TikiWiki 2.2 Cross Site Scripting

Application: TikiWiki Version: 2.2 latest Website: www.tikiwiki.org Bug: Active XSS in URI Exploitation: Remote Date: 12 Mar 2009 Discovered by: iliz Author: iliz Contact: e-mail: iliz-zatyandexdotru Bug Description: TikiWiki version 2.2 and later uses URI in html response body and fails to...

TikiWiki 2.2 XSS Vulnerability in URI

Application: TikiWiki Version: 2.2 latest Website: www.tikiwiki.org Bug: Active XSS in URI Exploitation: Remote Date: 12 Mar 2009 Discovered by: iliz Author: iliz Contact: e-mail: iliz-zatyandexdotru Bug Description: TikiWiki version 2.2 and later uses URI in html response body and fails to...

Opera < 9.64 Multiple Vulnerabilities

Binary data 4945.prm...

Pwn2Own hacker: Safari is 'easy pickings'

Charlie Miller right, the security researcher who won last year’s Pwn2Own hacker contest, is predicting that Apple’s Safari browser will be the easiest target this year. In a note posted on the popular Daily Dave mailing list, Miller describes Safari as “easy pickin’s” and forecasts that at least...

Opera plugs code-execution vulnerabilities

Opera Software has shipped a high-priority security patch for its flagship Web browser to plug at least three vulnerabilities that expose Windows users to code execution and cross-domain scripting attacks. The Opera 9.64 upgrade also adds support for DEP Data Execution Prevention and ASLR Address...

Opera < 9.64 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 9.64 and thus reportedly affected by multiple issues : - A memory-corruption vulnerability when processing specially crafted JPEG files could allow an attacker to execute arbitrary code with the privileges of the affected...

Specially crafted JPEG images can be used to execute arbitrary code

Specially crafted JPEG images can cause Opera to corrupt memory and crash. Successful exploitation can lead to execution of arbitrary code...

Specially crafted JPEG images can be used to execute arbitrary code – Opera Security Advisories

Specially crafted JPEG images can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | February 25, 2009 Severity Extremely Severe Problem Description Specially crafted JPEG images can cause Opera to corrupt memory and crash. Successful exploitation can lead to execution of...

TLS certificates can be used to execute arbitrary code

When connecting to a TLS-protected website, Opera parses the X.509 certificate. If a site uses a specially crafted Subject Alternative Name in the certificate, it can cause Opera to crash. To inject code, additional means will have to be employed...

TLS certificates can be used to execute arbitrary code – Opera Security Advisories

TLS certificates can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | February 13, 2009 Severity Highly Severe Problem Description When connecting to a TLS-protected website, Opera parses the X.509 certificate. If a site uses a specially crafted Subject Alternative Name ...

Charset Inheritance vulnerability in Internet Explorer 6 и Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Charset Inheritance уязвимости в Internet Explorer 6 и Google Chrome. В дополнение к ранее опубликованной информации http://securityvulns.ru/news/Browsers/Charset/XSS.html о данной уязвимости в других браузерах. Данная уязвимость в браузерах,...

SuSE Update for opera SUSE-SA:2007:050

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2007050.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2007:050 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

SuSE Update for opera SUSE-SA:2007:009

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2007009.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2007:009 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

SuSE Update for flash-player SUSE-SA:2007:046

Check for the Version of flash-player OpenVAS Vulnerability Test $Id: gbsuse2007046.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for flash-player SUSE-SA:2007:046 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...

SuSE Update for opera SUSE-SA:2008:011

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2008011.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2008:011 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

SuSE Update for opera SUSE-SA:2008:001

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2008001.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2008:001 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

SuSE Update for opera SUSE-SA:2008:029

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2008029.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2008:029 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...