Mandriva Linux Security Advisory : silc-toolkit (MDVSA-2009:234-2)

Multiple vulnerabilities was discovered and corrected in silc-toolkit : Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format...

Aurora CMS 1.0.2 (install.plugin.php) Remote File Inclusion Vulnerability

No description provided by source. --------------------------------------------------------------------------------------------------------------- Aurora Content Management System Enterprise Edition install.plugin.php = Remote File Include Vulnerability...

Mozilla Firefox Multiple Vulnerabilities - Sep09 (Linux)

The host is installed with Firefox browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultvulnsep09lin.nasl 5055 2017-01-20 14:08:39Z teissa $ Mozilla Firefox Multiple Vulnerabilities - Sep09 Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Firebird SQL Detection (Windows SMB Login)

SMB login-based detection of Firebird SQL. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800851...

FreeBSD : mozilla firefox -- multiple vulnerabilities (922d2398-9e2d-11de-a998-0030843d3802)

Mozilla Foundation reports : MFSA 2009-51 Chrome privilege escalation with FeedWriter MFSA 2009-50 Location bar spoofing via tall line-height Unicode characters MFSA 2009-49 TreeColumns dangling pointer vulnerability MFSA 2009-48 Insufficient warning for PKCS11 module installation and removal MFS...

CVE-2008-7159

The silcasn1encoder function in lib/silcasn1/silcasn1encode.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string...

CVE-2008-7160

The CVE-2008-7160 issue affects the SILC Toolkit/SILC server (silcd HTTP server) prior to version 1.1.9, where an incorrect format string handling in a sscanf() call for Content-Length headers could overwrite a stack location and potentially allow code execution. Public documentation in Debian DS...

Mozilla Foundation Security Advisory 2009-50

Mozilla Foundation Security Advisory 2009-50 Title: Location bar spoofing via tall line-height Unicode characters Impact: Low Announced: September 9, 2009 Reporter: Juan Pablo Lopez Yacubian Products: Firefox Fixed in: Firefox 3.5.3 Firefox 3.0.14 Description Security researcher Juan Pablo Lopez...

OBOphiX 2.7.0 Remote File Inclusion

OBOphiX fonctionsracine.php = 2.7.0 Remote File Include Vulnerability + Author : EA Ngel + Location : Manado - Indonesia + Situs : wwwdotmanadocodingdotnet + Contact : [email protected] + Download Script :...

mozilla firefox -- multiple vulnerabilities

Mozilla Foundation reports: MFSA 2009-51 Chrome privilege escalation with FeedWriter MFSA 2009-50 Location bar spoofing via tall line-height Unicode characters MFSA 2009-49 TreeColumns dangling pointer vulnerability MFSA 2009-48 Insufficient warning for PKCS11 module installation and removal MFSA...

Firefox 3.5.x < 3.5.3 Multiple Vulnerabilities

The installed version of Firefox 3.5 is earlier than 3.5.3. Such versions are potentially affected by the following security issues : - Multiple memory corruption vulnerabilities could potentially allow arbitrary code execution. MFSA 2009-47 - The columns of a XUL tree element can manipulated in ...

Location bar spoofing via tall line-height Unicode characters — Mozilla

Security researcher Juan Pablo Lopez Yacubian reported that the default Windows font used to render the locationbar and other text fields was improperly displaying certain Unicode characters with tall line-height. In such cases the tall line-height would cause the rest of the text in the input...

Orca Browser 'javascript:' And 'data:' URI XSS Vulnerability

This host is installed with Orca Browser Browser and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gborcabrowserjsndataurixssvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Orca Browser 'javascript:' And 'data:' URI XSS Vulnerability Authors: Sharath S Copyright:...

Mozilla Product(s) 'javascript:' URI XSS Vulnerability - Sep09 (Linux)

This host is installed with Mozilla Products and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsjsurixssvulnsep09lin.nasl 6482 2017-06-29 08:31:43Z cfischer $ Mozilla Products 'javascript:' URI XSS Vulnerability - Sep09 Linux Authors: Sharath S...

Opera 'javascript: URI' XSS Vulnerability (Sep 2009) - Linux

Opera Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeSchool 1.1.0 - Multiple Remote File Inclusions

FreeSchool 1.1.0 - Multiple Remote File Inclusions x FreeSchool = 1.1.0 Mutiple Remote File Include Vulnerability ! Download Script : http://sourceforge.net/projects/freeschool/files/ ! Author : cr4wl3r ! Contact : cr4wl3r4tlinuxmaildotorg ! Location : Gorontalo - INDONESIA ! Dork : "FuCk y0u...

PHPope &lt;= 1.0.0 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. x PHPope = 1.0.0 Multiple Remote File Include Vulnerability ! Download Script : http://sourceforge.net/projects/phpope/files/ ! Author : cr4wl3r ! Contact : cr4wl3r4tlinuxmaildotorg ! Location : Gorontalo - INDONESIA ! Dork : "FuCk y0u MaLaYsia" x 3xplo!t :...

Google Chrome 'chromehtml: URI' DoS Vulnerability

Google Chrome is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3013

Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Location header that contains JavaScript sequences in a...

CVE-2009-3015

QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header that contains a javascript: URI, 2...