WordPress Plugin Download Manager 0.2 - Arbitrary File Upload

WordPress Plugin Download Manager 0.2 - Arbitrary File Upload WORDPRESS PLUGIN DOWNLOAD MANAGER 0.2 REMOTE FILE UPLOAD SaO BiyoSecurityTeam || www.biyosecurity.com Plugin URI: http://giulioganci.netsons.org/downloads-manager Local File milw0rm.com 2008-07-24...

Design/Logic Flaw

rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...

Mozilla Foundation Security Advisory 2008-35

Mozilla Foundation Security Advisory 2008-35 Title: Command-line URLs launch multiple tabs when Firefox not running Impact: Critical Announced: July 15, 2008 Reporter: Billy Rios, Ben Turner, Dan Veditz Products: Firefox Fixed in: Firefox 3.0.1 Firefox 2.0.0.16 Description Security researcher Bil...

CreaCMS - edition_articleedition_article.php?cfg[document_uri] Remote File Inclusion

CreaCMS - editionarticleeditionarticle.php?cfgdocumenturi Remote File Inclusion source: https://www.securityfocus.com/bid/30284/info CreaCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an...

Ubuntu 6.06 LTS / 7.04 / 7.10 : firefox vulnerabilities (USN-623-1)

A flaw was discovered in the browser engine. A variable could be made to overflow causing the browser to crash. If a user were tricked into opening a malicious web page, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the...

USN-623-1: Firefox vulnerabilities

A flaw was discovered in the browser engine. A variable could be made to overflow causing the browser to crash. If a user were tricked into opening a malicious web page, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the...

CVE-2008-2933

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' pipe characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely...

Design/Logic Flaw

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' pipe characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely...

CVE-2008-2933

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' pipe characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely...

CVE-2008-2933

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' pipe characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely...

CVE-2008-2933

CVE-2008-2933 describes a pipe character in a URL that can trigger Chrome privilege escalation in Iceape/Iceweasel Firefox-family products. Connected advisories confirm active fixes: Iceweasel/iceape upgrades to 2.0.0.16 (etch) and later 3.0.1–1 (sid) or equivalent patched builds; Iceweasel 2.0.0...

BitComet URI处理拒绝服务漏洞

BUGTRAQ ID: 30255 CNCAN ID：CNCAN-2008071703 BitComet是一款免费的BitTorrentBT下载管理软件。 BitComet处理超长URL存在缓冲区溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建包含超长URL的恶意文件，诱使用户使用bitcomet作为批处理下载，可导致应用程序崩溃。 BitComet 1.02 目前没有解决方案提供： http://www.bitcomet.com/ !/usr/bin/python BitComet 1.02 HTTP/FTP Batch Download url DOS This...

Mozilla Firefox URI拆分绕过安全限制漏洞

BUGTRAQ ID: 30242 CVECAN ID: CVE-2008-2933 Firefox是流行的开源WEB浏览器。 Firefox可以处理来自用户或程序可访问的命令行接口的URI，如果使用管道符号（“|”）通过命令行接口向Firefox传送了多个URI的话，就会在启动Firefox时在标签页中打开了URI。攻击者可以利用这个漏洞向Firefox传送应由其他应用所处理的URI。由于Firefox可能认为发送的URI来自于本地内容来源，因此远程内容可以绕过基于来源的安全限制。 Mozilla Firefox 3.x Mozilla Firefox 2.0.x Mozilla...

MediaMonkey URI处理拒绝服务漏洞

BUGTRAQ ID: 30251 CNCAN ID：CNCAN-2008071701 MediaMonkey是一款功能强大的多媒体资料收藏管理软件。 MediaMonkey处理超长URI存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建包含恶意URL的文件，诱使MediaMonkey解析，可触发此漏洞。 Ventis Media MediaMonkey 3.0.3 目前没有解决方案提供： http://www.mediamonkey.com/...

Firefox 3.x < 3.0.1 Multiple Vulnerabilities

The installed version of Firefox is affected by various security issues : - By creating a very large number of references to a common CSS object, an attacker can overflow the CSS reference counter, causing a crash when the browser attempts to free the CSS object while still in use and allowing fo...

CVE-2008-3193

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...

Sql injection

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...

Mozilla Firefox command line URI handling vulnerability

Overview Mozilla Firefox contains a vulnerability that may allow an attacker to bypass security restrictions by opening specially crafted URIs using the Firefox command line interface. Description Mozilla Firefox can process URIs from its command line interface that can be accessed by users or...

MediaMonkey 3.0.3 - URI Handling Multiple Denial of Service Vulnerabilities

MediaMonkey 3.0.3 - URI Handling Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/30251/info MediaMonkey is prone to two denial-of-service vulnerabilities because it fails to handle user-supplied input. An attacker can exploit these issues to crash the...

MediaMonkey 3.0.3 - URI Handling Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/30251/info MediaMonkey is prone to two denial-of-service vulnerabilities because it fails to handle user-supplied input. An attacker can exploit these issues to crash the application. Given the nature of these vulnerabilities, the attacker may also be abl...