2724 matches found
uzbl uzbl-core - @SELECTED_URI Mouse Button Bindings Command Injection
uzbl uzbl-core - @SELECTEDURI Mouse Button Bindings Command Injection source: https://www.securityfocus.com/bid/42297/info uzbl 'uzbl-core' is prone to a vulnerability that lets attackers inject arbitrary commands because the application fails to adequately sanitize user-supplied input. This issu...
Facebook Š²Š²Š¾Š“ŠøŃ ŃŃŠ½ŠŗŃŠøŃ Š¶Š°Š»Š¾Š±Ń Š½Š° ŠæŠµŠ“Š¾ŃŠøŠ»Š¾Š²
ŠŠ“Š¼ŠøŠ½ŠøŃŃŃŠ°ŃŠøŃ Facebook ŠæŃŠµŠ“Š¾ŃŃŠ°Š²ŠøŃ ŠæŠ¾Š»ŃŠ·Š¾Š²Š°ŃŠµŠ»ŃŠ¼ Š²Š¾Š·Š¼Š¾Š¶Š½Š¾ŃŃŃ Ń ŠæŠ¾Š¼Š¾ŃŃŃ ŃŠæŠµŃŠøŠ°Š»ŃŠ½Š¾Š¹ ŠŗŠ½Š¾ŠæŠŗŠø ŠæŠ¾Š¶Š°Š»Š¾Š²Š°ŃŃŃŃ Š½Š° ŠæŠ¾Š“Š¾Š·ŃŠøŃŠµŠ»ŃŠ½ŃŠµ Š“ŠµŠ¹ŃŃŠ²ŠøŃ ŠæŠ¾Š»ŃŠ·Š¾Š²Š°ŃŠµŠ»ŠµŠ¹ ŃŠ¾ŃŠøŠ°Š»ŃŠ½Š¾Š¹ ŃŠµŃŠø. ŠŃŠµ ŃŃŠµŠ²Š¾Š¶Š½ŃŠµ ŃŠ¾Š¾Š±ŃŠµŠ½ŠøŃ Š±ŃŠ“ŃŃ ŠæŠµŃŠµŃŃŠ»Š°ŃŃŃŃ Š½ŠµŠæŠ¾ŃŃŠµŠ“ŃŃŠ²ŠµŠ½Š½Š¾ Š² ŠµŠ²ŃŠ¾ŠæŠµŠ¹ŃŠŗŠøŠ¹ Š¦ŠµŠ½ŃŃ Š¾Š½Š»Š°Š¹Š½-Š±ŠµŠ·Š¾ŠæŠ°ŃŠ½Š¾ŃŃŠø Šø Š·Š°ŃŠøŃŃ Š“ŠµŃŠµŠ¹ Š¾Ń ŃŠŗŃŠæŠ»ŃŠ°ŃŠ°ŃŠøŠø Child...
Configuring JavaScript Settings
Once you click the Advanced button, a second window opens to allow you to disable specific JavaScript features. We recommend disabling all of the options displayed in this dialog...
JavaScript Settings
The Content category contains an option to block annoying pop-up windows. Be sure to check that box. From this screen, you can disable specific JavaScript features by clicking on the Advanced button. See next screen...
Software Index a remote file upload vulnerability-vulnerability warning-the black bar safety net
Upload file filter is not strict, resulting in remote file upload executable code vulnerabilities. Bulk Google Dork : Copyright 2 0 1 0. Software Index Exp: the html head TitleSelect Image File for uploading/Title script language="JavaScript" function checkFile if form1. userfile. value == ""...
Can not UPDATE the "Viewable By" field of an issue
After the creation of an issue it is by default viewable by "All Users". It is not possible to change the value after re-editing that issue. After changing it and clicking the "Update" button, the viewable by entry stays "All Users"...
VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)
About the security content of Safari 5.0 and Safari 4.1 Last Modified: June 07, 2010 Article: HT4196 Email this article Print this page Summary This document describes the security content of Safari 5.0 and Safari 4.1. For the protection of our customers, Apple does not disclose, discuss, or...
Disable ActiveX Controls
For a more fine-grained control over what features are allowed in the zone, click the Custom Level button. At this point, you can control the specific security options that apply to the current zone. For example ActiveX can be disabled by selecting Disable for Run ActiveX controls and plug-ins...
CVE-2010-1536
Cross-site scripting XSS vulnerability in the AddThis Button module 5.x before 5.x-2.2 and 6.x before 6.x-2.9 for Drupal allows remote authenticated users, with administer addthis privileges, to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-1536
The CVE refers to a Cross-site scripting (XSS) vulnerability in the Drupal AddThis Button module. Affected versions are 5.x before 5.x-2.2 and 6.x before 6.x-2.9. The issue allows remote authenticated users with administer addthis privileges to inject arbitrary web script or HTML via unspecified ...
CVE-2010-1536
Cross-site scripting XSS vulnerability in the AddThis Button module 5.x before 5.x-2.2 and 6.x before 6.x-2.9 for Drupal allows remote authenticated users, with administer addthis privileges, to inject arbitrary web script or HTML via unspecified vectors...
RCA DCM425 Cable Modem - micro_httpd Denial of Service (PoC)
RCA DCM425 Cable Modem - microhttpd Denial of Service PoC !/usr/bin/python Title: RCA DCM425 Cable Modem microhttpd DoS/PoC Date: 02/27/10 Author: ad0nis [email protected] Info: This script causes a Denial of Service on a DCM425 cable modem. Sending 1040 bytes causes a reboot of the device...
Cisco switch password-cracking-vulnerability warning-the black bar safety net
Use the console cable is connected toswitch, through HyperTerminal or Secure CRT connection to switch; 2. Press and hold down the switch on the front panel MODE button, plug in the switch power supply; 3. About 4 0 seconds after the release of the Mod 1. Use the console cable is connected...
Ease Audio Cutter 1.20 Local Crash
!/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage : http://mp3-cutter.com Application Download : http://mp3-cutter.com/download/audiocutter.exe Description : Click Select file button, select our file and click Play $crash = "\x42" x 15000; my $file =...
Ease Audio Cutter 1.20 (.wav file) Local Crash PoC
No description provided by source. !/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage : http://mp3-cutter.com Application Download : http://mp3-cutter.com/download/audiocutter.exe Description : Click Select file button, select our file and click Play...
Ease Audio Cutter 1.20 (.wav file) Local Crash PoC
Exploit for unknown platform in category dos / poc ================================================== Ease Audio Cutter 1.20 .wav file Local Crash PoC ================================================== !/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage :...
CVE-2008-6827
The ListView control in the Client GUI AClient.exe in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack on the "command prompt" hidden GUI button to 1 overwrite the CommandLine...
@ltacontent CMS Cross Site Scripting
=========================================================================================== Title : Cross-site Scripting XSS Vulnerability Software : @ltacontent CMS Vendor : http://altaconnect.com/ Date : 26 April 2009 Indonesia Author : Vrs-hCk Contact : [email protected] Blog :...
MDVA-2008:104 : x11-driver-input-evdev
This update corrects two issues with the evdev driver Xorg. The first is that button events were not generated for mice with more than seven buttons bug 39014; the second is that the pointer did not cross screens using the evdev driver. This update corrects both issues. %NASLMINLEVEL 70300...
MDVA-2008:165 : gnome-power-manager
Some button press events where handled two times because they were reported both by X and by Hal. This update adds some code to detect them and ignore the duplicate events. This update also adds a gconf key /schemas/apps/gnome-power-manager/general/logoutcommand to allow using gnome-power-manager...