CVE-2009-4630

Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests. NOTE: the...

P2GChinchilla HTTP Server 1.1.1 - Denial of Service

P2GChinchilla HTTP Server 1.1.1 - Denial of Service !/usr/bin/perl File Name :P2GChinchillaTM HTTP Server Vuln : Remote Denial Of Service Exploit Auther : Zer0 Thunder Msn : [email protected] ==------ Exploit Title: P2GChinchillaTM HTTP Server 1.1.1 Remote Denial Of Service Exploit...

P2GChinchilla HTTP Server 1.1.1 - Denial of Service

!/usr/bin/perl File Name :P2GChinchillaTM HTTP Server Vuln : Remote Denial Of Service Exploit Auther : Zer0 Thunder Msn : [email protected] ==------ Exploit Title: P2GChinchillaTM HTTP Server 1.1.1 Remote Denial Of Service Exploit Date: 22/01/2010 Author: Zer0 Thunder Version: v 1.1....

New Attack Locates Web Users Via XSS, Google Data

The security researcher who created the MySpace XSS worm in 2005 has developed a technique that enables an attacker to accurately locate a Web user with GPS coordinates, without using IP-based geolocation. Samy Kamkar, the author of the infamous Samy worm that spread through MySpace, on Monday...

Helpdesk Pilot Knowledge Base SQL injection vulnerability - (article_id)

No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...

openSUSE Security Update : seamonkey (seamonkey-1738)

The Mozilla SeaMonkey browser suite was updated to version 2.0.1, fixing lots of bugs and various security issues. The following issues were fixed : - MFSA 2009-65/CVE-2009-3979/CVE-2009-3981 Crashes with evidence of memory corruption 1.9.0.16 - MFSA 2009-68/CVE-2009-3983 bmo487872 NTLM reflectio...

Green Desktiny Customer Support Helpdesk 2.3.1 - SQL Injection

Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 25, 2009 Software Information + Vendor : http://www.greendesktiny.com/ + Download : - + version : 2.3.1 or lower maybe also...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1727)

The Mozilla Firefox was updated to version 3.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - MFSA 2009-65/CVE-2009-3979/CVE-2009-3981 Crashes with evidence of memory corruption 1.9.0.16 - MFSA 2009-68/CVE-2009-3983 bmo487872 NTLM reflection vulnerability...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1727)

The Mozilla Firefox was updated to version 3.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - MFSA 2009-65/CVE-2009-3979/CVE-2009-3981 Crashes with evidence of memory corruption 1.9.0.16 - MFSA 2009-68/CVE-2009-3983 bmo487872 NTLM reflection vulnerability...

SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6736)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

Oracle Database Server MD2 package VALIDATE_GEOM procedure Buffer Overflow (CVE-2004-1364)

Oracle database can natively manage geographic and location data. MD2 is one of the packages installed to provide the location and spatial data operations. This package is owned by user MDSYS and granted public execution permission by default. An input validation vulnerability exists within a...

SuSE 11 Security Update : XULRunner (SAT Patch Number 1716)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

Mozilla Firefox - Location Bar Spoofing

Mozilla Firefox - Location Bar Spoofing Exploit Title: MOZILLA FIREFOX LOCATION BAR SPOOFING VULNERABILITY Date: 2009-12-18 Author: Jordi Chancel Software Link: http://www.mozilla.org/security/announce/2009/mfsa2009-69.html Version: Mozilla Firefox 3.0.15 & 3.5.5 Tested on: Windows XP-VISTA-SEVEN...

Mozilla Firefox Location Bar Spoofing Vulnerability

Exploit for unknown platform in category local exploits =================================================== Mozilla Firefox Location Bar Spoofing Vulnerability =================================================== Title: Mozilla Firefox Location Bar Spoofing Vulnerability CVE-ID: OSVDB-ID: Author:...

Mozilla Firefox Location Bar Spoof

FAKE PAGE FAKE PAGE FAKE PAGE...

Mozilla Firefox - Location Bar Spoofing

Exploit Title: MOZILLA FIREFOX LOCATION BAR SPOOFING VULNERABILITY Date: 2009-12-18 Author: Jordi Chancel Software Link: http://www.mozilla.org/security/announce/2009/mfsa2009-69.html Version: Mozilla Firefox 3.0.15 & 3.5.5 Tested on: Windows XP-VISTA-SEVEN & LINUX BACKTRACK CVE :...

Mozilla Firefox multiple security vulnerabilities

Multiple memory corruptions on HTML and media formats parsing, NTLM reflection attacks, location spoofing, privilege escalation, information leak...

FreeBSD : mozilla -- multiple vulnerabilities (01c57d20-ea26-11de-bd39-00248c9b4be7)

Mozilla Project reports : MFSA 2009-71 GeckoActiveXObject exception messages can be used to enumerate installed COM objects MFSA 2009-70 Privilege escalation via chrome window.opener MFSA 2009-69 Location bar spoofing vulnerabilities MFSA 2009-68 NTLM reflection vulnerability MFSA 2009-67 Integer...

Mozilla URL spoofing via invalid document.location

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to...

Mozilla SSL spoofing with document.location and empty SSL response page

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content aka 204 status code and an empty...