8559 matches found
CVE-2010-2659
Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site...
CVE-2010-2666: Undefined Security Weakness
Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operatio...
CVE-2010-2659: Exposure of Sensitive Information to an Unauthorized Actor
Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site...
Widget properties exposed to third party domains
In some cases, widget properties could be exposed to third party domains, leading to the possibility of leak of widget information, or configuration options for the widget...
Widget properties exposed to third party domains – Opera Security Advisories
Widget properties exposed to third party domains – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Moderately severe Description In some cases, widget properties could be exposed to third party domains, leading to the possibility of leak of widget information, or configuration optio...
Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-10361
Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-10361 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-10344
Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-10344 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
[SECURITY] Fedora 13 Update: perl-Gtk2-MozEmbed-0.08-6.fc13.14
This module allows you to use the Mozilla embedding widget from Perl...
[SECURITY] Fedora 12 Update: perl-Gtk2-MozEmbed-0.08-6.fc12.13
This module allows you to use the Mozilla embedding widget from Perl...
Opera < 10.54 Multiple Vulnerabilities
The version of Opera installed on the remote host is earlier than 10.54. Such versions are potentially affected by the following issues : - Web fonts may be used to trigger a privilege elevation vulnerability in the Windows operating system MS10-032 954 - It may be possible to use data URIs in a...
Design/Logic Flaw
The Node Reference module in Content Construction Kit CCK module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes...
Real-Time ASP Calendar SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...
Real-time ASP Calendar - SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...
MS Research Targets Multimedia Snooping
Researchers from Microsoft have come up a sensor widget concept that provides alerts and lets users control and monitor exactly what other users see from their webcams, microphones, and other live data streams. Read the full article. Dark Reading...
Cumulus Widget For BlogEngine.NET Cross Site Scripting
Hello Full-Disclosure! I want to warn you about security vulnerability in widget Cumulus for BlogEngine.NET. ----------------------------- Advisory: Vulnerability in widget Cumulus for BlogEngine.NET ----------------------------- URL: http://websecurity.com.ua/4184/ -----------------------------...
Vulnerability in widget Cumulus for BlogEngine.NET
Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости в виджете Cumulus для BlogEngine.NET. Данная XSS уязвимость идентична XSS уязвимости в WP-Cumulus и других веб приложениях, о которых я уже сообщал, т.к. приложение использует tagcloud.swf созданный автором WP-Cumulus. Про миллион...
Socialware 2.2 - Upload Cross-Site Scripting
Socialware 2.2 - Upload Cross-Site Scripting Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor :www.iscripts.com Date: 29 apr,2010 Dork:Powered by iScripts SocialWare Author:Sid3^effects Code :...
Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-5515
Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-5515 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...