6314 matches found
Opera Browser < 10.54 Multiple Vulnerabilities (Jul 2010) - Windows
Opera web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Secure Backup Administration $other Variable Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability. The specific flaw exists in the handling of variables to the propertybox.php script located on the Oracle Secure...
Code injection
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters...
Google Chrome 5.0.375.99更新修复多个安全漏洞
BUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1 在使用WebGL时Chrome中可能出现越界读访问错误。 2 Chrome没有正确地隔离沙盒中的IFRAME元素。 3...
CVE-2010-2660
Opera before 10.54 on Windows/Mac and before 10.60 on UNIX suffers from improper restriction of certain homograph characters in domain names, enabling remote attackers to spoof IDN domains. Root cause: inadequate validation of characters used in domain names. Impact: possible spoofing of the addr...
Cross site scripting
Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting XSS protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element...
Fedora 12 : konversation-1.2.3-1.fc12 (2010-1935)
Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...
Fedora 13 : GraphicsMagick-1.3.12-1.fc13 (2010-4127)
new release, with a handful of bug fixes filtering and security fix related to extended characters in filenames, see also, http://sourceforge.net/mailarchive /message.php?msgname=alpine.GSO.2.01.1002211622420.25017 at freddy.simplesystems.o rg Note that Tenable Network Security has extracted the...
Oxygen2PHP <= 1.1.3 (forumdisplay.php) Blind SQL Injection Exploit
Exploit for php platform in category web applications ================================================================== Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$h...
CVE-2010-2228
Cross-site scripting XSS vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username...
Cross site scripting
Cross-site scripting XSS vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username...
CVE-2010-2228
Cross-site scripting XSS vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username...
Winamp v5.572 Local BoF Exploit (Win7 ASLR and DEP Bypass)
Exploit for windows platform in category local exploits ========================================================== Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass ========================================================== !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Wi...
CVE-2010-2435
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...
Code injection
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...
CVE-2010-2435
CVE-2010-2435 affects Weborf HTTP Server versions 0.12.1 and earlier. The vulnerability arises from how the server processes Unicode characters in HTTP headers (notably the Connection header), allowing remote attackers to trigger a crash and cause a denial of service. The available connected docu...
CVE-2010-2435
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...
Weborf HTTP Server Denial of Service Vulnerability
Exploit for multiple platform in category dos / poc ================================================== Weborf HTTP Server Denial of Service Vulnerability ================================================== Software - Weborf HTTP Server Vendor Product Description - Weborf is a lightweight Web serve...
Weborf DCA-00012 Vulnerability Report
DCA-0012 Software - Weborf HTTP Server Vendor Product Description - Weborf is a lightweight Web server written in C. It supports IPv6 and basic authentication. It doesn't implement the full HTTP specification, but can be used to easily share directories or files. Bug Description - Weborf HTTP...