vBulletin adminCP Cross Site Scripting

.::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE : Code : -::Forum Manager = Add Ne...

Cross-domain data theft with CSS load – Opera Security Advisories

Cross-domain data theft with CSS load – Opera Security Advisories OPCOM Team | January 11, 2010 Summary CSS can be loaded cross-domain, and in some cases it is be possible to read the data pointed to, leading to the possibility of cross-domain data theft. Severity Moderate Opera’s response Opera...

vBulletin adminCP Cross-Site Scripting

No description provided by source. .::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE...

Mozilla Firefox 3.5.8 - Style Sheet redirection Information Disclosure

Mozilla Firefox 3.5.8 - Style Sheet redirection Information Disclosure source: https://www.securityfocus.com/bid/38369/info Mozilla Firefox is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that may lead to...

Apple Safari 4.0.4 - Style Sheet redirection Information Disclosure

Apple Safari 4.0.4 - Style Sheet redirection Information Disclosure source: https://www.securityfocus.com/bid/37925/info Apple Safari is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that may lead to further...

Mozilla Firefox 3.5.8 - Style Sheet redirection Information Disclosure

source: https://www.securityfocus.com/bid/38369/info Mozilla Firefox is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that may lead to further attacks. Hola setTimeout"alertdocument.styleSheets0.href", 10000;...

Apple Safari 4.0.4 - Style Sheet redirection Information Disclosure

source: https://www.securityfocus.com/bid/37925/info Apple Safari is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that may lead to further attacks. Hola setTimeout"alertdocument.styleSheets0.href", 10000;...

[SECURITY] Fedora 12 Update: stardict-3.0.1-20.fc12

StarDict is a Cross-Platform and international dictionary written in Gtk2. It has powerful features such as "Glob-style pattern matching," "Scan selection word," "Fuzzy query," etc...

SLES11: Security update for kdelibs3

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdelibs3 kdelibs3-default-style More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

SLES11: Security update for kdelibs3

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdelibs3 kdelibs3-default-style More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

Microsoft Internet Explorer 'Style' Object RCE Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS09-072. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-4186

Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service application crash via a long URI value aka url in the Cascading Style Sheets CSS background property...

Memory corruption

Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that 1 were not properly initialized or 2 are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the...

CVE-2009-3672

Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that 1 were not properly initialized or 2 are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the...

Microsoft IE Style对象错误对象引用远程代码执行漏洞

BUGTRAQ ID: 37085 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 IE在处理非法对象访问操作时存在内存破坏漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页在用户系统上执行指令。目前这个漏洞正在被广泛的利用。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 厂商补丁： Microsoft ---------...

Talk about Ewebeditor editor of each version of the problem-the vulnerability warning-the black bar safety net

Source: Tosec Security Team 'Blog Recently read something about ewebeditor for this editor, with regard to this vulnerability or a lot, in fact a lot of people doingsecurity testingwhen most of the bias in the injection context, sometimes attention under editor aspect is good, there are mainly as...

ZDI-09-071: Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability

ZDI-09-071: Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-071 October 13, 2009 -- CVE ID: CVE-2009-2531 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 6 Microsoft Internet Explorer 7...

Command injection

Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...

CVE-2009-3468: Undefined Security Weakness

Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...

CVE-2009-3052

The CVE-2009-3052 entry IDs a SQL injection in the Prime Quick Style addon for phpBB 3.0.x, in root/includes/prime_quick_style.php, exploitable via the prime_quick_style parameter to ucp.php. The affected version range is before 1.2.3. The vulnerability allows remote authenticated users to execut...