Google Chrome 4.0.249.30 - Denial of Service (PoC)

Google Chrome 4.0.249.30 - Denial of Service PoC !/usr/bin/perl google chrome 4.0.249.30 DoS PoC Author: Anonymous Info: In ordinary cases browser would redirect to "http://www.google.com" but in this case browser will report error for something that should be possible and is possible on other...

Mozilla NTLM reflection vulnerability

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user...

Design/Logic Flaw

Incomplete blacklist vulnerability in browser/download/downloadexe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a "Content-Disposition: attachment" designation, as demonstrated by 1 .mht and 2 .mhtml files, which are...

DEBIAN-CVE-2009-3377

Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unknown vectors...

Flock Address Bar Spoofing Vulnerability - Windows

Flock Browser is prone to Address Bar Spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

cross site scripting the browser google "chrome"

autor : bikolinux Vuln: cross site scripting the browser google "chrome" Download: http://www.google.com/chrome error local EMAIL [email protected] [email protected] vercion test 2.0.172.37 cross site scripting the browser google "chrome" The error is when making a request to record path =...

CVE-2009-2541

The web browser on the Sony PLAYSTATION 3 PS3 allows remote attackers to cause a denial of service memory consumption and console hang via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

Multiple Browsers - Denial of Service

Multiple Browsers - Denial of Service One bug to rule them all IE5,IE6,IE7,IE8,Netscape,Firefox,Safari,Opera,Konqueror, Seamonkey,Wii,PS3,iPhone,iPod,Nokia,Siemens.... and more. Don't wet your pants - it's DoS only Release mode: Tried hard to coordinate - gave up Reference : GSEC-TZO-26-2009 - On...

Multiple Browsers - Denial of Service

One bug to rule them all IE5,IE6,IE7,IE8,Netscape,Firefox,Safari,Opera,Konqueror, Seamonkey,Wii,PS3,iPhone,iPod,Nokia,Siemens.... and more. Don't wet your pants - it's DoS only Release mode: Tried hard to coordinate - gave up Reference : GSEC-TZO-26-2009 - One bug to rule them all WWW :...

Oracle 10g Secure Enterprise Search - 'search_p_groups' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35681/info Oracle Database is prone to a cross-site scripting vulnerability that affects the Secure Enterprise Search component. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

CVE-2009-1709

Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service heap corruption and application crash via an SVG animation element, related to SVG set objects, SVG...

Mozilla Firefox 3.0.10 (KEYGEN) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================================ Mozilla Firefox 3.0.10 KEYGEN Remote Denial of Service Exploit ================================================================ ===8=================== Original Nachrichtentext...

Claroline 1.8.11 Cross Site Scripting

Author: Gerendi Sandor Attila Original Advisory: http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html Date: May 05, 2009 Package: Claroline 1.8.11 Product Homepage: http://www.claroline.net/ Versions Affected: v.1.8.11 Other versions may also be affected Severity: Medium...

Fedora Update for firefox FEDORA-2007-1142

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2007-1142 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Nokia N95-8 browser (setAttributeNode) Method Crash Exploit

No description provided by source. Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more...

Firefox XSS via XBL bindings to unloaded document

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting XSS attacks via an XBL binding to an "unloaded document."...

Firefox XMLHttpRequest 302 response disclosure

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a...

Amaya Web Browser 10.0.1/10.1-pre5 - HTML Tag Buffer Overflow (PoC)

Amaya Web Browser html tag overflow quite a few tags are vulnerable gdb i r eax 0x41414141 1094795585 ecx 0x0 0 edx 0xbfc0ff80 -1077870720 ebx 0x9ec1220 166466080 esp 0xbfc10064 0xbfc10064 ebp 0xbfc10268 0xbfc10268 esi 0xa2f64a0 170878112 edi 0xbfc10160 -1077870240 eip 0x8144b40 0x8144b40 eflags...

Clickjacking（Clickjacking）vulnerabilities technology insider-vulnerability warning-the black bar safety net

Source:IT Expert network Clickjacking is OWASPNYCAppSec2008Conference a confidential topic, the following are some of the attacks described in: When you visit a malicious website, the attacker can control your browser to some link access, this vulnerability affects almost all browsers and all...

phpMyAdmin cross-site scripting vulnerability

Overview phpMyAdmin provided by The phpMyAdmin Project contains a cross-site scripting vulnerability. phpMyAdmin provided by The phpMyAdmin Project is software to handle the administration of MySQL over the web browser. phpMyAdmin contains a cross-site scripting vulnerability. Masako Oono of...