232 matches found
Ubuntu 8.04 LTS : firefox regression (USN-930-3)
USN-930-1 fixed vulnerabilities in Firefox. Due to a software packaging problem, the Firefox 3.6 update could not be installed when the firefox-2 package was also installed. This update fixes the problem and updates apturl for the change. If was discovered that Firefox could be made to access fre...
FreeBSD : mozilla -- multiple vulnerabilities (99858b7c-7ece-11df-a007-000f20797ede)
Mozilla Project reports : MFSA 2010-33 User tracking across sites using Math.random MFSA 2010-32 Content-Disposition: attachment ignored if Content-Type: multipart also present MFSA 2010-31 focus behavior can be used to inject or steal keystrokes MFSA 2010-30 Integer Overflow in XSLT Node Sorting...
CVE-2010-2441
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...
Cross site scripting
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...
Cross site scripting
Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets."...
CVE-2010-2441
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...
CVE-2010-2441
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...
CVE-2010-2442
CVE-2010-2442 concerns Microsoft Internet Explorer (noted as IE 8 or similar) where the browser does not properly restrict focus changes, enabling a remote attacker to read keystrokes through cross-domain IFRAME gadgets. The primary affected component is the browser’s handling of focus and cross-...
CVE-2010-2441
Removed by vendor...
CVE-2010-1125
The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus metho...
CVE-2010-1126
The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method...
CVE-2010-1126
The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method...
CVE-2010-1125
The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus metho...
CVE-2010-1126
CVE-2010-1126 targets WebKit’s JavaScript implementation. The vulnerability allows remote attackers to cause keystrokes intended for a visible frame to be sent to a form field in a hidden frame by certain focus() calls in WebKit. Affected component is the WebKit browser engine; impact is partial ...
CVE-2010-1125
CVE-2010-1125 affects Mozilla Firefox 3.x (before 3.5.10) and 3.6.x (before 3.6.4), and SeaMonkey before 2.0.5. The vulnerability arises in the JavaScript focus handling: a call to focus can cause keystrokes intended for a visible form field to be delivered to a hidden frame, enabling remote expl...
CVE-2010-1126
The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method...
KeyLogger: Cheat Monitor
Cheat Monitor is a spyware program that can be used to record information on the computer. Cheat Monitor tracks emails, chats, instant messages, and every keystroke that is entered by the victim. It can also capture screenshots of the infected system and deliver reports to a pre-defined email...
Keystroke Logger
Added: 03/05/2009 Background This tool records all keystrokes which are typed at a computer's console. The keystrokes can be viewed in the exploit server's log. Limitations Logger works on Windows targets. A connection to the target is required to run this tool. Platforms Windows...
DEBIAN-CVE-2008-4101
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to 1 execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" semicolon followed by a command, or execute arbitrary Ex commands by entering an argument afte...
CVE-2007-4693
The SecurityAgent component in Mac OS X 10.4 through 10.4.10 allows attackers with physical access to bypass the authentication dialog of the screen saver and send keystrokes to a process, related to "handling of keyboard focus between secure text fields."...