CVE-2011-2932

Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...

CVE-2011-2932

Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...

CVE-2011-2932

CVE-2011-2932 is a cross-site scripting (XSS) vulnerability in Ruby on Rails’ activesupport core:_string/output_safety.rb, linked to a UTF-8 escaping issue. Affected versions include Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5. The issue enables remote injection of sc...

PT-2011-4191

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 2.x through 2.3.12 Ruby on Rails versions 3.0.x through 3.0.9 Ruby on Rails versions 3.1.x through 3.1.0.rc4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via...

Symantec Veritas Storage Foundation vxsvc.exe Unicode String Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the vxsvc.exe process. The problem affecting the part of the serve...

Internet Explorer findText Unicode Parsing Denial of Service (CVE-2009-2655)

Microsoft Internet Explorer is the most widely used Internet browser. A denial of service vulnerability has been reported in the way Microsoft Internet Explorer parses HTML pages. The vulnerability is due to an error in the mshtml.dll library. A remote attacker might exploit this issue by...

Internet Explorer 8 CSS Parser Exploit

Exploit for windows platform in category remote exploits ====================================== Internet Explorer 8 CSS Parser Exploit ====================================== !/usr/bin/env ruby Source: http://www.breakingpointsystems.com/community/blog/ie-vulnerability/ Author: Nephi Johnson...

CA Internet Security Suite 2010 - 'KmxSbx.sys' Kernel Pool Overflow

/ Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link: http://shop.ca.com/ca/products/internetsecurity/internetsecuritysuite.asp Version: up to date, KmxSbx.sys version 6.2.0.22...

Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability

Internet Explorer is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability

This host has Internet Explorer installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmsiefindtextdosvulnaug09.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer 'findText' Unicode Parsing DoS Vulnerability Authors: Sharath S Copyright:...

Code injection

mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service application crash by calling the JavaScript findText method with a crafted Unicode string in the first argument, and only one additional argument, as demonstrated by a second...

Microsoft Internet Explorer Unicode String DoS Vulnerability

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Unicode String Denial Of Service Vulnerability - Linux

Opera is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Unicode String Denial Of Service Vulnerability

Google Chrome is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Unicode String Denial Of Service Vulnerability - Windows

Opera is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Unicode String Denial Of Service Vulnerability (Linux)

This host is installed with Opera and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodoperaunicodestrdosvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Unicode String Denial Of Service Vulnerability Linux Authors: Sharath S Updated for New CVE's - By Shara...

Google Chrome Unicode String Denial Of Service Vulnerability

This host is installed with Google Chrome and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromeunicodestrdosvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome Unicode String Denial Of Service Vulnerability Authors: Sharath S Copyright: Copyrig...

Sql injection

Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service application crash via a long Unicode string argument to the write method, a related issue to CVE-2009-2479...

Sql injection

Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU and memory consumption, and application hang via a long Unicode string argument to the write method, a related issue to CVE-2009-2479...

Sql injection

Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also...