Mozilla Firefox 2.0.0.16 Buffer Overflow

!/usr/bin/python FireFox 2.0.0.16 Windows XP SP3 x86 Remote Exploit Author: Dominic Chell Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016. As of September 2009 there are no public exploits for this vulnerability. However, according to securityfocus an exploit is available...

Cross site scripting

Cross-site scripting XSS vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding...

CVE-2009-2814

Cross-site scripting XSS vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding...

CVE-2009-2814

CVE-2009-2814 affects Apple Mac OS X 10.5.x Wiki Server: a cross-site scripting vulnerability occurs when the search request contains non-UTF-8 data, allowing remote attackers to inject script/HTML in Wiki Server. Exploitation details are not provided beyond the XSS description in the sources, bu...

CVE-2009-2814

Cross-site scripting XSS vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding...

Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow

!/usr/bin/python FireFox 2.0.0.16 Windows XP SP3 x86 Remote Exploit Author: Dominic Chell Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016. As of September 2009 there are no public exploits for this vulnerability. However, according to securityfocus an exploit is available...

Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow

Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow !/usr/bin/python FireFox 2.0.0.16 Windows XP SP3 x86 Remote Exploit Author: Dominic Chell Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016. As of September 2009 there are no public exploits for this vulnerability...

Mozilla Firefox 2.0.0.16 UTF-8 URL Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================= Mozilla Firefox 2.0.0.16 UTF-8 URL Remote Buffer Overflow Exploit ================================================================= !/usr/bin/python FireFox 2.0.0.16 Windows ...

openSUSE Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-237)

This update brings mozilla-xulrunner181 to security fix version 1.8.1.17. It contains the following security fixes: MFSA 2008-45 / CVE-2008-4069: XBM image uninitialized memory reading MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters...

Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit

No description provided by source. / CVE-2009-1046 Virtual Console UTF-8 setselection off-by-onetwo Memory Corruption Linux Kernel = 2.6.28.3 coded by: sgrakkyu at antifork.org http://kernelbof.blogspot.com/2009/07/even-when-one-byte-matters.html Dedicated to all people talking nonsense about non...

Linux Kernel 2.6.24_16-232.6.27_7-102.6.28.3 (Ubuntu 8.048.10 Fedora Core 10 x86-64) - set_selection() UTF-8 Off-by-One Privilege Escalation

Linux Kernel 2.6.2416-232.6.277-102.6.28.3 Ubuntu 8.048.10 Fedora Core 10 x86-64 - setselection UTF-8 Off-by-One Privilege Escalation / CVE-2009-1046 Virtual Console UTF-8 setselection off-by-onetwo Memory Corruption Linux Kernel antifork.org...

Linux Kernel 2.6.24_16-23/2.6.27_7-10/2.6.28.3 (Ubuntu 8.04/8.10 / Fedora Core 10 x86-64) - 'set_selection()' UTF-8 Off-by-One Privilege Escalation

/ CVE-2009-1046 Virtual Console UTF-8 setselection off-by-onetwo Memory Corruption Linux Kernel antifork.org http://kernelbof.blogspot.com/2009/07/even-when-one-byte-matters.html Dedicated to all people talking nonsense about non exploitability of kernel heap off-by-one overflow NOTE-1: you need ...

Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit

Exploit for linux platform in category local exploits ======================================================================= Linux Kernel include include include include include include sys/sock...

CVE-2009-1844

Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow 1 remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow 1 remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the...

Cross site scripting

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the Content-Type META element, to...

Fedora Core 10 FEDORA-2009-5002 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-5002. OpenVAS Vulnerability Test $Id: fcore20095002.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5002 drupal Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 9 FEDORA-2009-4997 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-4997. OpenVAS Vulnerability Test $Id: fcore20094997.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4997 drupal Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

drupal -- cross-site scripting

The Drupal Security Team reports: When outputting user-supplied data Drupal strips potentially dangerous HTML attributes and tags or escapes characters which have a special meaning in HTML. This output filtering secures the site against cross site scripting attacks via user input. Certain byte...

PHP 5.3.2 - xml_utf8_decode() UTF-8 Input Validation

PHP 5.3.2 - xmlutf8decode UTF-8 Input Validation source: https://www.securityfocus.com/bid/44605/info PHP is prone to a vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow attackers to provide unexpected input and possibly bypass...