Amaya Web Browser 10.0.1/10.1-pre5 - HTML Tag Buffer Overflow (PoC)

Amaya Web Browser html tag overflow quite a few tags are vulnerable gdb i r eax 0x41414141 1094795585 ecx 0x0 0 edx 0xbfc0ff80 -1077870720 ebx 0x9ec1220 166466080 esp 0xbfc10064 0xbfc10064 ebp 0xbfc10268 0xbfc10268 esi 0xa2f64a0 170878112 edi 0xbfc10160 -1077870240 eip 0x8144b40 0x8144b40 eflags...

Clickjacking（Clickjacking）vulnerabilities technology insider-vulnerability warning-the black bar safety net

Source:IT Expert network Clickjacking is OWASPNYCAppSec2008Conference a confidential topic, the following are some of the attacks described in: When you visit a malicious website, the attacker can control your browser to some link access, this vulnerability affects almost all browsers and all...

phpMyAdmin cross-site scripting vulnerability

Overview phpMyAdmin provided by The phpMyAdmin Project contains a cross-site scripting vulnerability. phpMyAdmin provided by The phpMyAdmin Project is software to handle the administration of MySQL over the web browser. phpMyAdmin contains a cross-site scripting vulnerability. Masako Oono of...

Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC

Exploit for unknown platform in category dos / poc ============================================================== Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Service PoC ============================================================== Maxthon Browser 2.1.4.443 UNICODE Remote Denial of Servic...

Google Chrome 0.2.149.27 - A HREF Denial of Service

Google Chrome 0.2.149.27 - A HREF Denial of Service Google Chrome Browser 0.2.149.27 Remote DoS Google Chrome Browser 0.2.149.27 Remote DoS Description: Google's chrome browser suffers from a remote denial of service vulnerability when trying to follow a href link of the following form: a...

Immunity Canvas: FIREFOX_DEFINESETTER

Name| firefoxdefinesetter ---|--- CVE| CVE-2008-2798 Exploit Pack| CANVAS Description| Firefox = 2.0.0.14 Javascript defineSetter Memory Corruption Notes| CVE Name: CVE-2008-2798 VENDOR: Mozilla Repeatability: Infinite client side - crash the browser CVS URL:...

dotProject cross-site scripting vulnerability

Overview dotProject, an open source project management tool, contains a cross-site scripting vulnerability. As of June 5, 2006, it is confirmed that Internet Explorer is affected by this vulnerability. It is also confirmed that Mozilla Firefox and Opera are not affected by this vulnerability...

Vulnerability in multiple web browsers allowing request spoofing attacks

Overview Multiple web browsers contain a vulnerability in the processing of XmlHttpRequest objects. XmlHttpRequest objects available in JavaScript provide a function to communicate with a server without reloading a web page. In general, JavaScript only allows communication within the same domain ...

Zimbra Collaboration Suite script execution vulnerability

Overview Zimbra Collaboration Suite, a web collaboration tool from Zimbra, Inc., contains a vulnerability that could allow a remote attacker to execute an arbitrary script on the user's web browser. Zimbra Collaboration Suite is a web collaboration tool that provides calendar, address book,...

Net horse Central-vulnerability warning-the black bar safety net

Author: cosine Source: 0×3 7 Security Actually think about it know, network the horse of exp there will always be Exposure time, that is, my system environment as long as meet the conditions can get this net horse exp. By combining the services side of the technical means, we can hide the network...

S9Y Serendipity 1.3 - Referer HTTP Header Cross-Site Scripting

S9Y Serendipity 1.3 - Referer HTTP Header Cross-Site Scripting source: https://www.securityfocus.com/bid/28885/info S9Y Serendipity is prone to an HTML-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...

[HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service

see video link at the bottom ; Name : FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak : FireFox 2.0.0.11 Remote Denial of Service Type : Remote Information Disclosure Impact : Medium / High Credits: Gynvael Coldwind / Hispasec / Team Vexillium Special thanks to udevd and porne...

Mozilla browsers fail to properly handle images

Overview A vulnerability exists in Mozilla products that may allow a remote attacker to view browser history or cause a denial of service. Description Mozilla products contain a vulnerability in the browser engine that may result in information disclosure or a denial of service when handling...

mozilla -- code execution via Quicktime media-link files

The Mozilla Foundation reports a vulnerability within the mozilla browser. This vulnerability also affects various other browsers like firefox and seamonkey. The vulnerability is caused by QuickTime Media-Link files that contain a qtnext attribute. This could allow an attacker to start the browse...

CVE-2007-2408

The CVE-2007-2408 issue affects WebKit/Safari: WebKit in Apple Safari 3 Beta (before Update 3.0.3) does not properly honor an unchecked Enable Java setting, allowing remote attackers to execute Java applets via a crafted page. Vulnerability lies in how the Java preference is processed, enabling p...

security flaw

Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via 1 HTTP 302 redirect controls, 2...

JVN#95249468 Fresh Reader RSS feed cross-site scripting vulnerability

Impact An arbitrary script could be executed on the web browser of a Fresh Reader user. Solution Products Affected Fresh Reader Ver 1.0.06053100 and earlier For more information, refer to the vendor's website...

Internet Explorer Undisclosed Script Handler Buffer Overflow (MS06-072; CVE-2006-5579)

Microsoft Internet Explorer IE contains a remote code execution vulnerability. By convincing a user to visit a specially crafted Web page, a remote attacker may trigger this vulnerability to deny service from legitimate users by causing the victim's Web browser to crash or execute arbitrary code ...

BlueSocket BSC 2100 5.0/5.1 - Admin.pl Cross-Site Scripting

source: https://www.securityfocus.com/bid/21419/info BlueSocket BSC 2100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in...

[SA22048] Apple QuickTime Plug-In Local Resource Linking Weakness

TITLE: Apple QuickTime Plug-In Local Resource Linking Weakness SECUNIA ADVISORY ID: SA22048 VERIFY ADVISORY: http://secunia.com/advisories/22048/ CRITICAL: Not critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Apple QuickTime 7.x http://secunia.com/product/5090/ DESCRIPTION: pdp has...