CVE-2014-1346

CVE-2014-1346 affects WebKit as used in Apple Safari before 6.1.4 and 7.x before 7.0.4. The issue is an encoding/unicode handling flaw in URLs that allows remote attackers to spoof a postMessage origin and bypass restrictions when sending a message to a connected frame/window. Impact is spoofing ...

CVE-2014-1346

WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret Unicode encoding, which allows remote attackers to spoof a postMessage origin, and bypass intended restrictions on sending a message to a connected frame or window, via crafted characters in a URL...

Mac OS X : Apple Safari < 6.1.4 / 7.0.4 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is a version prior to 6.1.4 or 7.0.4. It is, therefore, potentially affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or...

CyberLink Power2Go Essential 9.0.1002.0 Overflow

!/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: CyberLink Power2Go 9 Essential 9.0.1002.0 Vendor Site: http://www.cyberlink.com...

Mandriva Linux Security Advisory : rxvt-unicode (MDVSA-2014:094)

Updated rxvt-unicode package fixes security vulnerability : rxvt-unicode aka urxvt before 9.20 is vulnerable to a user-assisted arbitrary commands execution issue. This can be exploited by the unprocessed display of certain escape sequences in a crafted text file or program output. Arbitrary...

CyberLink Power2Go Essential 9.0.1002.0 - Registry Buffer Overflow (SEH Unicode)

CyberLink Power2Go Essential 9.0.1002.0 - Registry Buffer Overflow SEH Unicode !/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version:...

Fedora Update for rxvt-unicode FEDORA-2014-5938

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for rxvt-unicode FEDORA-2014-5939

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CyberLink Power2Go Essential 9.0.1002.0 - Registry Buffer Overflow (SEH Unicode)

!/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: CyberLink Power2Go 9 Essential 9.0.1002.0 Vendor Site: http://www.cyberlink.com...

Aleph 500 SQL Injection

Greetings: I found on a ALEPH500 Integrated library management system SQL Injection Vulnerabilityï¼›CVE-ID is CVE-2014-3719. Aleph 500, fully meet the industry standard, is an art class perfect librarysolution, the Ex Libris to pursue the essence of philosophy is flexible and easy to use. Ex Libr...

Aleph 500 Cross Site Scripting

Greetings: a ALEPH500 Integrated library management system Cross Site Scripting£»CVE-ID is CVE-2014-3718. Aleph 500, fully meet the industry standard, is an art class perfect librarysolution, the Ex Libris to pursue the essence of philosophy is flexible and easy to use. Ex Libris is the world...

CVE-2014-3121

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands...

DEBIAN-CVE-2014-3121

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands...

Command injection

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands...

CVE-2014-3121

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands...

CVE-2014-3121

CVE-2014-3121 affects rxvt-unicode (urxvt) before version 9.20, where OSC escape sequences are not handled correctly. This can allow a remote attacker to manipulate X window properties and potentially execute arbitrary code via a crafted file or remote interaction. Multiple advisories (OpenVAS, S...

CVE-2014-3121

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands...

[SECURITY] Fedora 20 Update: rxvt-unicode-9.20-1.fc20

rxvt-unicode is a clone of the well known terminal emulator rxvt, modified to store text in Unicode either UCS-2 or UCS-4 and to use locale-correct inp ut and output. It also supports mixing multiple fonts at the same time, includ ing Xft fonts...

[SECURITY] Fedora 19 Update: rxvt-unicode-9.20-1.fc19

rxvt-unicode is a clone of the well known terminal emulator rxvt, modified to store text in Unicode either UCS-2 or UCS-4 and to use locale-correct inp ut and output. It also supports mixing multiple fonts at the same time, includ ing Xft fonts...

Fedora 19 : rxvt-unicode-9.20-1.fc19 (2014-5938)

Update to 9.20: http://cvs.schmorp.de/rxvt-unicode/Changes - Fix CVE-2014-3121: user-assisted arbitrary commands execution Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...