PT-2017-16323

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.62 Opera versions prior to 62.0.3202.62 affected versions not specified Description The issue is related to the incorrect application of sandboxing in Blink, which allowed a remote attacker to inject...

Webkit (Apple Safari 4.0.5) - Blink Tag Stack Exhaustion Denial of Service

Webkit Apple Safari 4.0.5 - Blink Tag Stack Exhaustion Denial of Service loop1; var a = ""; function loop1 document.writea; setIntervalloop2,0; function loop2 document.writea; setIntervalloop1,0; Webkit Safari Stack Exhaustion DoS Found By: DrIDE Credit To: Mattias Karlsson Reference:...

Webkit (Apple Safari 4.0.5) - Blink Tag Stack Exhaustion Denial of Service

loop1; var a = ""; function loop1 document.writea; setIntervalloop2,0; function loop2 document.writea; setIntervalloop1,0; Webkit Safari Stack Exhaustion DoS Found By: DrIDE Credit To: Mattias Karlsson Reference: http://www.exploit-db.com/exploits/12401 Tested On: Windows 7 + Safari 4.0.5...

Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable software utilizing Apple's WebKit library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to a failure to unregister a callba...

Blink Blog SQL Injection

Salvatore "drosophila" Fresta + Application: Blink Blog System + Version: Unknown + Website: http://blogink.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 03 Aug 2009 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka drosophila + E-mai...

Blink Blog System (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Salvatore "drosophila" Fresta + Application: Blink Blog System + Version: Unknown + Website: http://blogink.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 03 Aug 2009 + Discovered by: Salvatore Fresta aka drosophila + Author:...

Blink Blog System Authentication Bypass

Salvatore "drosophila" Fresta + Application: Blink Blog System + Version: Unknown + Website: http://blogink.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 03 Aug 2009 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka drosophila + E-mai...

Blink Blog System (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Blink Blog System Auth Bypass SQL Injection Vulnerability =========================================================== Salvatore "drosophila" Fresta + Application: Blink Blog Syste...

Blink Blog System - Authentication Bypass

Blink Blog System - Authentication Bypass Salvatore "drosophila" Fresta + Application: Blink Blog System + Version: Unknown + Website: http://blogink.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 03 Aug 2009 + Discovered by: Salvatore Fresta aka drosophila + Autho...

Blog Ink (Blink) - Multiple SQL Injections

Blog Ink Blink - Multiple SQL Injections source: https://www.securityfocus.com/bid/43284/info Blog Ink Blink is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Blog Ink (Blink) - Multiple SQL Injections

source: https://www.securityfocus.com/bid/43284/info Blog Ink Blink is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acces...

Blink Blog System - Authentication Bypass

Salvatore "drosophila" Fresta + Application: Blink Blog System + Version: Unknown + Website: http://blogink.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 03 Aug 2009 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka drosophila + E-mai...

Unfixed XSS vulnerability at www.blink-182.org

Security researcher Scr34M, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.blink-182.org, which at the time of submission ranked 351601 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

EEYE: Windows Metafile AttemptWrite Heap Overflow

Windows Metafile AttemptWrite Heap Overflow Release Date: August 14, 2007 Date Reported: March 27, 2007 Severity: High Code Execution Systems Affected: Windows 2000 SP4 Windows XP SP2 Windows Server 2003 SP1 Overview: eEye Digital Security has discovered a heap overflow vulnerability in the way t...

EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability

VGX.DLL Compressed Content Heap Overflow Vulnerability Release Date: August 14, 2007 Date Reported: October 24, 2006 Severity: High Code Execution Systems Affected: Internet Explorer 6 SP1 - Windows 2000 SP4 Internet Explorer 6 SP1 - Windows XP SP1 Internet Explorer 6 SP2 - Windows XP SP2 Interne...

EEYE: Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability

Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability Release Date: July 5, 2007 Date Reported: Jan 19, 2007 Severity: High Remote Code Execution Vendor: Sun Microsystems Systems Affected: Java Runtime Environment 6 Update 1, and earlier Java Runtime Environment 5 Update 11, and earlier...

Multiple Printer Providers (Spooler Service) - Local Privilege Escalation

/Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acuña - [email protected] Website: http://www.514.es This code should allow to gain SYSTEM privileges with the following...

[Full-disclosure] EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability

Internet Explorer Compressed Content URL Heap Overflow Vulnerability Release Date: August 24, 2006 Date Reported: August 17, 2006 Severity: High Code Execution Systems Affected: Internet Explorer 6 SP1 with MS06-042 - Windows 2000 Internet Explorer 6 SP1 with MS06-042 - Windows XP SP1 Overview:...

[Full-disclosure] [EEYEB-20060307] Apple QuickTime FPX Integer Overflow

Apple QuickTime FPX Integer Overflow Release Date: May 11, 2006 Date Reported: March 7, 2006 Patch Development Time In Days: 65 Severity: High Remote Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on Windows XP Quicktime on Mac OS X 10.3.9 References: This...

[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service

Microsoft Distributed Transaction Coordinator Denial of Service http://www.eeye.com/html/research/advisories/AD20060509b.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: Low Denial of Service Systems Affected: Windows NT 4.0 Windows 2000...