlers Argument Injection Vuln

No description provided by source. -------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers "/LoadModule" remote argument injection by Nine:Situations:Group::strawdog...

PPLive 1.9.21 - LoadModule URI Handlers Argument Injection

PPLive 1.9.21 - LoadModule URI Handlers Argument Injection -------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers "/LoadModule" remote argument injection by Nine:Situations:Group::strawdog...

PPLive 1.9.21 Argument Injection

-------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers "/LoadModule" remote argument injection by Nine:Situations:Group::strawdog -------------------------------------------------------------------------------- software...

PPLive <= 1.9.21 (/LoadModule) URI Handlers Argument Injection Vuln

Exploit for unknown platform in category remote exploits =================================================================== PPLive = 1.9.21 /LoadModule URI Handlers Argument Injection Vuln ===================================================================...

Woltlab Burning Board Multiple Input Validation Vulnerabilities

Woltlab Burning Board is prone to multiple input-validation vulnerabilities, including: - Multiple security that may allow attackers to delete private messages - A cross-site scripting vulnerability - Multiple URI redirection vulnerabilities Attackers can exploit these issues to delete private...

Woltlab Burning Board <= 3.0.5 Multiple Input Validation Vulnerabilities - Active Check

Woltlab Burning Board is prone to multiple input-validation vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Aryanic HighCMS and HighPortal multiple Vulnerabilities

================= IUT-CERT ================= Title: Aryanic HighPortal, HighCMS Multiple Vulnerabilities Vendor: www.aryanic.com Vulnerable Version: 10 and priors Type: Input.Validation.Vulnerability URI Injection, Frame Injection, XSS Fix: N/A ================== nsec.ir =================...

TikiWiki 2.2 XSS Vulnerability in URI

Application: TikiWiki Version: 2.2 latest Website: www.tikiwiki.org Bug: Active XSS in URI Exploitation: Remote Date: 12 Mar 2009 Discovered by: iliz Author: iliz Contact: e-mail: iliz-zatyandexdotru Bug Description: TikiWiki version 2.2 and later uses URI in html response body and fails to...

RedHat Update for lynx RHSA-2008:0965-01

Check for the Version of lynx OpenVAS Vulnerability Test RedHat Update for lynx RHSA-2008:0965-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

RedHat Update for firefox RHSA-2008:0978-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2008:0978-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Apple Safari URI NULL Pointer Dereference DoS Vulnerability (Windows)

This host is running Apple Safari web browser and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariuridosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari URI NULL Pointer Dereference DoS Vulnerability Windows Authors: Nikita MR Copyright:...

Internet Explorer 8 Spoof

IE8 beta RC1 res://ieframe.dll/acrerror.htm Spoff Vendor page: www.microsoft.com Advisore:http://lostmon.blogspot.com/ 2009/03/ie8-beta-rc1-resieframedllacrerrorhtm.html vendor notify:yes exploit available:yes Internet explorer 8 has a flaw that allows remote users to spooff the domain name in...

Apple Safari URI NULL Pointer Dereference DoS Vulnerability - Windows

Apple Safari web browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Dogfood CRM spell.php Remote Command Execution

This module exploits a previously unpublished vulnerability in the Dogfood CRM mail function which is vulnerable to command injection in the spell check feature. Because of character restrictions, this exploit works best with the double-reverse telnet payload. This vulnerability was discovered by...

Null pointer dereference

Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a feeds: URI beginning with a 1 % percent, 2 open curly bracket, 3 close curly bracket, 4 ^ caret, 5 backquote, or 6 | pipe character, followed by an & ampersan...

Apple Safari畸形feeds: URI空指针引用拒绝服务漏洞

BUGTRAQ ID: 33909 Safari是苹果家族操作系统中默认捆绑的WEB浏览器。 Apple Safari没有充分地过滤feeds: URI中所提供的用户输入，如果用户受骗跟随了恶意链接，就会触发空指针引用，导致Safari进程崩溃。 Apple Safari 4 Beta 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com feeds:%&www.rec-sec.com/feed/ feeds:&www.rec-sec.com/feed/...