662 matches found
Google Patches 'High Risk' Chrome Flaws
Google has pushed out another automatic Chrome browser update to fix multiple security issues that could expose users to hacker attacks. Google Chrome 5.0.375.55, available for Windows, Mac and Linux, addresses at least two “high risk” vulnerabilities and several security-related denial-of-servic...
Google Chrome < 5.0.375.55 Multiple Vulnerabilities
Binary data 5553.pasl...
Google Chrome < 5.0.375.55 Multiple Vulnerabilities
Binary data 800925.prm...
Google Chrome < 5.0.375.55 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 5.0.375.55. As such, it is reportedly affected by multiple vulnerabilities : - URLs do not closely match the Safe Browsing specification. Issue 7713 - It is possible to spoof URLs with unload event handlers. Issue 16535 - A...
Safari 4.0.5 & Camino 2.0.2 history.go() DoS
Exploit for macOS platform in category dos / poc ============================================ Safari 4.0.5 & Camino 2.0.2 history.go DoS ============================================ DrIDE - Camino 2.0.2 & Safari 4.0.5 DoS PoC function test window.onerror=new Function"history.go-1";...
Firefox 3.6.3 Fork Bomb DoS
Exploit for windows platform in category dos / poc =========================== Firefox 3.6.3 Fork Bomb DoS =========================== loop1; var a = 'javascript:"DrIDE\s FireFox Fork Bomb!"'; function loop1 window.opena; setIntervalloop1,1; 0day.today 2018-01-10...
Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker
Title: Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker Date of Discovery: 2 Feb 2010 Contact Date: 4 Feb.2010 Release Date: 10 Mar 2010 Author: Luka Milkovic Mail: milkovic.luka at gmail.com Software Link: SUPERAntiSpyware - http://www.superantispyware.com/index.html Super Ad...
Google Chrome < 4.0.249.78 Multiple Vulnerabilities
Binary data 5328.pasl...
Google Chrome < 4.0.249.78 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 4.0.249.78. Such versions are reportedly affected by multiple vulnerabilities : - A pop-up blocker bypass. Issue 3275 - Cross-domain theft due to CSS design error. Issue 9877 - Browser memory error with stale pop-up block...
Apple Malware Blocker Left For Dead?
Nearly six months after Apple added a malware blocker to Mac OS X Snow Leopard, the feature appears to be collecting cobwebs. Apple has not added any anti-malware signature updates to the XProtect.plist file that launched with antidotes for OSX.RSPlug.A and OSX.Iservice, two known Trojan horse...
Mozilla Firefox IFRAME Cross Site Scripting (CVE-2005-1476)
Mozilla browsers use the W3C Document Object Model DOM to provide a structural representation of an HTML document and define the way this structure is to be accessed from scripts. One of the core objects exposed by DOM is the window object, which is used to represent a browser window. An HTML pag...
Apple Safari finally gets a malware blocker
After years of lagging behind on important security features, Apple has finally added a malware-blocker, a phishing filter and support for EV extended validation certificates into the latest refresh of its Safari Web browser. The malware roadblock headlines a list of Safari 4 security features th...
SuSE 10 Security Update : Security update for (ZYPP Patch Number 2088)
This security update brings Mozilla Firefox to version 1.5.0.7. More details can be found on: http://www.mozilla.org/projects/security/known-vulnerabiliti es.html It includes fixes to the following security problems : - Crashes with evidence of memory corruption MFSA 2006-63 / CVE-2006-4570:...
CVE-2001-1581
The CVE-2001-1581 affects Clearswift MAILsweeper for SMTP 4.2, where the File Blocker feature can be bypassed by attackers manipulating a Content-Type header filename, enabling bypass of attachment filtering policies. Impact per CVSS2: Network attack, low complexity, no authentication required, w...
CVE-2001-1581
The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header...
[Full-disclosure] Firefox + popup blocker + XMLHttpRequest + srand() = oops
There is an interesting vulnerability in the default behavior of Firefox builtin popup blocker. This vulnerability, coupled with an additional trick, allows the attacker to read arbitrary user-accessible files on the system, and thus steal some fairly sensitive information. This was tested on...
CVE-2006-4569
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting XSS attacks...
CVE-2006-4569
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting XSS attacks...
DEBIAN-CVE-2006-4569
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting XSS attacks...
CVE-2006-4569
CVE-2006-4569 relates to Firefox’s popup blocker: the “blocked popups” display could be shown in the Location bar instead of the originating frame, potentially enabling remote user‑assisted XSS. The connected advisories confirm this vulnerability in Mozilla Firefox up to version 1.5.0.6 and indic...