892 matches found
Cross-site information disclosure via modal calls — Mozilla
Security researcher Eduardo Vela Nava reported that if a web page opened a new window and used a javascript: URL to make a modal call, such as alert, then subsequently navigated the page to a different domain, once the modal call returned the opener of the window could get access to objects in th...
Google Chrome multiple vulnerabilities - July 10
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Google Chrome 5.0.375.99更新修复多个安全漏洞
BUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1 在使用WebGL时Chrome中可能出现越界读访问错误。 2 Chrome没有正确地隔离沙盒中的IFRAME元素。 3...
CVE-2010-2652
Removed by vendor...
Google Chrome < 5.0.375.99 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 5.0.375.99. It therefore is reportedly affected by multiple vulnerabilities : - An unspecified error allows an out-of-bounds read with WebGL. Issue 42396 - An unspecified error exists in the process of isolating sandboxed...
Google Chrome < 5.0.375.99 Multiple Vulnerabilities
Binary data 5591.pasl...
Google Chrome < 5.0.375.99 Multiple Vulnerabilities
Binary data 800949.prm...
Joomla JC - Top 25 Movie Trailers Cross Site Scripting
=========================================================== JC - Top 25 Movie Trailers module XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...
JC - Top 25 Movie Trailers module XSS Vulnerability
Exploit for php platform in category web applications =================================================== JC - Top 25 Movie Trailers module XSS Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...
Mozilla Firefox MFSA 2009-47, -48, -49, -50, -51 Multiple Vulnerability
Exploit for windows platform in category remote exploits ======================================================================= Mozilla Firefox MFSA 2009-47, -48, -49, -50, -51 Multiple Vulnerability ======================================================================= Fix announce:...
Mozilla Firefox Remote Command Execution
Fix announce: http://www.mozilla.org/security/announce/2009/mfsa2009-48.html Bug history: https://bugzilla.mozilla.org/showbug.cgi?id=326628 So, Firefox up through 3.0.13 had an obscure little function under window.pkcs11: long addmodulein DOMString moduleName, in DOMString libraryFullPath, in lo...
Mozilla Firefox < 3.0.14 Multiplatform RCE via pkcs11.addmodule
Exploit for multiple platform in category remote exploits =============================================================== Mozilla Firefox var str = "Error detected in Firefox Module NSP31337.bin.\n" +...
Firefox <3.0.14 Multiplatform RCE via pkcs11.addmodule
Fix announce: http://www.mozilla.org/security/announce/2009/mfsa2009-48.html Bug history: https://bugzilla.mozilla.org/showbug.cgi?id=326628 So, Firefox up through 3.0.13 had an obscure little function under window.pkcs11: long addmodulein DOMString moduleName, in DOMString libraryFullPath, in lo...
Mozilla Firefox 3.0.14 - Multiplatform Remote Code Execution via pkcs11.addmodule
Mozilla Firefox 3.0.14 - Multiplatform Remote Code Execution via pkcs11.addmodule Fix announce: http://www.mozilla.org/security/announce/2009/mfsa2009-48.html Bug history: https://bugzilla.mozilla.org/showbug.cgi?id=326628 So, Firefox up through 3.0.13 had an obscure little function under...
CVE-2006-2384
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious...
CVE-2006-2384
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious...
ietest.html.txt
This is a multi-part message in MIME format. --------------010404020600030408080408 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Dear Lists: Apparently I wasn't clear enough with this paragraph of my advisory, or a...
[Full-disclosure] Internet Explorer User Interface Races, Redeux
-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Microsoft Internet Explorer User Interface Race Condition I. SYNOPSIS Affected Systems: Windows 98 Windows 98 Second Edition Windows Millennium Edition Windows 2000 Windows XP Windows Server 2003 Risk: Medium Impact: Remote code execution some...
Microsoft Internet Explorer 5.0.1 - Modal Dialog Manipulation
Microsoft Internet Explorer 5.0.1 - Modal Dialog Manipulation source: https://www.securityfocus.com/bid/17713/info Internet Explorer is prone to a remote code-execution vulnerability through exploiting a race-condition when displaying modal security dialog boxes. This issue may be exploited to...
Microsoft Internet Explorer 5.0.1 - Modal Dialog Manipulation
source: https://www.securityfocus.com/bid/17713/info Internet Explorer is prone to a remote code-execution vulnerability through exploiting a race-condition when displaying modal security dialog boxes. This issue may be exploited to cause users to inadvertently allow remote-code to be executed...