687 matches found
fileutils Gem for Ruby file_utils.rb Crafted URL Handling Remote Command Execution
fileutils Gem for Ruby contains a flaw in fileutils.rb. The issue is triggered when handling a specially crafted URL containing a command after a delimiter ;. This may allow a remote attacker to potentially execute arbitrary commands...
Google Chrome < 25.0.1364.97 Multiple Vulnerabilities
Binary data 800930.prm...
Opera < 12.12 Multiple Vulnerabilities
Binary data 6649.prm...
Opera < 12.12 Multiple Vulnerabilities
Binary data 800849.prm...
Opera < 12.12 Multiple Vulnerabilities
Binary data 800107.prm...
Opera < 12.12 Multiple Vulnerabilities
The version of Opera installed on the remote host is earlier than 12.12 and is, therefore, reportedly affected by the following vulnerabilities : - An error exists related to GIF image file handling that can allow heap memory corruption and can lead to application crashes or arbitrary code...
APPLE-SA-2012-09-19-1 iOS 6
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-09-19-1 iOS 6 iOS 6 is now available and addresses the following: CFNetwork Available for: iPhone 3GS and later, iPod touch 4th generation and later, iPad 2 and later Impact: Visiting a maliciously crafted website may lead to the...
SquidGuard 1.4 - Long URL Handling Remote Denial of Service
SquidGuard 1.4 - Long URL Handling Remote Denial of Service source: https://www.securityfocus.com/bid/55291/info squidGuard is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to enter emergency mode in which URLs are not blocked. This will result...
SquidGuard 1.4 - Long URL Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/55291/info squidGuard is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to enter emergency mode in which URLs are not blocked. This will result in a denial-of-service condition. squidGuard 1.4 is...
WebKit 沙盒安全限制绕过漏洞(CVE-2012-3697)
BUGTRAQ ID: 54697 CVE ID: CVE-2012-3697 WebKit 是一个开源的浏览器引擎，与之相应的引擎有Gecko（Mozilla Firefox 等使用的排版引擎）和Trident（也称为MSHTML，IE 使用的排版引擎）。同时WebKit 也是苹果Mac OS X 系统引擎框架版本的名称，主要用于Safari，Dashboard，Mail 和其他一些Mac OS X 程序。 Apple Safari 6.0之前版本的WebKit没有正确处理file: URL，可允许远程攻击者通过利用Web进程控制绕过目标沙盒限制和读取任意文件。 0 Apple...
Mac OS X : Apple Safari < 6.0 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X host is earlier than 6.0. It is, therefore, potentially affected by several issues : - An unspecified cross-site scripting issue exists. CVE-2012-0678 - An error in the handling of 'feed://' URLs can allow local files to be disclosed to...
Cross site scripting
Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML by leveraging improper URL canonicalization during the handling of the location.href property...
Ezhometech Ezserver 6.4 Stack Overflow
Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.htm References:...
EZHomeTech Ezserver 6.4 - Remote Stack Overflow
EZHomeTech Ezserver 6.4 - Remote Stack Overflow Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.ht...
Ezhometech Ezserver 6.4 Stack Overflow Exploit
Exploit for windows platform in category remote exploits Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link:...
EZHomeTech Ezserver 6.4 - Remote Stack Overflow
Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.htm References:...
Ubuntu: Security Advisory (USN-1346-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
JavaScript Switcharoo Proof Of Concept 2
/ From: Michal Zalewski Date: Fri, 9 Dec 2011 11:04:22 -0800 Subject: the week of silly PoCs continues: data://www.mybank.com/ Just another short note... this is a somewhat compelling and entirely unnecessary phishing opportunity - and a tiny symptom of the mess with URL handling. Firefox and Ope...
