Mozilla Cross-origin data leakage from script filename in error messages

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows...

MP3 Cutter 1.8 Crash Exploit

Exploit for windows platform in category dos / poc ============================ MP3 Cutter 1.8 Crash Exploit ============================ " Legion of Xtremers & Hackers Garage www.loxian.co.cc www.garage4hackers.com MP3 Cutter 1.8 Crash Exploit...

minerCPP 0.4b Buffer Overflow / Format String

!/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Tested on Windows 7 In order to make...

SasCAM Request Processing Denial of Service Vulnerability

This host is running SasCam Webcam Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodsascamwebcamserverdosvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ SasCAM Request Processing Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 20...

CVE-2010-1960

Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long, invalid option to jovgraph.exe...

Microsoft ASP.NET Cross-Site Scripting vulnerability

Microsoft ASP .NET is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross Site URL Hijacking by using Error Object in Mozilla Firefox

I want to represent a method for performing Cross Site URL Hijacking which we can call XSUH by using the error object of Mozilla Firefox. XSUH attack is used to steal another website URL. This URL can show the client’s situation on that website, and it can contain confidential parameters such as...

openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2010:0198-1)

This update fixes several security issues in mysql : - checking server certificates CVE-2009-4028 - error handling in subqueries CVE-2009-4019 - preserving nullvalue flag in GeomFromWKB CVE-2009-4019 - symlink behavior fixed CVE-2008-7247 - symlink behavior refixed CVE-2009-4030 %NASLMINLEVEL 703...

openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2010:0198-1)

This update fixes several security issues in mysql : - checking server certificates CVE-2009-4028 - error handling in subqueries CVE-2009-4019 - preserving nullvalue flag in GeomFromWKB CVE-2009-4019 - symlink behavior fixed CVE-2008-7247 - symlink behavior refixed CVE-2009-4030 %NASLMINLEVEL 703...

Wind noise(FoosunCMS) 5.0 Error. asp error page cross-site scripting vulnerability (figure a-vulnerability warning-the black bar safety net

FoosunCMS is a powerful feature of based on ASP+ACCESS/MSSQL architecture of content management software, the leading domestic the first open source, integrated web2. 0 elements, modular ＣＭＳ built Station system. FoosunCMS incorrectly filtered user input, a remote attacker could exploit the...

CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Virtual PC Hypervisor Memory Protection Vulnerability 1. Advisory Information Title: Virtual PC Hypervisor Memory Protection Vulnerability Advisory Id: CORE-2009-0803...

Virtual PC Hypervisor - Memory Protection

Virtual PC Hypervisor - Memory Protection -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Virtual PC Hypervisor Memory Protection Vulnerability 1. Advisory Information Title: Virtual PC Hypervisor Memory Protection...

OpenSSL 'bn_wexpend()' Error Handling Unspecified Vulnerability

OpenSSL is prone to an unspecified vulnerability in bnwexpend. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

KLA10108 DoS vulnerability in Cisco VPN client

Improper error handling was found in Cisco VPN Client. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the cvpnd service via cvpnd.exe manipulations. Original advisories Cisco bulletin Related products...

Microsoft Windows Kernel NULL Pointer Dereferencing (MS09-058; CVE-2009-2516)

The Windows kernel is the core of the operating system. It provides system level services, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been discovered in the Windows kernel. The vulnerability is due to an error in the Windows kern...

Apache 2.2.x < 2.2.14 Multiple Vulnerabilities

According to its banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.14. It is, therefore, potentially affected by multiple vulnerabilities : - Faulty error handling in the Solaris pollset support could lead to a denial of service. CVE-2009-2699 - The 'modproxyftp' modu...

Apache < 2.2.14 Multiple Vulnerabilities

Binary data 5196.prm...

CVE-2009-2813

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote...

kernel security and bug fix update

2.6.9-89.0.7.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...

Apache Httpd < 2.2.14 : Solaris pollset DoS

Faulty error handling was found affecting Solaris pollset support Event Port backend caused by a bug in APR. A remote attacker could trigger this issue on Solaris servers which used prefork or event MPMs, resulting in a denial of service...