CVE-2010-4183: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted 1 background-image, 2 background, or 3 font-family Cascading Style Sheets CSS property, a different...

MS10-090 Microsoft Internet Explorer CSS SetUserClip Memory Corruption

This module exploits a memory corruption vulnerability within Microsoft's HTML engine mshtml. When parsing an HTML page containing a specially crafted CSS tag, memory corruption occurs that can lead arbitrary code execution. It seems like Microsoft code inadvertently increments a vtable pointer t...

Maxthon 3.0.18.1000 CSS Denial of Service

Exploit for windows platform in category dos / poc ========================================= Maxthon 3.0.18.1000 CSS Denial of Service ========================================= Title: Maxthon 3.0.18.1000 CSS Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar Developer: Maxthon...

Microsoft Internet Explorer invalid flag reference vulnerability

Overview Microsoft Internet Explorer invalid flag reference vulnerability Description According to the Microsoft Security Research & Defense Blog, Microsoft Internet Explorer incorrectly under-allocates memory to store a certain combination of Cascading Style Sheets CSS tags when parsing HTML,...

Maxthon 3.0.18.1000 CSS Denial of Service Vulnerability

No description provided by source. Title: Maxthon 3.0.18.1000 CSS Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar Developer: Maxthon International Version:3.0.18 Software Link: http://dl.maxthon.com/mx3/mx3.0.18.1000.exe Tested On: Windows 7 Ultimate 32-bit !/usr/bin/perl my...

Microsoft Internet Explorer CSS Tags Uninitialized Memory Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...

Maxthon 3.0.18.1000 - CSS Denial of Service

Title: Maxthon 3.0.18.1000 CSS Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar Developer: Maxthon International Version:3.0.18 Software Link: http://dl.maxthon.com/mx3/mx3.0.18.1000.exe Tested On: Windows 7 Ultimate 32-bit !/usr/bin/perl my $file= "Crash.html"; my $junk= "A/" x...

Maxthon 3.0.18.1000 - CSS Denial of Service

Maxthon 3.0.18.1000 - CSS Denial of Service Title: Maxthon 3.0.18.1000 CSS Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar Developer: Maxthon International Version:3.0.18 Software Link: http://dl.maxthon.com/mx3/mx3.0.18.1000.exe Tested On: Windows 7 Ultimate 32-bit...

FreeBSD : opera -- multiple vulnerabilities (aab187d4-e0f3-11df-b1ea-001999392805)

The Opera Desktop Team reports : - Fixed an issue that allowed cross-domain checks to be bypassed, allowing limited data theft using CSS, as reported by Isaac Dawson. - Fixed an issue where manipulating the window could be used to spoof the page address. - Fixed an issue with reloads and redirect...

Forced Matrix Script Remote Upload Vulnerability

Exploit for php platform in category web applications ================================================ Forced Matrix Script Remote Upload Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

CVE-2010-4043

Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequence, which allows remote attackers to obtain sensitive information via a crafted document...

CVE-2010-4043

Technical details (affected product/version/root cause/impact) for CVE-2010-4043 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2010-4043

Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequence, which allows remote attackers to obtain sensitive information via a crafted document...

CVE-2010-4043: Undefined Security Weakness

Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequence, which allows remote attackers to obtain sensitive information via a crafted document...

Microsoft Internet Explorer 8 Cross Domain

IE8 Css Cross-Domain Information Disclosure Vulnerability Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2010/10/14 References: http://www.80vul.com/ie8/IE8%20Css%20Cross-Domain%20Information%20Disclosure%20Vulnerability.txt Overview: MS-071 have fixed a Cross-Domain Information...

CVE-2010-3325

Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheets CSS documents, which allows remote attackers to obtain sensitive information from a different 1 domain or 2 zone via a crafted web site, aka "CSS Special Character Information...

Information disclosure

Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheets CSS documents, which allows remote attackers to obtain sensitive information from a different 1 domain or 2 zone via a crafted web site, aka "CSS Special Character Information...

CVE-2010-3325

Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheets CSS documents, which allows remote attackers to obtain sensitive information from a different 1 domain or 2 zone via a crafted web site, aka "CSS Special Character Information...

CVE-2010-3325

CVE-2010-3325 affects Microsoft Internet Explorer 6–8. It is an information-disclosure vulnerability in how IE processes CSS special characters, enabling a crafted web page to disclose content from another domain/IE zone. Attack would require the user to view a malicious page; impact is informati...

Microsoft Internet Explorer Multiple Vulnerabilities (2360131)

This host is missing a critical security update according to Microsoft Bulletin MS10-071. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...