Mozilla Foundation Security Advisory 2010-69

Mozilla Foundation Security Advisory 2010-69 Title: Cross-site information disclosure via modal calls Impact: High Announced: October 19, 2010 Reporter: Eduardo Vela Nava Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.11 Firefox 3.5.14 Thunderbird 3.1.5 Thunderbird 3.0.9 SeaMonke...

JVN#89272705: Sleipnir and Grani may insecurely load executable files

Sleipnir and Grani provided by Fenrir are web browsers. Sleipnir and Grani load certain executables when displaying the source code of the HTML file currently being viewed. Sleipnir and Grani contain an issue with the file search path, which may insecurely load executables. Impact An attacker may...

JVN#50610528: Sleipnir and Grani may insecurely load dynamic libraries

Sleipnir and Grani provided by Fenrir are web browsers. Sleipnir and Grani loads certain DLL's when HTML files are opened. Sleipnir and Grani contain an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Impact An attacker may execute arbitrary code with the...

Security a Concern as HTML5 Gains Traction

From animated logos to Web videos for hip, independent bands, HTML5 is getting buzz and gaining traction. But concerns about the security of features in the new version of the Web’s lingua franca persist. Every technology innovation has its coming out party, and Google Inc.’s recent “dancing ball...

Internet Download Manager module (idmmkb.dll) Tonec Inc

Exploit for windows platform in category local exploits ======================================================= Internet Download Manager module idmmkb.dll Tonec Inc ======================================================= Exploit Title: Dll Hijacking Exploit Application: Internet Download Manager...

Multiple browsers certificates validation weakness

Wildmasks in certificates issued to IP address are enabled...

Private Web Browsing Is Mostly A Failure

Features in the four major browsers designed to cloak users’ browser history often don’t work as billed, according to a research paper that warns that users may get a false sense of security when using the built-in privacy settings. Read the full article. The Register...

SMA-DB 0.3.14 (pfad_z) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ========================================================= SMA-DB 0.3.14 pfadz Local File Inclusion Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

Multiple browsers DoS

Mail program compose message window is created for avery frame with mailto:, news:, nntp:, etc URI...

Multiple Web Browsers Window Injection (CVE-2004-1155)

Most modern web browsers support the Dynamic Hypertext Markup Language DHTML application programming interface API. The DHTML API may be utilized to manipulate HTML objects, events, properties and methods exposed by the DHTML object model. The window object offers several methods to manipulate th...

Default Applications

Under the Programs tab, you can specify your default applications for viewing web sites, email messages, HTML editing and various other network related tasks. You can also disable Internet Explorer from asking you if you would like it to be your default web browser here. See more information on...

Mozilla Plugin Check Now Cross-Browser

Mozilla has expanded its Plugin Check utility to support multiple web browsers. According to Mozilla, a new cross-browser Plugin Check page now works with Firefox, Safari 4, Chrome 4, Opera 10.5 and Internet Explorer 7 and 8 for the most popular plugins but since IE requires specific code to be...

Multiple Browsers - 'history.go()' Denial of Service

DrIDE - Camino 2.0.2 & Safari 4.0.5 DoS PoC function test window.onerror=new Function"history.go-1"; window.open'http://www.exploit-db.com'; test; test;...

All browsers - Crash

All browsers - Crash =============================== All browsers 0day Crash Exploit =============================== + Discovered By: Inj3ct0r Team @Title: All browsers 0day Crash Exploit @Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ - http://inj3ct0r.com/ @Exploit f...

All browsers 0day Crash Exploit

Exploit for multiple platform in category dos / poc =============================== All browsers 0day Crash Exploit =============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

All Browsers - Long Unicode DoS PoC

Exploit for multiple platform in category dos / poc =================================== All Browsers - Long Unicode DoS PoC =================================== DrIDE - All Browsers - Long Unicode DoS PoC function boom //The number of strings increases the amount of memory consumed, quicker crash...

All browsers - Crash

=============================== All browsers 0day Crash Exploit =============================== + Discovered By: Inj3ct0r Team @Title: All browsers 0day Crash Exploit @Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ - http://inj3ct0r.com/ @Exploit for all browsers Teste...

VulnCheck KEV: CVE-2006-0005

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...

Canvas Tag Denial Of Service

"; while 1 echo ""; echo ""; echo ""; ?...

Canvas tag DoS - Multiple Browsers

Exploit for multiple platform in category dos / poc ================================== Canvas tag DoS - Multiple Browsers ================================== "; while 1 echo ""; echo ""; echo ""; ? 0day.today 2018-04-11...