SeaMonkey < 2.0.1 Multiple Vulnerabilities

Binary data 5265.prm...

Mozilla Firefox < 3.0.16 / 3.5.6 Multiple Vulnerabilities

Binary data 5264.prm...

Mozilla Firefox < 3.0.16 / 3.5.6 Multiple Vulnerabilities

Binary data 801369.prm...

Firefox 3.5 < 3.5.6 Multiple Vulnerabilities

The installed version of Firefox is 3.5.x earlier than 3.5.6. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2009-65 - Multiple vulnerabilities in 'liboggplay' can lead to arbitrary code execution. MFSA...

Firefox < 3.0.16 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.0.16. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2009-65 - The NTLM implementation is vulnerable to reflection attacks in which NTLM credentials from o...

Location bar spoofing vulnerabilities — Mozilla

Security researcher Jonathan Morgan reported that when a page loaded over an insecure protocol, such as http: or file:, sets its document.location to a https: URL which responds with a 204 status and empty response body, the insecure page will receive SSL indicators near the location bar, but wil...

VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC

No description provided by source. !/usr/bin/env python VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows 7 Download: http://www.videolan.org Note: Open the .xspf file. It looks like nothing happens but close VLC you will get a crash header1 =...

Joomla! MojoBlog Remote File Inclusion

Joomla Component MojoBlog Multiple Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : November 20, 2009 Software Information + Vendor : http://www.joomlify.com/ + Download : http://www.joomlify.com/files/mojoblog/ + version :...

OpenCSP Multiple Remote File Include Vulnerability

No description provided by source. @================================================================================================================================================@ + Location : notepad + Situs : wwwdotmanadocodingdotnet + Contact : engelpemulaatgmaildotcom + Download Script :...

Microsoft Internet Explorer CSS style element vulnerability

Overview Microsoft Internet Explorer IE does not safely reference CSS style elements. Using a specially crafted HTML page, an attacker can cause IE to crash and potentially execute arbitrary code. Description IE contains a vulnerability in the way it references CSS style elements. Processing a...

Joomla / Mambo Ezine Remote File Inclusion

Joomla / Mambo Component comezine Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 20 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=-...

Non-compliant Strict Transport Security (STS)

The remote web server implements Strict Transport Security. However, it does not respect all the requirements of the STS draft standard. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42823; scriptversion"$Revision: 1.7 $"; scriptcvsdate"$Date: 2014/09/19 20:19:00 $"...

Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS)

The msnslpsiprecv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an SLP invite message that lacks certain required fields, as...

mDNSResponder 10.4.0 10.4.8 UPnP Location Overflow (OS X)

No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Exploit::Remote::Udp def initializeinfo = superupdateinfoinfo, 'Name' = 'Mac OS X mDNSResponder UPnP Location Overflow', 'Platform' = 'osx', 'DefaultOptions' = 'SRVPORT' = 1900, 'RPORT' = 0 ,...

Mozilla Foundation Security Advisory 2009-52

Mozilla Foundation Security Advisory 2009-52 Title: Form history vulnerable to stealing Impact: Moderate Announced: October 27, 2009 Reporter: Paul Stone Products: Firefox Fixed in: Firefox 3.5.4 Firefox 3.0.15 Description Security researcher Paul Stone reported that a user's form history, both...

Mac OS X mDNSResponder UPnP Location Overflow

require 'msf/core' class Metasploit3 'Mac OS X mDNSResponder UPnP Location Overflow', 'Platform' = 'osx', 'DefaultOptions' = 'SRVPORT' = 1900, 'RPORT' = 0 , 'Targets' = '10.4.8 x86', mDNSResponder-108.2 'Arch' = ARCHX86, Offset to mDNSStorage structure 'Offset' = 21000, 'Magic' = 0x8fe510a0,...

mDNSResponder 10.4.0/10.4.8 (OSX) - UPnP Location Overflow (Metasploit)

require 'msf/core' class Metasploit3 'Mac OS X mDNSResponder UPnP Location Overflow', 'Platform' = 'osx', 'DefaultOptions' = 'SRVPORT' = 1900, 'RPORT' = 0 , 'Targets' = '10.4.8 x86', mDNSResponder-108.2 'Arch' = ARCHX86, Offset to mDNSStorage structure 'Offset' = 21000, 'Magic' = 0x8fe510a0,...

Facebook Password-Reset Spam is Botnet Attack

Virus hunters are raising the alarm for a large-scale spam attack that uses fake Facebook password-reset messages to trick PC users into downloading a dangerous piece of malware. The malicious executable is linked to the Bredolab botnet, which has been linked to massive spam runs and identity-the...

Form history vulnerable to stealing — Mozilla

Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to theft. A malicious web page could synthesize events such as mouse focus and key presses on behalf of the victim and trick the browser into auto-filling th...

To modify log file properties protect yourself will not be the administrator found-vulnerability warning-the black bar safety net

The log file location is actually stored in the registry,as long as we modify its attributes to mask their intrusion traces, Here only modify the default location,the log size of the property,such as log size 0 0 0 0 0 0 0 1,so that it can not be normal recording, So if you can perfect guarantee...