2780 matches found
Real Networks RealPlayer SP - RecordClip Method Remote Code Execution
Real Networks RealPlayer SP - RecordClip Method Remote Code Execution Sources: https://www.securityfocus.com/bid/44443/info http://packetstormsecurity.org/files/view/97522/recordingmanager-ie.txt Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplaye...
RealNetworks RealPlayer Code Execution
Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX function and firefox plugin http://www.zerodayinitiative.com/advisories/ZDI-10-211/ C:\Program Files\Real\RealPlayer\RecordingManager.exe has 2 interesting switches: /t will...
PT-2010-5550
Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.00 Description The issue makes it easier for remote attackers to spoof trusted content via a crafted web site, as the security indication of a page is not displayed when Opera Turbo is enabled. Recommendations For...
CVE-2010-3774
The NSSecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle 1 about:neterror and 2 about:certerror pages, which allows remote attackers to spoof the location bar via a crafted...
Code injection
The NSSecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle 1 about:neterror and 2 about:certerror pages, which allows remote attackers to spoof the location bar via a crafted...
CVE-2010-3774
The NSSecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle 1 about:neterror and 2 about:certerror pages, which allows remote attackers to spoof the location bar via a crafted...
Nmap NSE: Auth Spoof
This script attempts to checks for an identd auth server which is spoofing its replies. This is a wrapper on the Nmap Security Scanner's http://nmap.org auth-spoof.nse. OpenVAS Vulnerability Test $Id: gbnmapauthspoof.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap Auth Spoof NSE script...
Nmap NSE: Auth Spoof
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3827: Improper Input Validation
Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote attackers to spoof profiles via unspecified vectors...
Design/Logic Flaw
PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP messages that represent multi-message input, which allows remote attackers to spoof signed data by concatenating an...
PT-2010-4958
Name of the Vulnerable Software and Affected Versions PGP Desktop versions 10.0.x through 10.0.3 SP1 PGP Desktop version 10.1.0 Description The issue is related to the improper implementation of the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP messages. This allows...
CVE-2010-3810: Undefined Security Weakness
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the History object, which allows remote attackers to spoof the location bar's URL or add URLs to the history via a cross-origin attack...
Mandriva Update for krb5 MDVSA-2010:202-1 (krb5)
Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2010:202-1 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Microsoft's Vision of the Future (Parody)
Once again, the folks at Sarcastic Gamer took one of Microsoft's brilliant promotional clip, and turned it into something even more brilliant. Check it out: Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post...
CVE-2010-4036
Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecified vectors...
Design/Logic Flaw
Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecified vectors...
CVE-2010-4036
Removed by vendor...
CVE-2010-4044: Improper Input Validation
Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote attackers to spoof URLs by changing a window's size...
PT-2010-5252
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 7.0.517.41 Description The issue is related to the improper handling of page unloading, allowing remote attackers to spoof URLs. Recommendations For versions prior to 7.0.517.41, update to version 7.0.517.41 or...
