Mozilla Firefox HTML/JS DOS Vulnerability - POC

Mozilla Firefox JS POC Mozilla Firefox is unable to handle the Code and crash without the posibility of recover tabs. Better way to explote the vulnerability is Using a PHP scripts that check's if victim is using firefox browser them print the crash exploit. Demo:html version -More weak "Without...

Tencent products exchange platform a js leak, resulting in sensitive information leakage-vulnerability warning-the black bar safety net

Vulnerability title: Tencent product communication platform of a js leak, resulting in sensitive information leakage Vulnerability type: sensitive information disclosure Harm level: high Brief description: Little information leakage, may also bring serious problems. This article from Tencent is o...

XSS in Issue Collector

Hi Atlassian! There is a XSS vulnerability in the issue collector: File: /atlassian-jira-5.1.8-source/jira-issue-collector-plugin/src/main/resources/templates/view-collector.vm Line 82: $issue.summary Anonymous users can inject JS in the issue summary which usually will be executed by users with...

XSS in Issue Collector

Hi Atlassian! There is a XSS vulnerability in the issue collector: File: /atlassian-jira-5.1.8-source/jira-issue-collector-plugin/src/main/resources/templates/view-collector.vm Line 82: $issue.summary Anonymous users can inject JS in the issue summary which usually will be executed by users with...

XSS in Issue Collector

Hi Atlassian! There is a XSS vulnerability in the issue collector: File: /atlassian-jira-5.1.8-source/jira-issue-collector-plugin/src/main/resources/templates/view-collector.vm Line 82: $issue.summary Anonymous users can inject JS in the issue summary which usually will be executed by users with...

Fedora Update for guacamole-common-js FEDORA-2012-14179

Check for the Version of guacamole-common-js OpenVAS Vulnerability Test Fedora Update for guacamole-common-js FEDORA-2012-14179 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Fedora Update for guacamole-common-js FEDORA-2012-14097

Check for the Version of guacamole-common-js OpenVAS Vulnerability Test Fedora Update for guacamole-common-js FEDORA-2012-14097 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Fedora 16 : guacamole-common-0.6.1-2.fc16 / guacamole-common-js-0.6.1-2.fc16 / etc (2012-14097)

Guacamole C stack rebuild Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

Fedora Update for guacamole-common-js FEDORA-2012-14179

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : guacamole-common-0.6.1-2.fc17 / guacamole-common-js-0.6.1-2.fc17 / etc (2012-14179)

Guacamole C stack rebuild Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

Fedora Update for guacamole-common-js FEDORA-2012-14097

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 16 Update: guacamole-common-js-0.6.1-2.fc16

Guacamole is an HTML5 web application that provides access to desktop environments using remote desktop protocols such as VNC or RDP. A centraliz ed server acts as a tunnel and proxy, allowing access to multiple desktops thr ough a web browser. No plugins are needed: the client requires nothing...

[SECURITY] Fedora 18 Update: guacamole-common-0.6.1-2.fc18

Guacamole is an HTML5 web application that provides access to desktop environments using remote desktop protocols such as VNC or RDP. A centraliz ed server acts as a tunnel and proxy, allowing access to multiple desktops thr ough a web browser. No plugins are needed: the client requires nothing...

Fedora 18 : guacamole-common-0.6.1-2.fc18 / guacamole-common-js-0.6.1-2.fc18 / etc (2012-13914)

Guacamole C stack rebuild Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

Graduation thesis system upload vulnerability-vulnerability warning-the black bar safety net

In the A5 school class web site system recommended seen, bored download down to see Vulnerability in fileload directory of the FileUpload. asp file, with no fear of the formation of the upload ----------------------- var fu = new FileUpload“uploadForm”, “idFile”, Limit: 3, ExtIn: "rar",...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 file names to apps/userldap/settings.php; 2 url or 3 title parameter to apps/bookmarks/ajax/editBookmark.php; 4 tag or 5 page parameter to...

Mozilla: JSDependentString:: undepend string conversion results in memory corruption (MFSA 2012-52)

Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service memory...

互动百科多出存储型XSS

简要描述： 个人资料里，设置简介随便写如js代码，且对长度没有限制危害巨大。 详细说明： 其他用户如果访问该用户资料（只需要搜索该用户昵称即可），则会形成xss攻击。 此外在系统通知处，若在论坛发含有xss攻击代码，会给该用户形成xss攻击（因为只对楼主生效所以危害较小 。） 漏洞证明： 其他用户如果访问该用户资料，则会行程xss攻击...

Google Chrome < 20.0.1132.43 Multiple Vulnerabilities

Binary data 800967.prm...

Buffer overflow

Buffer overflow in the JS API in the PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...