CVE-2010-3730

Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote attackers to have an unspecified impact via a crafted web site, related to a "property pollution" issue...

CVE-2010-3730: Undefined Security Weakness

Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote attackers to have an unspecified impact via a crafted web site, related to a "property pollution" issue...

PT-2010-5024

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 6.0.472.62 Description The issue is related to a "property pollution" problem where Google Chrome does not properly use information about the origin of a document to manage properties. This allows remote attacke...

Softek Barcode Reader Toolkit ActiveX 7.1.4.14 - 'SoftekATL.dll' Remote Buffer Overflow

Softek Barcode Reader Toolkit ActiveX 7.1.4.14 SoftekATL.dll Buffer Overflow PoC Vendor: Softek Software Ltd Product web page: http://www.bardecode.com Affected version: 7.1.4.14 Summary: The Softek Barcode Reader Toolkit for Windows is a SDK that enables applications to extract barcode informati...

Google Chrome < 6.0.472.62 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 6.0.472.62. Such versions are reportedly affected by multiple vulnerabilities : - There is a bad cast with malformed SVGs. Issue 55114 - The buffer is mismanaged in the SPDY protocol. Issue 55119 - A cross-origin property...

ZDI-10-170: Apple Safari Webkit Runin Remote Code Execution Vulnerability

ZDI-10-170: Apple Safari Webkit Runin Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-170 September 13, 2010 -- CVE ID: CVE-2010-1806 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple WebKit -- TippingPointTM IPS...

Apple Safari Webkit Runin Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Code injection

Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to cause a denial of service deleted memory access...

Mozilla Firefox 3.5.x < 3.5.12 Multiple Vulnerabilities

Binary data 5656.prm...

Micronetsoft Rental Property Management Website SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Micronetsoft Rental Property Management Website SQLi Vulnerability Vendor url:http://www.micronetsoft.com Version:1 Price:179$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat,...

CVE-2010-2769

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in...

Information leak via XMLHttpRequest statusText — Mozilla

Matt Haggard reported that the statusText property of an XMLHttpRequest object is readable by the requester even when the request is made across origins. This status information reveals the presence of a web server and could be used to gather information about servers on internal private networks...

Micronetsoft Rental Property Management Website SQL Injection

Exploit for asp platform in category web applications ============================================================= Micronetsoft Rental Property Management Website SQL Injection =============================================================...

Micronetsoft Rental Property Management Website - SQL Injection

Micronetsoft Rental Property Management Website - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Micronetsoft Rental Property Management Website SQLi Vulnerability Vendor url:http://www.micronetsoft.com Version:1 Price:179$ Published: 2010-09-06 GThanx to:r0073r...

Micronetsoft Rental Property Management Website - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Micronetsoft Rental Property Management Website SQLi Vulnerability Vendor url:http://www.micronetsoft.com Version:1 Price:179$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat,...

Microsoft Office Property Code Execution exploit (CVE-2006-2389)

No description provided by source. Microsoft Office Property Code Execution exploit CVE-2006-2389 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Vulnerble application MS office 2003 Tested...

Microsoft Office Property Code Execution

Microsoft Office Property Code Execution exploit CVE-2006-2389 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 Greets...

Microsoft Office Property Code Execution exploit (CVE-2006-2389)

Exploit for windows platform in category remote exploits ================================================================ Microsoft Office Property Code Execution exploit CVE-2006-2389 ================================================================ Microsoft Office Property Code Execution exploi...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0553-1)

icedtea included in java-160-openjdk was updated to version 1.8.1 which fixes two security issues : CVE-2010-2783: IcedTea 'Extended JNLP Services' arbitrary file access CVE-2010-2548: IcedTea Incomplete property access check for unsigned applications The new version also fixes many non-security...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0553-1)

icedtea included in java-160-openjdk was updated to version 1.8.1 which fixes two security issues : CVE-2010-2783: IcedTea 'Extended JNLP Services' arbitrary file access CVE-2010-2548: IcedTea Incomplete property access check for unsigned applications The new version also fixes many non-security...