Mozilla use-after-free error in nsBarProp

Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window...

acs-blog turkce v1.1.3-(tr) Database Disclosure Exploit

!/usr/bin/perl -w blog turkce v1.1.3-tr Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel =========================== special thanks to : r0073r...

PowerDVD 5.0.1107 - 'trigger.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44193/info PowerDVD is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Phoenix Project Manager 2.1.0.8 - DLL Loading Arbitrary Code Execution

Phoenix Project Manager 2.1.0.8 - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44198/info Phoenix Project Manager is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use th...

e2eSoft VCam - DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/44051/info e2eSoft VCam is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Novell iManager getMultiPartParameters file upload vulnerability

Added: 10/11/2010 BID: 43635 OSVDB: 68320 Background Novell iManager is a web-based management interface for other Novell products. Problem The getMultiPartParameters function in the nps.jar web application in Novell iManager allows remote attackers to upload arbitrary files to the server. By...

SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6734)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6735)

The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7101)

This update brings Mozilla Firefox to the 3.5.11 security release. It fixes following security issues : - Several memory safety bugs in habe been identified in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs show evidence of memory corruption under certain...

Microsoft Visio 2007 - 'mfc80esn.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43914/info Microsoft Visio is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that...

Novell iManager getMultiPartParameters Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iManager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nps.jar web application exposed via the Tomcat server running by default on TCP...

YelloSoft Pinky Directory Traversal Vulnerability

YelloSoft Pinky is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

E-Xoopport Samsara 3.1 (eCal Module) - Blind SQL Injection

!/usr/bin/perl 0-Day E-Xoopport - Samsara \r\n"; exit; my $host = $ARGV0; my $usr = $ARGV1; my $pwd = $ARGV2; my $anickde = $ARGV3; my $anick = '0x'.EncHex$anickde; print "! Logging In...\r\n"; my %postdata = uname = "$usr", pass = "$pwd", op = "login" ; my $cookies = HTTP::Cookies-new autosave =...

Sothink SWF Decompiler - 'dwmapi.dll' DLL Loading Arbitrary Code Execution

/ source: https://www.securityfocus.com/bid/43417/info Sothink SWF Decompiler is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location tha...

GreenBrowser - RSRC32.dll DLL Loading Arbitrary Code Execution

GreenBrowser - RSRC32.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43414/info GreenBrowser is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...

Adobe On Location Insecure Library Loading Vulnerability (Windows)

This host is installed with Adobe On Location and is prone to insecure library loading vulnerability. OpenVAS Vulnerability Test $Id: gbadobeonlocationlibloadvulnwin.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe On Location Insecure Library Loading Vulnerability Windows Authors: Antu Sanadi...

Adobe On Location Insecure Library Loading Vulnerability - Windows

Adobe On Location is prone to insecure library loading vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1809

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

Information disclosure

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

CVE-2010-1809

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...