XSS in the Widget Connector

I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...

CVE-2008-5749

CVE-2008-5749 affects Google Chrome 1.0.154.36 on Windows XP SP3 and is an argument-injection vulnerability in the chromehtml URI via the --renderer-path option, enabling remote command execution. OpenVAS entries corroborate a Google Chrome argument-injection vulnerability; the core issue is the ...

PT-2008-6799 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome version 1.0.154.36 Description: The issue allows remote attackers to execute arbitrary commands via the --renderer-path option in a "chromehtml: URI" API endpoint. A third party disputes this issue, stating that Chrome will ask...

Debian Security Advisory DSA 1039-1 (blender)

The remote host is missing an update to blender announced via advisory DSA 1039-1. Several vulnerabilities have been discoverd in in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerability and Exposures Project identifies the following problems: CVE-2005-3302 Joxean Kore...

USN-473-1: libgd2 vulnerabilities

A buffer overflow was discovered in libgd2's font renderer. By tricking an application using libgd2 into rendering a specially crafted string with a JIS encoded font, a remote attacker could read heap memory or crash the application, leading to a denial of service. CVE-2007-0455 Xavier Roche...

X.org / XFree68 multiple integer overflows

Integer overflow in DBE and Renderer extensions...

Brim <= 1.2.1 (renderer) Multiple Remote File Include Vulnerabilities

No description provided by source. Brim 1.2.0pre3 , 1.2.1 renderer Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon and the stars suit the nig...

Brim 1.2.1 - renderer Multiple Remote File Inclusions

Brim 1.2.1 - renderer Multiple Remote File Inclusions Brim 1.2.0pre3 , 1.2.1 renderer Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon and the...

Debian DSA-1039-1 : blender - several vulnerabilities

Several vulnerabilities have been discovered in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2005-3302 Joxean Koret discovered that due to missing input validation a provided script is vulnerabl...

[Full-Disclosure] Novell/Ximian Evolution multiple text attachments DoS

================== =====Analysis===== ================== I just wanted to inform users of Ximian Evolution 2.0 software that there exists a way to temporarily DoS the local application and/or machine by attaching an absurd amount of .ezm files to a normal email. It seems that Evolution tries to...

PT-2004-1122 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 131.0.6778.69 Description: The issue is related to a use after free problem in the Accessibility component of Google Chrome, which can be exploited by a remote attacker who has compromised the renderer process...