Mozilla Firefox Domain Spoofing Vulnerability

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A domain spoofing vulnerability exists in Mozilla Firefox, where several fonts on OS X display some Tibetan and Arabic characters as whitespace, which can be exploited by an attacker to conduct...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Mozilla: Use-after-free while resizing images in design mode (MFSA 2017-22)

A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from memory. This results in a potentially exploitable crash. This vulnerability affects Firefox 56, Firefox ESR 52.4, and Thunderbird 52.4...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-52.4.0esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

SUSE-SU-2017:2589-1 Security update for MozillaFirefox

This update for MozillaFirefox to ESR 52.3 fixes several issues. These security issues were fixed: - CVE-2017-7807 Domain hijacking through AppCache fallback bsc1052829 - CVE-2017-7791 Spoofing following page navigation with data: protocol and modal alerts bsc1052829 - CVE-2017-7792 Buffer overfl...

KLA11109 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Firefox and Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions, obtain sensitive information and perform cross-site scripting. Below is complete list of...

Debian: Security Advisory (DSA-3987-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Razer US: Reflected XSS in deals.razerzone.com via the interesting parameter.

Summary --- deals.razerzone.com is vulnerable to Reflected XSS via the interesting parameter. Affected Code --- html var ThisPageOn = "recommended", pageNum = 2, isLoading = false, delIntresItem = 0, delNotIntresItem = 0, delOwnedItem = 0, intres = -1 abba alert1 ; var ownedLang = "OWNED",...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

NetScaler Gateway Endpoint Analysis Supported Operating System and Browsers

Q: What are the operating systems and Web browsers required for NetScaler Gateway Endpoint Analysis plug-in? A : To use the Endpoint Analysis Plug-in, the following software is required on the user device: Operating System| Supported Browsers ---|--- Mac OS X 10.9 and later| Safari 7.1 or...

Razer US: Open redirect in razer-id.razerzone.com via the redirect parameter.

Summary --- razer-id.razerzone.com is vulnerable to Open redirects via the redirect parameter. Browsers Verified In --- Google Chrome 60.0.3112.113 Official Build 64-bit Mozilla Firefox 55.0.2 64-bit PoC --- The following URL will redirect your users to https://google.com...

Mozilla Firefox Web Browser v55.2 - Memory Corruption

Document Title: =============== Mozilla Firefox Web Browser v55.2 - Memory Corruption References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2093 Video: https://www.youtube.com/watch?v=eyA3YdHddS8 Release Date: ============= 2017-09-04 Vulnerability Laboratory ID VL-ID:...

Mozilla Firefox Web Browser v55.2 - Memory Corruption

Document Title: =============== Mozilla Firefox Web Browser v55.2 - Memory Corruption References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2093 Video: https://www.youtube.com/watch?v=eyA3YdHddS8 Release Date: ============= 2017-09-03 Vulnerability Laboratory ID VL-ID:...

GSA Bounty: Reflected XSS on the data.gov (WAF bypass+ Chrome XSS Auditor bypass+ works in all browsers)

Description Hello. I discovered Cross-Site scripting issue on the https://www.data.gov/local/ endpoint. The issue can be site-wide, and exploitable in any place, where pagination exist. The Impact and Severity I assigned the High severity, because unlike the last 263226 report that XSS was...

Mozilla Firefox for Windows Arbitrary File Deletion Vulnerability

Mozilla Firefox for Windows is an open source web browser for the Windows platform from the Mozilla Foundation in the U.S. Firefox ESR for Windows is an extended support version of Firefox for the Windows platform. A security vulnerability exists in previous versions of Mozilla Firefox 55 for...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2017:2302-1)

Mozilla Firefox was updated to the ESR 52.3 release bsc1052829 Following security issues were fixed : - MFSA 2017-19/CVE-2017-7807: Domain hijacking through AppCache fallback - MFSA 2017-19/CVE-2017-7791: Spoofing following page navigation with data: protocol and modal alerts - MFSA...

SUSE-SU-2017:2302-1 Security update for MozillaFirefox

Mozilla Firefox was updated to the ESR 52.3 release bsc1052829 Following security issues were fixed: MFSA 2017-19/CVE-2017-7807: Domain hijacking through AppCache fallback MFSA 2017-19/CVE-2017-7791: Spoofing following page navigation with data: protocol and modal alerts MFSA 2017-19/CVE-2017-779...

Posty 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Posty SQL injection Authentication bypass Description : an attacker is able to inject malicious sql query to bypass the login page and login as normal user Proof of Concept : -...

Posty 1.0 SQL Injection

======================================================== Posty SQL injection Authentication bypass Description : an attacker is able to inject malicious sql query to bypass the login page and login as normal user Proof of Concept : - http://localhost/login.php set username and password = PCS00442...

Car or Cab Booking Script - Authentication Bypass

Car or Cab Booking Script - Authentication Bypass ======================================================== Car or Cab Booking Script - SQL injection login bypass Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin of the particular school...