2796 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the AgaviWebRouting::gennull method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with certain characters that are not properly handled by web browsers that do not...
Cross site scripting
Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting XSS and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers...
CVE-2009-0417
Cross-site scripting XSS vulnerability in the AgaviWebRouting::gennull method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with certain characters that are not properly handled by web browsers that do not...
SSL Certificate Forgery via MD5 Collision Attacks
Public key infrastructure PKI is a mechanism used for issuing digital certificates for secure websites. A critical vulnerability was detected in PKI that enables attackers to create a forged digital certificate that will be trusted by all common web browsers. The vulnerability is due to a weaknes...
[SECURITY] Fedora 10 Update: squirrelmail-1.4.17-2.fc10
SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...
[Full-disclosure] [SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis)
General Information ffdshow is a DirectShow filter and VFW codec for many audio and video formats, such as DivX, Xvid and H.264. It is the most popular audio and video decoder on Windows. Besides a stand-alone setup package, ffdshow is often included in almost all codec pack software such as...
Internet Explorer, Opera, Google Chrome, Mozilla browsers DoS
window.close в цикле на событие OnLoad приводит к зависанию браузера. Multiple resource exhaustion attacks with Javascript...
Flash Player APSB08-18 / APSB08-20 Multiple Vulnerabilities
Binary data 4746.prm...
browser-overflows.txt
Multiple Browsers Stack overflow in javascript with infinite array original article:http://lostmon.blogspot.com/ 2008/11/multiple-browsers-stack-overflow-in.html Description Multiple Browsers are prone vulnerables to a stack overflow or crash via infinite array in Javascript engine. This is a...
jar: protocol handler
Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors...
DoS vulnerability in Mozilla, Internet Explorer, Google Chrome and Opera
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Denial of Service уязвимостях в браузерах Mozilla, Internet Explorer и Opera. Для данных уязвимостей я разработал универсальный эксплоит для атаки на различные браузеры в том числе и на Chrome. DoS: Эксплоит:...
php -- strip_tags cross-site scripting vulnerability
The remote host is missing an update to the system as announced in the referenced advisory. VID edf61c61-0f07-11d9-8393-000103ccf9d6 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
HydraIRC远程拒绝服务漏洞
BUGTRAQ ID: 30523 CNCAN ID：CNCAN-2008080502 HydraIRC是一款IRC聊天客户端。 HydraIRC不正确处理恶意WEB页，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 HydraIRC 0.3.164 目前没有解决方案提供： http://www.hydrairc.com/ Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Worki...
HydraIrc <= 0.3.164 (last) Remote Denial of Service Exploit
No description provided by source. Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Working on : all browsers Include this in any webpage or xss & see it with any browser , wait 15sec, and boom. PoC : html head titleHydraIRC Remote Denial Of...
HydraIrc 0.3.164 - Remote Denial of Service
Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Working on : all browsers Include this in any webpage or xss & see it with any browser , wait 15sec, and boom. PoC : HydraIRC Remote Denial Of Service Poc var site = 'irc://127.0.0.1/' var buf = 'A...
Unfixed XSS vulnerability at www.seehowitruns.org
Security researcher AppleJax, has submitted on 29/07/2008 a cross-site-scripting XSS vulnerability affecting www.seehowitruns.org, which at the time of submission ranked 2675623 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/07/2008. It is...
Firefox self signed certificate flaw
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also...
CVE-2008-2809
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also...
CVE-2008-2809
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also...