X11 Keyboard Command Injection

This module exploits open X11 servers by connecting and registering a virtual keyboard. The virtual keyboard is used to open an xterm or gnome terminal and type and execute the specified payload. Module Options msf use exploit/unix/x11/x11/keyboardexec msf undefinedkeyboardexec show actions...

[Suspected Spam]XSS in Squirrelmail plugin 'Virtual Keyboard' <= 0.9.1

Hi, Squirrelmail plugin 'Virtual Keyboard' version 0.9.1 and lower is vulnerable to cross site scripting XSS. The vkeyboard.php script fails to sanitize the value of HTTP GET parameter 'passformname' which the script stores in a variable of the same name and outputs unmodified into a HTML documen...

SquirrelMail Virtual Keyboard 0.9.1 Cross Site Scripting

Hi, Squirrelmail plugin 'Virtual Keyboard' version 0.9.1 and lower is vulnerable to cross site scripting XSS. The vkeyboard.php script fails to sanitize the value of HTTP GET parameter 'passformname' which the script stores in a variable of the same name and outputs unmodified into a HTML documen...

SquirrelMail Virtual Keyboard Plugin - 'vkeyboard.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43749/info The Virtual Keyboard plugin for SquirrelMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

SquirrelMail Virtual Keyboard Plugin - vkeyboard.php Cross-Site Scripting

SquirrelMail Virtual Keyboard Plugin - vkeyboard.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43749/info The Virtual Keyboard plugin for SquirrelMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

Fedora 11 : kdelibs-4.2.4-6.fc11 (2009-8039)

This update fixes several security issues in KHTML CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-0945, CVE-2009-2537 which may lead to a denial of service or potentially even arbitrary code execution. In addition, libplasma was fixed to make Plasmaboard a virtual keyboard...

CVE-2006-6953

The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...

CVE-2006-6953

CVE-2006-6953 affects the GlobeTrotter Mobility Manager. The vulnerability arises from the virtual keyboard: when a key is pressed, its color changes, enabling local attackers to capture arbitrary keystrokes (e.g., passwords) via shoulder surfing or periodic screenshots. Exploitation is local and...

CVE-2006-6953

The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...

CVE-2006-6953: Exposure of Sensitive Information to an Unauthorized Actor

The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...

GlobeTrotter Mobility Manager - security issue

Discovered by Damian Zelek - 03 April 2006 Published - 23 June 2006 Vendor was informed - 24 April 2006 Vendors answer - "We will talk with our Department of Software" :-D Summary: GlobeTrotter Mobility Manager is a unique PC software solution that enables fast, simple and easy access to wireless...