CVE-2016-2246

HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors...

CVE-2016-2246: Undefined Security Weakness

HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors...

PT-2016-5079

Name of the Vulnerable Software and Affected Versions HP ThinPro versions 4.4 through 6.1 Description The issue concerns the mishandling of the keyboard layout control panel and virtual keyboard application, allowing local users to bypass intended access restrictions and gain privileges...

HP ThinPro Local Elevation of Privilege Vulnerability

HP ThinPro is a thin client device from Hewlett-Packard HP in the United States. A security vulnerability exists in the Keyboard Layout Control Panel and Virtual Keyboard application on the HP ThinPro operating system. An attacker could exploit the vulnerability to locally gain unauthorized acces...

HPSBHF3550 rev. 2 - HP ThinPro Keyboard Layout Control Panel and Virtual Keyboard Application Vulnerability

Potential Security Impact Local unauthorized access and unintentional elevation of privilege on a HP thin client device. VULNERABILITY SUMMARY A potential security vulnerability has been identified with the keyboard layout control panel and virtual keyboard application on HP ThinPro operating...

X11 Keyboard Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "\x0a", '2' = "\x0b", '3' = "\x0c", '4' = "\x0d", '5' = "\x0e", '6' = "\x0f", '7' = "\x10", '&' = "\x10", '8' = "\x11", '9' = "\x12",...

X11 Keyboard Command Injection

This module exploits open X11 servers by connecting and registering a virtual keyboard. The virtual keyboard is used to open an xterm or gnome terminal and type and execute the specified payload. Module Options msf use exploit/unix/x11/x11/keyboardexec msf undefinedkeyboardexec show actions...

[Suspected Spam]XSS in Squirrelmail plugin 'Virtual Keyboard' <= 0.9.1

Hi, Squirrelmail plugin 'Virtual Keyboard' version 0.9.1 and lower is vulnerable to cross site scripting XSS. The vkeyboard.php script fails to sanitize the value of HTTP GET parameter 'passformname' which the script stores in a variable of the same name and outputs unmodified into a HTML documen...

SquirrelMail Virtual Keyboard 0.9.1 Cross Site Scripting

Hi, Squirrelmail plugin 'Virtual Keyboard' version 0.9.1 and lower is vulnerable to cross site scripting XSS. The vkeyboard.php script fails to sanitize the value of HTTP GET parameter 'passformname' which the script stores in a variable of the same name and outputs unmodified into a HTML documen...

SquirrelMail Virtual Keyboard Plugin - vkeyboard.php Cross-Site Scripting

SquirrelMail Virtual Keyboard Plugin - vkeyboard.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43749/info The Virtual Keyboard plugin for SquirrelMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

SquirrelMail Virtual Keyboard Plugin - 'vkeyboard.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43749/info The Virtual Keyboard plugin for SquirrelMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Fedora 11 : kdelibs-4.2.4-6.fc11 (2009-8039)

This update fixes several security issues in KHTML CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-0945, CVE-2009-2537 which may lead to a denial of service or potentially even arbitrary code execution. In addition, libplasma was fixed to make Plasmaboard a virtual keyboard...

CVE-2006-6953

The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...

CVE-2006-6953

The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...

CVE-2006-6953

CVE-2006-6953 affects the GlobeTrotter Mobility Manager. The vulnerability arises from the virtual keyboard: when a key is pressed, its color changes, enabling local attackers to capture arbitrary keystrokes (e.g., passwords) via shoulder surfing or periodic screenshots. Exploitation is local and...

CVE-2006-6953: Exposure of Sensitive Information to an Unauthorized Actor

The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...

GlobeTrotter Mobility Manager - security issue

Discovered by Damian Zelek - 03 April 2006 Published - 23 June 2006 Vendor was informed - 24 April 2006 Vendors answer - "We will talk with our Department of Software" :-D Summary: GlobeTrotter Mobility Manager is a unique PC software solution that enables fast, simple and easy access to wireless...