540 matches found
Firefox download filename spoofing with RTL override
Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...
Firefox download filename spoofing with RTL override
Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...
Adobe Acrobat Reader 7 9 - U3D Buffer Overflow
Adobe Acrobat Reader 7 9 - U3D Buffer Overflow Copyright c 2009, Felipe Andres Manzano All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the...
Serv-U FTP Server v8 local mention right-vulnerability warning-the black bar safety net
Author: the emptiness of the prodigal son heart Release date:2009-08-05 Updated date:2009-08-05 Affected systems: serv-u8 Not affected system: Other versions are not affected Description: See cnbeta found su 8 This version. Think before write a 7 local mention right. Don't know 8 what the securit...
Make self-extracting files in the right click does not show-bug warning-the black bar safety net
Self-extracting file in the right key is not displayed in the unzip to we create a self-extracting file and even change the icon, when you right-click appears when you unzip the file, etc. options, is a self-extracting file, said the following a method to make it not display: With C32 loading...
DEBIAN-CVE-2008-4578
The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...
Unfixed XSS vulnerability at right-move.co.uk
Security researcher PaPPy, has submitted on 15/07/2008 a cross-site-scripting XSS vulnerability affecting right-move.co.uk, which at the time of submission ranked 5017633 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/11/2008. It is current...
Foxmail fmrsslink.dll RSSLINKLib.Rss AddUrl() Bug
Foxmail的fmrsslink.dll控件里IRss接口AddUrlURL, Info方法未检查网页提供的rss链接长度,当用户通过IE右键菜单收藏超长rss链接至Foxmail时,将导致栈溢出. .text:10001044 ; int stdcall AddUrlvoid thisptr, LPCWSTR lpURL, LPWSTR lpInfo .text:10001044 AddUrl proc near ; DATA XREF: .rdata:100041E0o .text:10001044 ; .rdata:10004244o .text:10001044...
[SECURITY] [DSA 1118-1] New Mozilla packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1118-1 [email protected] http://www.debian.org/security/ Martin Schulze July 22nd, 2006 http://www.debian.org/security/faq -...
Crack Web the right-click menu disabled latest method-vulnerability warning-the black bar safety net
Encountered on a web page with beautiful pictures or wonderful text want to save time, usually everyone is select the target and press the right mouse button in the pop-up menu, select“Save picture as”or“copy”to achieve our purpose. However, there are currently many web pages are shielding the...
"View Image" local resource linking (Windows) — Mozilla
Normally Mozilla-based clients prevent web content from linking to local files but Eric Foley reports a partial bypass of this restriction by using Windows filename syntax on a Windows computer rather than a file:/// URL as the SRC= attribute. The image will not be loaded on the web page--it will...
Hidden in the conspiracy behind the browser hijack attack and Defense-bug warning-the black bar safety net
“Browser hijacking”, the popular point said is deliberately misleading browser the route of a phenomenon, a common browser hijacker phenomenon:to access the normal site is diverted to a malicious Web page, when input the wrong URL was transferred to the hijacking software the specified website,...
security flaw
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the rightframe parameter. NOTE: this has been called a cross-site scripting XSS issue, but it is different than what is normally identified as XSS...
CVE-2006-0188
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the rightframe parameter. NOTE: this has been called a cross-site scripting XSS issue, but it is different than what is normally identified as XSS...
hordeGraphic.txt
Hello All, PRELUDE What is HORDE? http://www.horde.org/about/ The Mission The Horde Project is about creating high quality Open Source applications, based on PHP and the Horde Framework. The guiding principles of the Horde Project are to create solid standards-based applications using intelligent...
Combinations of right-to-left text and negative margins can crash Opera – Opera Security Advisories
Combinations of right-to-left text and negative margins can crash Opera – Opera Security Advisories OPCOM Team | November 23, 2005 Summary Combinations of right-to-left text and negative marginsin HTML code can crash Opera. Severity: Not a security issue. Problem description Right-to-left scripts...
Access right escalation / severe permission problems on Raritan Console Servers
Hi, during my research on console servers I've encountered a severe problem on one appliance. Summary: Access right escalation / severe permission problems on Raritan Console Servers Confirmed on DSX32, Software version: 2.4.6 www.raritan.com, more see below Details: DSX Raritan Console Servers...
DEBIAN-CVE-2005-0543
Cross-site scripting XSS vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via 1 the strServer, cfgBgcolorOne, or strServerChoice parameters in selectserver.lib.php, 2 the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily...
