Microsoft Sidebar and Gadgets Remote Code Execution Vulnerability (2719662)

This host is installed with Microsoft Windows Sidebar and Gadgets and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmssidebargadgetscodeexecvuln.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Sidebar and Gadgets Remote Code Execution Vulnerability 2719662...

Microsoft Issues Kill Fix For Windows Gadgets

A scheduled talk at the Black Hat Briefings security conference in Las Vegas later this month may have dealt a fatal blow to the once ballyhooed Windows Sidebar and Windows Gadgets. Redmond, Washington-based Microsoft, on Tuesday, issued a software “fix” that disables gadgets and the Windows...

WordPress WP-FaceThumb Gallery 0.1 Cross Site Scripting

Wordpress WP-FaceThumb Gallery Plugin Description: This plugin allows your visitor to take a snapshot whith a webcam and the thumb is display on your sidebar. The visitor indicate his pseudo and can let an URL which will be link to the thumb...

Mozilla Firefox Sidebar Panel Code Execution (CVE-2005-0402)

A remote code execution vulnerability has been reported in the Mozilla Firefox sidebar panel...

CVE-2011-3835

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

[SECURITY] Fedora 11 Update: konq-plugins-4.4.0-3.fc11

Some additional plugins that interact with konqueror adblock: AdBlock plugin akregator: Add feeds directly to akregator kdepim is needed autorefresh: Refresh websites after a specifig period babelfish: Translate a website with babelfish crashes: Crash monitor dirfilter: Filter the current directo...

[SECURITY] Fedora 12 Update: konq-plugins-4.4.0-3.fc12

Some additional plugins that interact with konqueror adblock: AdBlock plugin akregator: Add feeds directly to akregator kdepim is needed autorefresh: Refresh websites after a specifig period babelfish: Translate a website with babelfish crashes: Crash monitor dirfilter: Filter the current directo...

Mozilla Firefox Sidebar Panel (CVE-2005-0402)

Firefox is a popular open source web browser for multiple platforms. The product implements various security features which are meant to protect the user from harmful actions which may be attempted by malicious web pages. Some of these security features are restrictions placed on access to...

Feed Sidebar Firefox Extension - Privileged Code Injection

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Feed Sidebar Firefox Extension Code Injection Vulnerability Versions affected: 3.2 +-----------+ |Description| +-----------+ The Feed Sidebar Firefox extension will generate a previ...

CVE-2009-1841

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter...

Firefox JavaScript arbitrary code execution

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter...

MouseoverDictionary vulnerable to arbitrary script execution

Overview MouseoverDictionary, an add-on for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an arbitrary script. MouseoverDictionary, an add-on mouseover English-Japanese dictionary for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an...

CVE-2007-6205

CVE-2007-6205 is a cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) of S9Y Serendipity prior to 1.2.1. An attacker can inject arbitrary script/HTML via a link in an RSS feed. Public advisories (Debian DSA-1528-1, related OpenVAS/NVL) documen...

Mozilla FireFox侧栏书签拒绝服务漏洞

BUGTRAQ ID: 26216 FireFox是一款流行的开源WEB浏览器。 FireFox在处理书签时存在漏洞，恶意网页可能利用此漏洞导致浏览器不可用。 如果用户受骗使用Firefox访问了恶意网页并将恶意网页添加到书签的话，则在点击书签的时候就会导致浏览器拒绝服务，即使重启也不会恢复操作，必须删除侧栏面板或重装浏览器才能恢复服务 Mozilla Firefox 2.0.0.8 Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/ script...

CVE-2007-4818

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 addons/plugin.php, 2 addons/sidebar.php, 3 mail/index.php, or 4 mail/mailbox.php in modules/...

CVE-2007-4818

CVE-2007-4818 concerns multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 . The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the doc_root parameter to particular module files: (1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php, and...

Txx CMS 0.2 - Multiple Remote File Inclusions

Txx CMS 0.2 - Multiple Remote File Inclusions :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || |||...

Txx CMS 0.2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Txx CMS 0.2 Multiple Remote File Inclusion Vulnerabilities ==========================================================...

Txx CMS 0.2 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | //...

Microsoft Vista侧栏联系人及天气小工具远程代码执行漏洞（MS07-048）

BUGTRAQ ID: 25306,25304 CVECAN ID: CVE-2007-3891,CVE-2007-3032 Vista是微软发布的最新的操作系统。 Vista侧栏的联系人和天气小工具在解析某些属性时没有执行充分的验证，远程攻击者可能利用此漏洞通过诱使用户执行某些操作来控制系统。 如果用户在联系人小工具中导入添加了恶意的联系人文件，或单击了天气小工具中的恶意链接，就可能导致在系统上运行恶意代码。 Microsoft Windows Vista 临时解决方法： 卸载或禁用天气和联系人小工具 在“组策略”或注册表中禁用侧栏 修改gadget.xml上的访问控制列表以增加限制：...