669 matches found
CVE-2012-5837
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting XSS attacks via a crafted string...
Script entered into Developer Toolbar runs with chrome privileges — Mozilla
Security researcher Masato Kinugawa reported that when script is entered into the Developer Toolbar, it runs in a chrome privileged context. This allows for arbitrary code execution or cross-site scripting XSS if a user can be convinced to paste malicious code into the Developer Toolbar...
AOL dnUpdater ActiveX dnu.exe Init() Method Remote Code Execution
The remote host has an install of the AOL dnUpdater ActiveX control dnu.exe prior to version 1.1.25.1. As such, it reportedly does not properly verify the function pointer passed by the 'pData' argument of the control's 'Init' method. A remote attacker could exploit this vulnerability by tricking...
CVE-2012-2647
Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, and intercept search terms, via a crafted web page...
Code injection
Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, and intercept search terms, via a crafted web page...
CVE-2012-2647
Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, and intercept search terms, via a crafted web page...
CVE-2012-2647
CVE-2012-2647 affects Yahoo! Toolbar for Chrome and Safari up to version 1.0.0.5. The vulnerability allows remote attackers to modify the toolbar’s configured search URL and intercept search terms via a specially crafted web page. Root cause: improper handling of the search URL/input leads to lea...
Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration
Overview Yahoo! Toolbar for Chrome, Safari contains a vulnerability where the toolbar may be altered. Yahoo! Toolbar for Chrome, Safari contains a vulnerability where the toolbar may be altered when visiting a specially crafted web page. Keita Haga of keitahaga.com reported this vulnerability to...
JVN#51769987: Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration
Yahoo! Toolbar for Chrome, Safari contains a vulnerability where the toolbar may be altered when visiting a specially crafted web page. Impact A remote attacker may alter the toolbar. As a result, keywords entered in the toolbar may be leaked to a third party. Solution Update the software Update ...
[CAL-2012-0023]Microsoft IE Developer Toolbar Remote Code Execution Vulnerability
CAL-2012-0023Microsoft IE Developer Toolbar Remote Code Execution Vulnerability CVE ID: CVE-2012-1874 http://technet.microsoft.com/en-us/security/bulletin/ms12-037 http://blog.vulnhunt.com/index.php/2012/06/13/cal-2012-0023microsoft-ie-developer-toolbar-remote-code-execution-vulnerability/ 1...
Microsoft Internet Explorer 8 / 9 Toolbar Code Execution(CVE-2012-1874)
No description provided by source. CAL-2012-0023Microsoft IE Developer Toolbar Remote Code Execution Vulnerability CVE ID: CVE-2012-1874 http://technet.microsoft.com/en-us/security/bulletin/ms12-037...
Browser Find toolbar phishing attack
Added: 02/25/2012 Background This tool serves a page claiming to be a list of stolen passwords. When a user sees this list, the most common response is to validate the claim by opening a Find box Ctrl-F and searching for his or her own password. The tool intercepts the Ctrl-F keypress and opens a...
Browser Find toolbar phishing attack
Added: 02/25/2012 Background This tool serves a page claiming to be a list of stolen passwords. When a user sees this list, the most common response is to validate the claim by opening a Find box Ctrl-F and searching for his or her own password. The tool intercepts the Ctrl-F keypress and opens a...
Browser Find toolbar phishing attack
Added: 02/25/2012 Background This tool serves a page claiming to be a list of stolen passwords. When a user sees this list, the most common response is to validate the claim by opening a Find box Ctrl-F and searching for his or her own password. The tool intercepts the Ctrl-F keypress and opens a...
Browser Find toolbar phishing attack
Added: 02/25/2012 Background This tool serves a page claiming to be a list of stolen passwords. When a user sees this list, the most common response is to validate the claim by opening a Find box Ctrl-F and searching for his or her own password. The tool intercepts the Ctrl-F keypress and opens a...
Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow (CVE-2007-5107)
A remote code execution vulnerability has been reported in Ask.com toolbar. The vulnerability is due to a boundary error in an ActiveX control. A remote attacker could exploit this issue by sending an overly long string to a certain method in askbar.dll. Successful exploitation could allow...
Yahoo! Toolbar YShortcut.dll ActiveX控件远程溢出漏洞
BUGTRAQ ID: 26956 Yahoo! Messenger是一种即时聊天工具。 Yahoo! Messenger的YShortcut.dll控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Yahoo! Messenger的YShortcut功能（YShortcut.dll，...
Yahoo! Toolbar yt.ythelper.2 ActiveX控件栈溢出漏洞
BUGTRAQ ID: 26656 CVECAN ID: CVE-2007-6228 Yahoo! Toolbar是一个IE插件，能够通过嵌入IE的工具栏帮助快速使用Yahoo搜索引擎、收发Yahoo电子邮件等操作。 Yahoo! Toolbar的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Yahoo! Toolbar所安装的yt.ythelper.2 ActiveX控件没有正确地验证对c方式所传送的参数，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可能触发栈溢出，导致浏览器崩溃或执行任意指令。 Yahoo! Toolbar 1.4....
Signaling network of independently developed web site source code 0day vulnerabilities-vulnerability warning-the black bar safety net
Author: script kiddies This website source code Super cow. Anti-implantation to upload very difficult to break. Background system/login. asp is also Into the ewebeditor is also anti-password A lot of big cattle are very difficult to engage the under This source code after a social worker was...