Mozilla Products Privilege Escalation Vulnerabily (Windows)

The host is installed with Mozilla firefox/thunderbird and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsprivescvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Mozilla Products Privilege Escalation Vulnerability Windows Authors: Madhuri D Copyright:...

CVE-2011-3647

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain...

CVE-2011-3647

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain...

Anonymous Hackers hack neo-Nazis website & leak personal info of 16,000 Finns

Anonymous Hackers hack neo-Nazis website & leak personal info of 16,000 Finns Anonymous Hackers have successfully hacked the neo-Nazi website and published the database of its 16000 membership application database containing personal data of some applicants from all around the country. The hack w...

How Facebook Ticker exposing your information and behavior without your knowledge

How Facebook Ticker exposing your information and behavior without your knowledge Nelson Novaes Neto , a Brazilian independent Security and Behavior Research have analyze a privacy issue in FacebookTicker that allows any person chasing you without your knowledge or consent . He explain that this ...

X.Org X Server: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description vladz reported the following vulnerabilities in the X.Org X server: The X.Org X server follows symbolic links when trying to access the lock file for a X display, showing a predictable...

The Mystery of Duqu

First of all, we feel it necessary to clarify some of the confusion surrounding the files and their names related to this incident. To get a full understanding of the situation you only need to know that we’re talking about just two malicious programs here at a minimum – the main module and a...

Fedora 15 : php-5.3.8-3.fc15 (2011-13446)

Revert isa behavior to php = 5.3.6 and add a new new option allowstring for the new behavior accept string and raise autoload if needed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...

Mozilla Firefox and SeaMonkey 'loadSubScript()' Security Bypass Vulnerability

Mozilla Firefox/Seamonkey is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3004

The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping...

PHP is_a function vulnerability

Function behaviour is changed, making different application relying upon it behavior potentially vulnerable...

Microsoft Internet Explorer 9 STYLE Object Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

GFI SandBox - Powerful automated malware analysis

GFI SandBox - Powerful automated malware analysis GFI SandBox™ formerly CWSandbox is an industry leading dynamic malware analysis tool. It gives you the power to analyze virtually any Windows application or file including infected: Office documents, PDFs, malicious URLs, Flash ads and custom...

GFI SandBox - Powerful automated malware analysis

GFI SandBox - Powerful automated malware analysis GFI SandBox™ formerly CWSandbox is an industry leading dynamic malware analysis tool. It gives you the power to analyze virtually any Windows application or file including infected: Office documents, PDFs, malicious URLs, Flash ads and custom...

SuSE 10 Security Update : coreutils (ZYPP Patch Number 7655)

This update of coreutils fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling users terminal via the TIOCSTI ioctl. This update also fixes the following non-security issues :...

PT-2011-1121 · Red Hat · Fuse +4

Name of the Vulnerable Software and Affected Versions: fuse versions 2.8.3 through 2.8.5 fuse-devel versions 2.8.3 fuse-libs versions 2.8.3 fuse-debuginfo versions 2.8.3 Description: The issue concerns multiple vulnerabilities in the fuse package of Red Hat Enterprise Linux, which can lead to...

Solar FTP 2.1.1 PASV Buffer Overflow

!/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release of PoC. Notes: We found different offsets depending on the...

Fedora 15 : feh-1.14.1-1.fc15 (2011-8750)

Changes since 0.10.1 : - Bug fixes Make zoomdefault key work properly with --geometry Only create caption directory when actually writing out a caption. read directory contents sorted by filename instead of 'randomly' as returned by readdir by default. Thanks talisein! Show certain warnings in th...

inappropriate GSSAPI delegation

When doing GSSAPI authentication, libcurl unconditionally performs credential delegation. This hands the server a copy of the client's security credentials, allowing the server to impersonate the client to any other using the same GSSAPI mechanism. This is obviously a sensitive operation, which...

Win32k. sys keyboard layout file to mention the right vulnerability analysis-vulnerability warning-the black bar safety net

Author: Sebastien Renaud Translator: riusksk（springs brother: the http://riusksk.blogbus.com） This article will give you shed some light on the Stuxnet Virus the technical details, mainly aimed at the about the author is how to use 0day vulnerabilities to achieve code versatility. Discussed below...