JVN#69191943: AD-EDIT2 vulnerable to cross-site scripting

AD-EDIT2 is a Contents Management System CMS software. AD-EDIT2 contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer...

Adobe Shockwave Director tSAC Chunk Parsing Memory Corruption (CVE-2010-2866)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is d...

Adobe Shockwave Player Director File FFFFFF88 Record Integer Overflow (CVE-2010-2876; CVE-2010-4192)

Adobe Shockwave is a multimedia player that allows users to view interactive web content such as games, business presentations, entertainment, and advertisements from the web browser. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on systems whic...

Fedora Update for galeon FEDORA-2010-15070

Check for the Version of galeon OpenVAS Vulnerability Test Fedora Update for galeon FEDORA-2010-15070 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 14 Update: galeon-2.0.7-33.fc14

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 14 Update: firefox-3.6.10-1.fc14

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Opera Web Browser v10.62 (CSS) Cross Domain Vulnerability

Proof Of Concept: 1.html: body bodyDOM: Cross Domain Vulnerability 2.html: style @import url"1.html"; /style script setTimeoutfunction var s = document.body.currentStyle.DOM; alerts; ,0; /script Vulnerable: Opera 10.62 By: Securitylab.ir Original Advisory: http://Securitylab.ir/Advisories...

[SECURITY] Fedora 13 Update: firefox-3.6.10-1.fc13

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 13 Update: galeon-2.0.7-33.fc13

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

RHEL 3 / 4 / 5 : flash-plugin (RHSA-2010:0706)

An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 3 and 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scori...

Multiple Web Browser (CSS) Cross Domain Vulnerability

Is a very serious vulnerability, and we all know that the script can not be cross-domain policy restrictions homologous reading data. Microsoft Internet Explorer 6 & 8, IE 7 not tested Opera 10.62 Netscape v9.0.0.6 wait for patch 1.html: body bodyDOM: Cross Domain Vulnerability 2.html: style...

Joomla Component Mosets Tree 2.1.5 Shell Upload Vulnerability

No description provided by source. Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload Vulnerability Date: 6 September 2010 Author: jdc Software Link: http://www.mosets.com/tree/ Version: 2.1.5 Patched: 2.1.6 Tested on: PHP5, MySQL5 Mosets Tree suffers from a shell upload vulnerabilty...

RogiShip Explorer [browser] 1.3 - Crash POC

Exploit for windows platform in category dos / poc =========================================== RogiShip Explorer browser 1.3 - Crash POC =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Joomla Mosets Tree 2.1.5 Shell Upload

Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload Vulnerability Date: 6 September 2010 Author: jdc Software Link: http://www.mosets.com/tree/ Version: 2.1.5 Patched: 2.1.6 Tested on: PHP5, MySQL5 Mosets Tree suffers from a shell upload vulnerabilty caused by improperly checking the...

Adobe Reader and Acrobat Font Parsing Buffer Overflow Vulnerability

Overview A vulnerability has been discovered in Adobe Reader and Acrobat that may be exploited to run arbitrary code. Description A critical vulnerability exists in the font parsing code of CoolType.dll. A vulnerable strcat call is used when parsing data within the "SING" table of a TrueType font...

Trend Micro Internet Security Pro ActiveX extSetOwner Remote Code Execution (CVE-2010-3189)

Trend Micro's Internet Security Pro 2010 is a PC security suite which includes a large suite of features such as antivirus and antispyware protection, a firewall, keylogger detection, and more. The suite also includes remote backup and restore capabilities in addition to smart phone protection. A...

Apple QuickTime QTPlugin.ocx _Marshaled_pUnk Code Execution (CVE-2010-1818)

QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. Upon installation, Apple QuickTime also installs a web browser plugin, QTPlugin.ocx. A remote code execution vulnerability has been...

Joomla! Component com_mtree 2.1.5 - Arbitrary File Upload

Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload Vulnerability Date: 6 September 2010 Author: jdc Software Link: http://www.mosets.com/tree/ Version: 2.1.5 Patched: 2.1.6 Tested on: PHP5, MySQL5 Mosets Tree suffers from a shell upload vulnerabilty caused by improperly checking the...

CentOS 4 / 5 : firefox (CESA-2010:0681)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Fedora Update for firefox FEDORA-2010-14362

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2010-14362 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...