Cross site scripting

Cross-site scripting XSS vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes...

CVE-2006-6919

Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing "", which Sage modifies to close the img element before the malicious script...

CVE-2006-6919

Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing "", which Sage modifies to close the img element before the malicious script...

Opera Web浏览器JPEG图形DHT标记堆溢出漏洞

Opera是一款流行的WEB浏览器，支持多种平台。 Opera没有正确地处理JPEG文件头中的DHT标记，远程攻击者可能利用此漏洞控制用户机器。 如果DHT标记中包含有无效的索引字节数的话，攻击者就可以触发堆溢出，导致执行任意指令。 Opera Software Opera 9.02 Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.opera.com...

Cross site scripting

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

CVE-2006-6741

CVE-2006-6741 concerns a CSRF vulnerability in the urlobox component of MKPortal. The issue allows remote attackers to delete arbitrary administrator messages by triggering a delete operation embedded in an img BBcode tag. Affected software is MKPortal (specifically the urlobox feature); underlyi...

CVE-2006-6665

Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name tag in a dbr file...

CVE-2006-6660

The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote attackers to cause a denial of service crash via malformed HTML tags, possibly involving a COL SPAN tag embedded in a RANGE tag...

Mandrake Linux Security Advisory : libtiff (MDKSA-2006:137)

Tavis Ormandy, Google Security Team, discovered several vulnerabilities the libtiff image processing library : Several buffer overflows have been discovered, including a stack buffer overflow via TIFFFetchShortPair in tifdirread.c, which is used to read two unsigned shorts from the input file...

Quicktime crossite scripting

XML file with .MOV extension allows to execute script in local zone with qtnext parameter of EMBED tag with embedded short movie...

CVE-2006-5577

Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of the corresponding TIF folder, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than...

CJ Tag Board User-Agent PHP注入漏洞

CJ Tag Board是一款基于PHP的论坛程序。 CJ Tag Board不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题一是tag.php脚本对"User-Agent" HTTP头数据缺少过滤，可导致任意PHP代码注入，并通过请求all.php脚本执行。 问题二是adminindex.php脚本对用户提交的"banned"参数缺少过滤，可导致任意PHP代码注入。 CJ Tag Board 3.0 http://www.scriptsearch.com/cgi-bin/jump.cgi?ID=10068...

MensajeitorTagBoard验证绕过漏洞

Mensajeitor Tag Board是一款基于WEB的论坛程序。Mensajeitor Tag Board的验证机制存在问题，远程攻击者可以利用这个漏洞绕过COOKIE验证，未授权进行访问。其使用的验证代码如下： for$i=0;$icount$NicksRegs;$i++ list$adminnick,$adminpass = explode":",$NicksRegs$i; if $nick == $adminnick $cadenafinal .= "span class="admin"".$nick."/span"; $AdminNick = "si"; if...

Microsoft Internet Explorer array index overflow

Index array overflow on large number of e.g. "OnClick" HTML tag event handlers...

2020datashed.txt

vendor site:http://www.2020applications.com/ product:20/20 datashed bug:injection sql risk:high injection sql get : /f-email.asp?strPeopleID=1&itemID='sql /listings.asp?peopleID='sql /listings.asp?sortorder='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

CVE-2006-5783

Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service crash via a long URL in an A tag. NOTE: this issue has been disputed by several vendors, who could not reproduce the report. In addition, the scope of the impact - system freeze - suggests an issue that is not...

PT-2006-6462 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Firefox version 1.5.0.7 Description: A potential issue allows remote attackers to cause a denial of service, resulting in a crash, via a long URL in an A tag. However, this issue has been disputed by several vendors who could not reproduce th...

Novell eDirectory 9.0 - DHost Remote Buffer Overflow

Novell eDirectory 9.0 - DHost Remote Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...

Microsoft Internet Explorer嵌套OBJECT标签内存破坏漏洞

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer处理某些嵌套OBJECT标签组合的方式存在漏洞，攻击者可能利用此漏洞导致浏览器拒绝服务。 通过以下方式生成的HTML： perl -e 'print "STYLE/STYLE\nOBJECT\nBork\n"x32' test.html 会在mshtml.dll中导致空指针引用和固定的偏移（eax+0x28），从已分配的但清零的内存区域读取指针。...

Microsoft Internet Explorer OBJECT标签内存破坏漏洞（MS06-021）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在处理某些异常情况时存在内存破坏漏洞。如果用户受骗访问了恶意的站点的话，IE就会允许对象注册可能无法正确处理某些情况的异常处理器，通过特别序列的嵌套“object” HTML标签触发内存破坏，导致执行任意代码。 这个漏洞是CVE-2006-1992漏洞的一个变种。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0 SP4 临时解决方法：...