ImageShack Toolbar 4.8.3.75 - Remote Code Execution Exploit

No description provided by source. !-- Title: ImageShack Toolbar 4.8.3.75 Remote Code Execution Exploit Date: Nov 23, 2010 Author: Rew Email: rew splat leethax.info Link: http://toolbar.imageshack.us/ImageShackToolbar.exe Version: 4.8.3.75 Tested on: WinXP - IE 6 & 7 CVE: NA 0day Note: This objec...

Netcraft Toolbar 1.8.1 - Remote Code Execution Exploit

No description provided by source. !-- Title: Netcraft Toolbar 1.8.1 Remote Code Execution Exploit Date: Nov 23, 2010 Author: Rew Email: rew splat leethax.info Link: http://toolbar.netcraft.com/install/Netcraft%20Toolbar.msi Version: 1.8.1 Tested on: WinXP - IE 6 CVE: NA 0day This object is NOT...

NetSprint Ask IE Toolbar 1.1 - Multiple Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23535/info NetSprint Ask IE Toolbar ActiveX control is prone to multiple denial-of-service vulnerabilities. Exploiting these issues allows remote attackers to crash applications that employ the vulnerable controls typical...

Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow

No description provided by source. $Id: askshortformat.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Google Toolbar 1.1.60 Search Function Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5477/info Reportedly, when the Google Toolbar receives a search query it may cause Microsoft Internet Explorer to crash. When a user views a malicious web page it will cause the Google Toolbar to throw an exception in...

Google Toolbar 1.1.x About.HTML HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11210/info Google Toolbar is reported prone to a HTML injection vulnerability. It is reported that the Google Toolbar 'ABOUT.HTML' page allows the injection of HTML and JavaScript code. This vulnerability may allow an...

Webmoney Advisor ActiveX Remote DoS Exploit

No description provided by source. html Pwnage Page object classid='clsid:3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840' id='target' /object script language='vbscript' targetFile = C:\Program Files\WebMoney Advisor\wmadvisor.dll prototype = Sub Redirect ByVal url As String memberName = Redirect progid =...

Yahoo Toolbar Vulnerability Triggers Non-Exploitable XSS Payload on All Websites

Yahoo offers a web browser toolbar which includes apps for leading sites like Facebook, Yahoo! Mail, Weather and News. Yahoo Toolbar also known as Y! Toolbar is available for Internet Explorer, Firefox and Google Chrome web browsers. Yahoo Toolbar is one of the most popular and widely installed w...

Researchers Get $10,000 for Hacking Google Server with Malicious XML

A critical vulnerability has been uncovered in Google that could allow an attacker to access the internal files of Google’s production servers. Sounds ridiculous but has been proven by the security researchers from Detectify. The vulnerability resides in the Toolbar Button Gallery as shown. The...

Yahoo Toolbar ActiveX Control Stack Buffer Overflow - Ver2 (CVE-2007-6228)

A buffer overflow vulnerability has been reported in Yahoo Toolbar. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

CVE-2013-6853

Cross-site scripting XSS vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim...

Cross site scripting

Cross-site scripting XSS vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim...

CVE-2013-6853

Cross-site scripting XSS vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim...

CVE-2013-6853

The CVE-2013-6853 entry describes a Cross-Site Scripting (XSS) vulnerability in the clickstream.js component of the Y! Toolbar Firefox plugin. Affected products are Y! Toolbar for Firefox on Mac (version 3.1.0.20130813024103) and Windows (version 2.5.9.2013418100420). The flaw allows remote attac...

MS13-075: Vulnerability in Microsoft Office IME (Chinese) Could Allow Elevation of Privilege (2878687)

The version of Microsoft Office Input Method Editor Chinese installed on the remote host has a privilege escalation vulnerability. A local attacker could exploit this by utilizing the MSPY IME toolbar in an unspecified manner, resulting in arbitrary code execution in kernel mode. C Tenable Networ...

Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities

Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities Title: ====== Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities Date: ===== 2013-04-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=934 VL-ID: ===== 934 Common Vulnerability Scoring System:...

[Wireshark v1.9.2] World’s Foremost Network Protocol Analyzer

Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto and often de jure standard across many industries and educational institutions. Wireshark development thrives thanks to the...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : firefox regressions (USN-1638-3)

USN-1638-1 fixed vulnerabilities in Firefox. The new packages introduced regressions in cookies handling and the User Agent string. This update fixes the problem. Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloske...

Mozilla Firefox Multiple Vulnerabilities - November12 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvulnnov12win.nasl 5977 2017-04-19 09:02:22Z teissa $ Mozilla Firefox Multiple Vulnerabilities - November12 Windows Authors: Rachana Shetty Copyright: Copyright...

Mozilla Firefox Multiple Vulnerabilities (Nov 2012) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...