369 matches found
CentOS 3 / 4 / 5 : qt (CESA-2007:0721)
Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...
NetSurf 1.2 hspace Integer Overflow Proof Of Concept
!/usr/bin/perl netsurfhspaceintof1.pl Netsurf 1.2 'hspace' Remote Integer Overflow PoC Exploit Jeremy Brown [email protected]/jbrownsec.blogspot.com ltrace log -- hspace = 30000, without --sync gdkgcsetcliprectangle0x8cbdaf8, 0x80c4500, 0, 0, 0 = 0x8cbda01 cairoresetclip0xb6600948, 0x80c4500, ...
Safari Webkit 3.2 Remote Memory Leak Exploit
!/usr/bin/perl safariwebkitml.pl Safari Webkit 3.2 Remote Memory Leak Exploit Jeremy Brown [email protected]/jbrownsec.blogspot.com Access violation when writing to 00000018 EIP 6B00A02B WebKit.6B00A02B LastError 00000008 ERRORNOTENOUGHMEMORY Memory leaks are common in browsers.. tested on Vis...
Mozilla Firefox 3.0.5 - location.hash Remote Crash
Mozilla Firefox 3.0.5 - location.hash Remote Crash !/usr/bin/perl mzfflhashdos.pl Mozilla Firefox 3.0.5 location.hash Denial of Service Exploit Jeremy Brown [email protected]/jbrownsec.blogspot.com Crash on Vista, play with it on XP $filename = $ARGV0; if!defined$filename print "Usage: $0 \n\n...
aflistenerdirectorytraversal-08_006.txt
Portcullis Security Advisory - 08-006 Vulnerable System: Affinium Campaign Vulnerability Title: The Listener is vulnerable to directory traversal. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Tim Brown - Portcullis Computer-Security Ltd...
afurlxss-08_005.txt
Portcullis Security Advisory - 08-005 Vulnerable System: Affinium Campaign Vulnerability Title: The web application's parameters are vulnerable to reflected JavaScript injection. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Tim Brown -...
CVE-2008-2507
CVE-2008-2507 concerns a cross-site scripting (XSS) vulnerability in Brown Bear Software Calcium 3.10 and 4.0.4 (Calcium40.pl). The issue arises in the ShowIt action where user-supplied input in the CalendarName parameter can be manipulated to inject arbitrary web script or HTML. The available do...
CVE-2008-2507
Cross-site scripting XSS vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the CalendarName parameter in a ShowIt action...
brownbear-xss.txt
Vendor: Brown Bear Software Vendor web page: http://brownbearsw.com/ Product: Calcium web calendar Product web page: http://brownbearsw.com/calcium/WhatIsIt.html Vendor's Product Description: Calcium is a Web Calendar application. It will run on nearly any machine with a web server that can run...
Calcium web calendar: Reflected XSS
Vendor: Brown Bear Software Vendor web page: http://brownbearsw.com/ Product: Calcium web calendar Product web page: http://brownbearsw.com/calcium/WhatIsIt.html Vendor's Product Description: Calcium is a Web Calendar application. It will run on nearly any machine with a web server that can run...
Serious holes affecting SiteBar 3.3.8
All, As a result of a short security audit of SiteBar, a number of security holes were found. The holes included code execution, a malicious redirect and multiple cases of Javascript injection. After liasing with the developers, the holes have been patched. Attached are the advisory and patch...
RHEL 3 / 4 / 5 : qt (RHSA-2007:0721)
Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...
qt security update
CentOS Errata and Security Advisory CESA-2007:0721 Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and...
Moderate: Red Hat Security Advisory: qt security update
Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...
Portcullis Security Advisory 06-039
Portcullis Security Advisory 06-039 Vulnerable System: Visionsoft Audit Vulnerability Title: The VSAOD server allows unauthenticated arbitrary file overwrites. Vulnerability Discovery and Development: Portcullis Security Testing Services during an application assessment. Further research was...
Portcullis Security Advisory - 06-033
Portcullis Security Advisory - 06-033 Vulnerable System: Movable Type Vulnerability Title: The username and password hash for the administration interface is stored within a cookie. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Tim Brown -...
Portcullis Security Advisory 06-034
Portcullis Security Advisory 06-034 Vulnerable System: Movable Type Vulnerability Title: The blog directory path can be set to any arbitrary directory path during the creation of new blogs. Vulnerability discovery and development: Portcullis Security Testing Services. Credit for Discovery: Tim...
CVE-2006-5168
CVE-2006-5168 affects Simon Brown Pebble 2.0.0 RC1 and RC2, specifically the search functionality. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML through the query string. The provided documents do not include exploitatio...