Google Chrome memory misreference vulnerability (CNVD-2015-00671)

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A memory misreference vulnerability exists in the IndexedDB implementation in versions prior to Google Chrome 40.0.2214.91, which can be exploited by remote...

Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1756/info If Index Server is enabled in Microsoft Internet Information Server 5.0, it is possible for a remote user to view the entire root directory structure and all sub-directories due to a flaw in the Web Distributed...

Parsero v0.75 - Attacking Robots.txt Files

Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries tell the search engines what directories or files hosted on a web server mustn't be indexed. For example, "Disallow: /portal/login" means that the...

CVE-2013-4747

Cross-site scripting XSS vulnerability in the Accessible browse results for indexed search accessibleisbrowseresults extension 1.2.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Google Chrome Multiple Vulnerabilities-02 March 2013 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02mar13lin.nasl 6079 2017-05-08 09:03:33Z teissa $ Google Chrome Multiple Vulnerabilities-02 March 2013 Linux Authors: Thanga Prakash S Copyright: Copyright c...

Google Chrome Multiple Vulnerabilities-02 March 2013 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02mar13win.nasl 6074 2017-05-05 09:03:14Z teissa $ Google Chrome Multiple Vulnerabilities-02 March 2013 Windows Authors: Thanga Prakash S Copyright: Copyright ...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 176882 High CVE-2013-0902: Use-after-free in frame loader. Credit to Chamal de Silva. 176252 High CVE-2013-0903: Use-after-free in browser navigation handling. Credit to "chromium.khalil". 172926 172331 High CVE-2013-0904: Memory corruption in Web Audio. Credit to...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 112983 Low CVE-2011-3083: Browser crash with video + FTP. Credit to Aki Helin of OUSPG. 113496 Low CVE-2011-3084: Load links from internal pages in their own process. Credit to Brett Wilson of the Chromium development community. 118374 Medium CVE-2011-3085: UI...

Unfixed XSS vulnerability at www.unice.fr

Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.unice.fr, which at the time of submission ranked 41053 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is currently...

Unfixed XSS vulnerability at www.ceipi.edu

Security researcher Atmon3r, has submitted on 28/12/2011 a cross-site-scripting XSS vulnerability affecting www.ceipi.edu, which at the time of submission ranked 1972385 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currentl...

apr / Apache mod_autoindex DoS

CPU resources exhaustion on request to indexed files with long names...

Google Hack Database Tool v1.1

Google Hack DB Tool is a database tool with almost 8,000 entries. It allows administrators the ability to check their site for vulnerabilities based on data stored in Google. With this tool you can find out if your website has indexed vulnerabilities in google. This can lead to sensitive...

Ubuntu Update for thunderbird vulnerabilities USN-915-1

Ubuntu Update for Linux kernel vulnerabilities USN-915-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9151.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for thunderbird vulnerabilities USN-915-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2009-4341

SQL injection vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-4340

Cross-site scripting XSS vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4340

The CVE-2009-4340 entry describes a Cross-site scripting (XSS) vulnerability in the TYPO3 extension No indexed Search (no_indexed_search) version 0.2.0. The issue allows remote attackers to inject arbitrary web script or HTML, via unspecified vectors. The vulnerability is tied to TYPO3’s no_index...

CVE-2009-4340

Cross-site scripting XSS vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4341

SQL injection vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

kernel: ext4: make_indexed_dir() missing validation

The makeindexeddir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain reclen field, which allows local users to cause a denial of service OOPS by attempting to mount a crafted ext4 filesystem...