2013 matches found
security flaw
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface...
Computer Associates BrightStor ARCserve Backup Discovery Service vulnerable to buffer overflow
Overview The Computer Associates BrightStor ARCserve Backup Discovery Service contains a buffer overflow, which may allow a remote attacker to execute arbitrary code. Description Computer Associates BrightStor ARCserve Backup is a cross-platform backup and recovery application. The ARCserve Backu...
firefoxSploit.txt
Firelinking 2 - Proof-of-Concept by mikx var pf = navigator.platform.toLowerCase; if pf.indexOf"win" != -1 var os = "win"; else if pf.indexOf"mac" != -1 var os = "mac"; else var os = "linux" function runDemo // this is an ugly caching workaround document.getElementById'outhtml'.innerHTML = "";...
Mozilla Firefox - view-source:JavaScript url Code Execution
Firelinking 2 - Proof-of-Concept by mikx var pf = navigator.platform.toLowerCase; if pf.indexOf"win" != -1 var os = "win"; else if pf.indexOf"mac" != -1 var os = "mac"; else var os = "linux" function runDemo // this is an ugly caching workaround document.getElementById'outhtml'.innerHTML = "";...
Mozilla Firefox view-source:javascript url Code Execution Exploit
Exploit for multiple platform in category remote exploits ================================================================= Mozilla Firefox view-source:javascript url Code Execution Exploit ================================================================= Firelinking 2 - Proof-of-Concept by mikx...
Mozilla Firefox - view-source:JavaScript url Code Execution
Mozilla Firefox - view-source:JavaScript url Code Execution Firelinking 2 - Proof-of-Concept by mikx var pf = navigator.platform.toLowerCase; if pf.indexOf"win" != -1 var os = "win"; else if pf.indexOf"mac" != -1 var os = "mac"; else var os = "linux" function runDemo // this is an ugly caching...
Mozilla Firefox executes JavaScript in the "IconURL" parameter of "InstallTrigger.install()" with chrome privileges
Overview Mozilla Firefox may execute JavaScript contained within the IconURL parameter of InstallTrigger.install with chrome privileges. This may allow an attacker to execute arbitrary commands on a vulnerable system. Description XPInstallXPInstall is a cross-platform software installation method...
[SIG^2 G-TEC] SurgeFTP LEAK Command Denial-Of-Service Vulnerability
SIG^2 Vulnerability Research Advisory SurgeFTP LEAK Command Denial-Of-Service Vulnerability by Tan Chew Keong Release Date: 07 Apr 2005 ADVISORY URL http://www.security.org.sg/vuln/surgeftp22m1.html SUMMARY SurgeFTP http://netwinsite.com/surgeftp/ is an FTP server with SSL/TLS security, easy...
[Full-Disclosure] Sun Java Plugin arbitrary package access vulnerability
OVERVIEW ======== Sun Microsystem's Java Plugin connects the Java technology to web browsers and allows the use of Java Applets. Java Plugin technology is available for numerous platforms and supports major web browsers. A vulnerability in Java Plugin allows an attacker to create an Applet which...
Macromedia Shockwave Flash Malformed Header Overflow #2
Macromedia Shockwave Flash Malformed Header Overflow 2 Release Date: December 16, 2002 Severity: High Remote Code Execution Systems Affected: Macromedia Flash Player versions less than 6.0.65.0 Description: While working on some pre-release Retina® CHAM tools, multiple exploitable conditions were...
Important: Red Hat Security Advisory: tomcat security update for Stronghold
Updated tomcat packages are now available for Stronghold Cross Platform to close a JSP source code exposure vulnerability. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. A source code exposure...
