226 matches found
Flock Browser 3.0.0 - Malformed Bookmark HTML Injection
source: https://www.securityfocus.com/bid/42556/info Flock Browser is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browse...
Flock Web Browser 2.5.6 Denial Of Service
====================================================================== Flock web browser v2.5.6 Remote Memory Corrupt Crash Exploit ====================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /...
CVE-2010-1236
The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting...
Cross site scripting
The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting...
CVE-2010-1236
CVE-2010-1236 affects WebKit’s WebCore component (protocolIs in platform/KURLGoogle.cpp). The issue is improper handling of leading whitespace in a URL, enabling cross-site scripting via crafted javascript: URLs. Affects Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112. T...
CVE-2010-1236
Removed by vendor...
Netscape Navigator - Namoroka - Flock <= URL Code Execution Exploit
Exploit for unknown platform in category remote exploits =================================================================== Netscape Navigator - Namoroka - Flock firelinking By eidelweiss var pf = navigator.platform.toLowerCase; if pf.indexOf"win" != -1 var os = "win"; else if pf.indexOf"linux" ...
Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Flock 2.5.2 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-119 Risk: High Remote: Yes Affected Software: - -...
Flock 2.5.2 Remote Array Overrun
Flock 2.5.2 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - Dis.: 07.05.2009 - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-119 Risk: High Remote: Yes Affected Software: - Flock 2.5.2 Fixed in: - Flock 2.5.5 NOTE: Prior...
Flock Address Bar Spoofing Vulnerability (Windows)
This host is installed with Flock Browser and is prone to Address Bar Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbflockaddrbarspoofingvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Flock Address Bar Spoofing Vulnerability Windows Authors: Sharath S Copyright: Copyright c 2009...
Flock Detection (Linux/Unix SSH Login)
SSH login-based detection of the Flock Browser. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Flock Detection (Windows SMB Login)
This script detects the installed version of Flock Browser. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Flock Version Detection (Linux)
This script detects the installed version of Flock Browser and sets the result in KB. OpenVAS Vulnerability Test $Id: gbflockdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ Flock Version Detection Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Flock Version Detection (Windows)
This script detects the installed version of Flock Browser and sets the result in KB. OpenVAS Vulnerability Test $Id: gbflockdetectwin.nasl 7332 2017-09-29 14:16:56Z cfischer $ Flock Version Detection Windows Authors: Sharath S Updated By: Madhuri D on 2010-09-10 - To Detect recent versions...
Flock Address Bar Spoofing Vulnerability (Linux)
This host is installed with Flock Browser and is prone to Address Bar Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbflockaddrbarspoofingvulnlin.nasl 4865 2016-12-28 16:16:43Z teissa $ Flock Address Bar Spoofing Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbo...
Flock Address Bar Spoofing Vulnerability - Linux
Flock Browser is prone to Address Bar Spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Flock Address Bar Spoofing Vulnerability - Windows
Flock Browser is prone to Address Bar Spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-3007
Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the...
CVE-2009-3007
CVE-2009-3007 affects Mozilla Firefox 3.5.1, SeaMonkey 1.1.17, and Flock 2.5.1, enabling context-dependent attackers to spoof the address bar via window.open with a relative URI to reveal an arbitrary file: URL after the user navigates to a file: URL. The connected documents corroborate a family ...
CVE-2009-3007
Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the...