CVE-2009-0587

Multiple integer overflows in Evolution Data Server aka evolution-data-server before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in 1 addressbook/libebook/e-vcard.c in evc or 2 camel/camel-mime-utils.c in libcam...

HTC Touch vCard over IP Denial of Service Exploit

No description provided by source. ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restrictio...

HTC Touch DoS

vCard files are accepted and imported without user intervation...

HTC Touch - vCard over IP Denial of Service

!/usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restriction, including without limitation the...

HTC Touch vCard over IP Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================= HTC Touch vCard over IP Denial of Service Exploit ================================================= ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby...

HTC Touch - vCard over IP Denial of Service

HTC Touch - vCard over IP Denial of Service ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without...

HTC Touch vCard over IP Denial of Service PoC Code

Hello, PoC code for testing the MSL-2008-002 vulnerability HTC Touch vCard over IP Denial of Service is now available at: http://poc.mseclab.com/pocs/MSL-2008-002-PoC.py The code provide means for demonstrating the HTC Touch vCard over IP DoS by sending vCards to port UDP/9204 of the target IP...

HTC Touch vCard Over IP Denial Of Service

! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restriction, including without limitation the...

roundcube -- webmail script insertion and php code injection

Secunia reports: Some vulnerabilities have been reported in RoundCube Webmail, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to conduct script insertion attacks and compromise a vulnerable system. The HTML "background" attribute within e.g. HT...

FreeBSD Ports: thunderbird

The remote host is missing an update to the system as announced in the referenced advisory. VID da690355-1159-11d9-bc4a-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Ubuntu 6.06 LTS : mozilla-thunderbird vulnerabilities (USN-329-1)

Various flaws have been reported that allow an attacker to execute arbitrary code with user privileges by tricking the user into opening a malicious email containing JavaScript. Please note that JavaScript is disabled by default for emails, and it is not recommended to enable it. CVE-2006-3113,...

Ubuntu 6.06 LTS : mozilla-thunderbird vulnerabilities (USN-297-1)

Jonas Sicking discovered that under some circumstances persisted XUL attributes are associated with the wrong URL. A malicious website could exploit this to execute arbitrary code with the privileges of the user. MFSA 2006-35, CVE-2006-2775 Paul Nickerson discovered that content-defined setters o...

openSUSE 10 Security Update : seamonkey (seamonkey-1952)

This security update brings Mozilla SeaMonkey to version 1.0.4. Please also see http://www.mozilla.org/projects/security/known-vulnerabilities.html for more details. It includes fixes to the following security problems : - CVE-2006-3801/MFSA 2006-44: Code execution through deleted frame reference...

vcard26-xss.txt

Discovered By : Hasadya Raed Contact : [email protected] Script: vCard 2.6 c2002 Bug in : create.php Exploit : http://www.victim.com/path/create.php?uploaded="alert1; --...

XSS Remote In vCard 2.6 (c)2002

Discovered By : Hasadya Raed Contact : [email protected] Script: vCard 2.6 c2002 Bug in : create.php Exploit : http://www.victim.com/path/create.php?uploaded="alert1;/script -- Get your free email from http://bsdmail.com...

CVE-2007-0054

Cross-site scripting XSS vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject arbitrary web script or HTML via the sortby parameter...

CVE-2007-0054

The CVE-2007-0054 entry describes a Cross-site Scripting (XSS) vulnerability in Belchior Foundry vCard PRO, specifically in gbrowse.php where an attacker can inject arbitrary web script or HTML via the sortby parameter. Affected component: gbrowse.php in Belchior Foundry vCard PRO. Root cause is ...

vBulletin vCard PRO XSS

vBulletin vCard PRO XSS http://www.albatoul.net/vcard/gbrowse.php?catid=9&sortby=XSS...

VCard Pro - 'gbrowse.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21844/info vCard PRO is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user ...

VCard Pro - gbrowse.php Cross-Site Scripting

VCard Pro - gbrowse.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21844/info vCard PRO is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...