3012 matches found
Adobe Flash Player AVM Verification Logic Array Indexing Code Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit...
Firefox 1.x JavaScript Key Filtering Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18308/info Multiple web browsers are prone to a JavaScript key-filtering vulnerability because the browsers fail to securely handle keystroke input from users. This issue is demonstrated to allow attackers to divert...
Internet Explorer 6.0,Firefox 0.8/0.9.x JavaScript Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10998/info Web browsers from various vendors are reported prone to a JavaScript denial-of-service vulnerability. The specified JavaScript code will consume 100% of the CPU resources of the affected computer, crashing the...
All Browsers - Long Unicode DoS PoC
No description provided by source. html titleDrIDE - All Browsers - Long Unicode DoS PoC/title head script function boom //The number of strings increases the amount of memory consumed, quicker crash where applicable. var longunistring1 = unescape%u4141%u4141; var longunistring2 =...
Netscape 7.0 JavaScript Regular Expression Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6959/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when executing certain JavaScript methods. If a malicious page containing a specially crafted JavaScript regul...
Verity K2 Toolkit 2.20 Query Builder Search Script Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8074/info It has been reported that the K2 Toolkit does not sufficiently sanitize input by users. Because of this, it may be possible for an attacker to launch an attack that results in the execution of hostile HTML or...
Mozilla Browsers - x (Link) Code Execution Exploit
No description provided by source. !-- Comment placed below to keep the author info together: /str0ke Contact Informations Michael Krax [email protected] http://www.mikx.de/?p=15 mikx -- html head titleFirelinking - Proof-of-Concept/title link rel=SHORTCUT ICON href=favicon.ico script...
MS IE 6.0,Mozilla 0.9.6,Opera 5.1 Image Count Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3684/info An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered. An unusually high image count may cause a denial of services to users who view the webpage containing the...
Internet Explorer 5,Firefox 0.8,OmniWeb 4.x URI Protocol Handler Arbitrary File Creation/Modification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10336/info A vulnerability has been identified in multiple products from multiple vendors that may allow a remote attacker to create or modify arbitrary files; these issues relate to the processing of URI requests via...
MS IE 3/4/5,Netscape Communicator 4 IMG Tag DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3122/info An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered. Multiple malicious IMG tags may cause a denial of services to users who view webpages they are embedded...
MS IE 5/6,Konqueror 2.2.2/3.0,Weblogic Server 5/6/7 Invalid X.509 Certificate Chain
No description provided by source. source: http://www.securityfocus.com/bid/5410/info A flaw has been reported in the handling of X.509 certificates by a number of products, including several web browsers. It may be possible for a malicious party to create certificates for arbitrary domains, whic...
Sun Java Runtime Environment 1.4.x Font Object Assertion Failure Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10623/info The Sun Java Runtime Environment Font object is reportedly vulnerable to an assertion failure denial of service vulnerability. This issue is due to a failure of the process to handle exceptional conditions when...
Internet Explorer 5.5/6.0/7.0 JavaScript Key Filtering Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18308/info Multiple web browsers are prone to a JavaScript key-filtering vulnerability because the browsers fail to securely handle keystroke input from users. This issue is demonstrated to allow attackers to divert...
MS IE 5/6,Mozilla 0.8/0.9.x,Opera 5/6 JavaScript Interpreter Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4322/info It is possible to create a loop in JavaScript which is capable of crashing various web browsers. This is due to a flaw in the JavaScript interpreter. Browsers that have been tested include Microsoft Internet...
Mozilla Browsers 0xAD (HOST:) Remote Heap Buffer Overrun Exploit (2)
No description provided by source...
Mozilla Firefox 0.8/0.9/0.10 Infinite Array Sort Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11752/info Mozilla Firefox is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs an infinite JavaScript array sort operation. It is conjectured that this will only...
Browser Navigation Download Trick
No description provided by source. Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate third-party...
ThinkSNS 储存型xss一枚
简要描述： rt. 详细说明： 对于swf文件 过分信任 通杀所有浏览器 测试代码 : http://demo.thinksns.com/t3/weiba/post2075 chrome firefox ie 10 可蠕虫。 漏洞证明： chrome firefox https://images.seebug.org/upload/201406/150142590b17fc5d7dedb7e685f9e1f2797b7c98...
X (Formerly Twitter): XSS vulnerability in video player page
Hello, I found a XSS vulnerability in your site. Try this:...
LOL, Jar File Malware Just Goes Viral Through Facebook Messages
If you came across any suspicious Facebook message with ‘LOL’ text or a fake Image file send by any of your Facebook friend, avoid clicking it. A Trojan horse is currently circulating in wild through the Facebook social network that could steal your Facebook account data and Credentials. Security...