Exteen Blog XSS Remote Cookie Disclosure Exploit

========================================================== Exteen Blog XSS Remote Cookie Disclosure Exploit ========================================================== AUTHOR : CWH Underground DATE : 22 May 2008 SITE : www.citec.us APPLICATION : Exteen Blog VENDOR : www.exteen.com --- Vulnerable...

exteen-disclose.txt

========================================================== Exteen Blog XSS Remote Cookie Disclosure Exploit ========================================================== AUTHOR : CWH Underground DATE : 22 May 2008 SITE : www.citec.us APPLICATION : Exteen Blog VENDOR : www.exteen.com --- Vulnerable...

Opera bookmark function vulnerability

Overview Opera Software ASA's Opera Web Browser contains a vulnerability that may cause a crash upon next startup if a specially crafted web page is registered in the bookmark. Impact An user cannot start Opera Web Browser because it crashes during startup. Solution None...

xss in ipb 2.3.5

Invision Power Board =2.3.5 Active XSS Работает в ie Не работает в opera 1 создаем файл any.html внути него scriptalert/script 2 содаем пост с аттачем any.html Автор:00...

GLSA-200804-14 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-14 Opera: Multiple vulnerabilities Michal Zalewski reported two vulnerabilities, memory corruption when adding news feed sources from a website CVE-2008-1761 as well as when processing HTML CANVAS elements to use scaled...

[ GLSA 200804-14 ] Opera: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200804-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Opera browser multiple security vulnerabilities

Multiple memory corruptions, keyboard passwords handling weakness...

Memory corruption

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access...

Design/Logic Flaw

Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."...

CVE-2008-1764

Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."...

Memory corruption

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

CVE-2008-1762

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

CVE-2008-1762

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

CVE-2008-1761

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access...

CVE-2008-1764

Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."...

CVE-2008-1761

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access...

CVE-2008-1761

Opera ≤9.26 is affected by CVE-2008-1761 (memory corruption when processing news feed sources) and CVE-2008-1762 (HTML CANVAS image scaling); CVE-2008-1764 reports a keyboard-handling weakness for passwords. The issues allow remote attackers to crash or potentially execute arbitrary code via craf...

CVE-2008-1764

Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."...

CVE-2008-1761

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access...

CVE-2008-1762

Opera before 9.27 contains a memory corruption vulnerability (CVE-2008-1762) triggered by a crafted scaled image pattern in an HTML CANVAS element, allowing remote attackers to cause a crash and potentially execute arbitrary code. Affected: Opera web browser; root cause: memory corruption during ...