Code injection

Opera before 11.50 allows user-assisted remote attackers to cause a denial of service application hang via a large table, which is not properly handled during a print preview...

CVE-2011-2624

Opera before 11.50 allows user-assisted remote attackers to cause a denial of service application hang via a large table, which is not properly handled during a print preview...

CVE-2011-2624

Opera before 11.50 is affected by a denial-of-service vulnerability caused by improper handling of a large table in print preview. The issue affects the print preview rendering path and can cause the application to hang. Publicly referenced advisories confirm this CVE-2011-2624 issue and indicate...

Microsoft Windows shmedia.dll DoS

Division by zero on AVI preview creation...

Windows Explorer 6.0.2900.5512 (Shmedia.dll 6.0.2900.5512) AVI Preview

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.5512 Shmedia.dll 6.0.2900.5512 App Url:...

Microsoft Windows Explorer 6.0.2900.5512 - 'Shmedia.dll 6.0.2900.5512' AVI Preview Denial of Service (PoC)

done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.5512 Shmedia.dll 6.0.2900.5512 App Url: http://www.micro$oft.com Shmedia.dll 6.0.2900.5512 MD5:...

ZDI-11-108: Mac OS X Compact Font Format Decoder Remote Code Execution Vulnerability

ZDI-11-108: Mac OS X Compact Font Format Decoder Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-108 March 22, 2011 -- CVE ID: CVE-2011-0176 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Apple -- Affected Products: Apple Preview --...

PHPOK3 business website built Station program injection-vulnerability warning-the black bar safety net

Author: jsbug original: http://lcx.cc/?FoxNews=1077.html Friends always stepping on my body to embark on DOTA Super God of the road, see the forum someone said phpok, taking advantage of the weekend, send on the head a gold, hope you can also be super-God. “phpok3/app/www/models/upfile.php”: the...

Discovery TorrentTrader 2.6 Cross Site Scripting / SQL Injection / Local File Inclusion

Exploit Title: TorrentTrader 2.6 Multiple vulnerabilities Google Dork: "Powered by TorrentTrader v2.06" Date: 29 Décembre 2010 Author: EsS4ndre Software Link: http://sourceforge.net/projects/torrenttrader/files/TorrentTrader%20v2/TorrentTrader-v2.06/ Version: 2.6 Tested on: Linux...

Facebook.com Cross Site Request Forgery / Cross Site Scripting

Facebook is a social networking website with the second highest number of visits worldwide, and over 500 million active users. Our team recently performed a quick security audit of the main Facebook site along with its mobile versions. Here are the full details of our findings. I. DESCRIPTION OF...

CVE-2010-3020

The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content...

CVE-2010-3020

Opera before 10.61 contains a vulnerability in the news-feed preview where scripts are not properly removed, allowing an attacker to force subscriptions to arbitrary feeds via crafted content. Affected software: Opera browser (pre-10.61). Root cause: improper sanitization/removal of scripts in th...

CVE-2010-3020

The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content...

FreeBSD : opera -- multiple vulnerabilities (71273c4d-a6ec-11df-8a8d-0008743bf21a)

The Opera Destkop Team reports : - Fixed an issue where heap buffer overflow in HTML5 canvas could be used to execute arbitrary code, as reported by Kuzzcc. - Fixed an issue where unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven...

News feed preview can subscribe to feeds without interaction – Opera Security Advisories

News feed preview can subscribe to feeds without interaction – Opera Security Advisories OPCOM Team | August 12, 2010 Severity Low Description When Opera is previewing a news feed, certain types of content do not have their scripts removed correctly. These scripts are able to subscribe the user t...

openoffice.org Execution of Python code when browsing macros

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text ODT file that triggers code execution when the macro directory structure is previewed...

Gmail Checker Plus Chrome Extension Cross Site Scripting

Gmail Checker plus Chrome extension XSS extension: https://chrome.google.com/extensions/detail/mihcahmgecmbnbcchbopgniflfhgnkff advisore:http://lostmon.blogspot.com/2010/06/gmail-checker-plus-chrome-extension-xss.html Exploit available:yes So in this case "Google Mail Checker Plus" version 1.1.7...

XSS and Content Injection in HTC Windows Mobile SMS Preview PopUp

No description provided by source. - Description Windows Mobile shows message previews if configured to do so. Due to missing input \ validation the contents of a sms is not properly sanitized and interpreted as it is. \ This can lead to content injection and xss. - Example Send a sms with the...

XSS and Content Injection in HTC Windows Mobile SMS Preview PopUp

------------------------------------------------------------------ XSS and Content Injection in HTC Windows Mobile SMS Preview PopUp Date: 22.04.2010 ------------------------------------------------------------------- - Description Windows Mobile shows message previews if configured to do so. Due...

CVE-2010-1164

Multiple cross-site scripting XSS vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 element or 2 defaultColor parameter to the Colour Picker page; the 3 formName parameter, 4 element parameter, or 5 full name field to the Us...