[SECURITY] Fedora 16 Update: arora-0.11.0-3.fc16

Arora is a simple, cross platform web browser based on the QtWebKit engine. Currently, Arora is still under development, but it already has support for browsing and other common features such as web history and bookmarks...

CVE-2011-3367

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

CVE-2011-3367

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

Design/Logic Flaw

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

CVE-2011-3367

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

CVE-2011-3367

CVE-2011-3367 concerns Arora (possibly 0.11 and related builds), where rendering certificate fields in a security dialog does not use a specific font, allowing a remote attacker to spoof the certificate’s CN via rich text. Multiple connected advisories confirm Arora is the affected component and ...

Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM

I recently discovered that various Qt applications including KSSL the KDE class library responsible for SSL negotiation, Rekonq, Arora and Psi IM are vulnerable to UI spoofing due to their use of QLabel objects to render externally controlled security critical information. The primary area of...

InterVideo WinDVD 5 DLL Hijacking Exploit

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Ganesha Site : www.BeenuArora.com Exploit Title: InterVideo WinDVD 5 DLL Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , WinDVD 5 Vulnerable extensions: .ifo , .mpg Compi...

Microsoft Address Book 6.00.2900.5512 - 'wab32res.dll' DLL Hijacking

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban , Dinesh Arora Site : www.beenuarora.com Exploit Title: Microsoft Address Book DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , Microsoft Address Book 6.00.2900.5512...

Microsoft Office Groove 2007 - 'mso.dll' DLL Hijacking

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora, Anirban ,Ganesha, Dinesh Arora Site : www.beenuarora.com Exploit Title: Microsoft Office Groove 2007 DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , Microsoft Office Groove...

Microsoft Vista - fveapi.dll BitLocker Drive Encryption API Hijacking

Microsoft Vista - fveapi.dll BitLocker Drive Encryption API Hijacking Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora / Exploit Title: Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows ...

Microsoft Vista - 'fveapi.dll' BitLocker Drive Encryption API Hijacking

Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora / Exploit Title: Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .wbcat Compile and rename to fveapi.dll,...

Microsoft Address Book 6.00.2900.5512 - wab32res.dll DLL Hijacking

Microsoft Address Book 6.00.2900.5512 - wab32res.dll DLL Hijacking / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban , Dinesh Arora Site : www.beenuarora.com Exploit Title: Microsoft Address Book DLL Hijacking Date: 25/08/2010 Author: Beenu Arora...

Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================================================= Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit ================================================================= Greetz to :b0nd, Fbih2s,r45c4l,Charles...

Microsoft Office Groove 2007 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================================== Microsoft Office Groove 2007 DLL Hijacking Exploit ================================================== / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh...

SnapProof SQL Injection

Exploit Title: SnapProof SQL Injection Vulnerability Date: 29th july 2010 Author: Dinesh Arora Critical:high Product : Commercial Sample Affected Parameter: pID contact: [email protected] Greetz to :b0nd, Fbih2s,Beenu,Charles ,j4ckh4x0r, punter,eberly Shoutz to : http://www.garage4hackers.co...

SnowFlake CMS 1.0 Beta5.2 SQL Injection

Exploit Title: Powered by SnowFlake Content Management System SQL Injection Date: 19th july 2010 Author: Dinesh Arora Critical:high Affected / Tested Version : 1.0 beta5.2 Sample Affected Parameter: uid contact: [email protected] Greetz to :b0nd, Fbih2s,Beenu,Charles ,j4ckh4x0r, punter,eberl...

Arora Browser 0.10.0-1 Denial Of Service

Exploit Title: Arora browser Remote Denial fo Service Date: 13th july 2010 Author: D4rk357 Software Link: http://code.google.com/p/arora/ Version:0.10.0-1 Tested on: Windows 7 category: Windows Greetz to :b0nd, Fbih2s,rockey killer,The empty, punter,eberly,prashant Shoutz to :...

Qt 4.6.3 - 'QTextEngine::LayoutData::reallocate()' Memory Corruption

source: https://www.securityfocus.com/bid/41873/info Qt is prone to a remote memory-corruption vulnerability. Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition. Arora browser...

Qt 4.6.3 - QTextEngine::LayoutData::reallocate() Memory Corruption

Qt 4.6.3 - QTextEngine::LayoutData::reallocate Memory Corruption source: https://www.securityfocus.com/bid/41873/info Qt is prone to a remote memory-corruption vulnerability. Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit...