7462 matches found
JVN#10170564 MODx cross-site scripting vulnerability
MODx, an open source contents management system, contains multiple cross-site scripting vulnerabilities. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the developer. Products Affected MODx 0.9.6.2 and earlier...
Microsoft Internet Explorer 'screen[""]'远程拒绝服务漏洞
BUGTRAQ ID: 33149 CNCAN ID：CNCAN-2009010805 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在NULL指针引用问题，远程攻击者可以利用漏洞使应用程序崩溃。 如下的HTML代码可导致NULL PTR引用而使浏览器崩溃： BODY onload=screen"" Microsoft Internet Explorer 8 beta 2 Microsoft Internet Explorer 8 Beta 1 Microsoft Internet Explore...
Links SSL证书验证漏洞
BUGTRAQ ID: 33108 Links是一款图形和文本模式的web浏览器。 Links浏览器没有验证所接收到的证书，即使用户访问的网页证书已过期、未经可信任的CA签名、或证书的主机名错误，也不会出现任何警告信息。这有助于攻击者扮演为可信任的网站，执行中间人攻击。 0 Twibright Labs Links 2.2 厂商补丁： Twibright Labs -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href=http://links.twibright.com/ target=blank...
JVN#36802959 MyNETS cross-site scripting vulnerability
MyNETS from Usagi Project is an open source SNS Social Networking Service software. MyNETS contains a cross-site scripting vulnerability. Impact If a user views a specially crafted web page, an arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the...
Safari (Arguments) Array Integer Overflow PoC (New Heap Spray)
Exploit for multiple platform in category dos / poc ============================================================== Safari Arguments Array Integer Overflow PoC New Heap Spray ==============================================================...
Amaya Web Browser 11.0.1 Buffer Overflow Exploit
!/usr/bin/perl Amaya Web Browser = 11.0.1 Remote Buffer Overflow Exploit Found/Exploit by SkD [email protected] [email protected] ----------------------------------------------- This is advanced buffer overflow exploitation using my new method called shellhunting : Get more information about this...
Amaya Web Browser <= 11.0.1 Remote Buffer Overflow Exploit (vista)
No description provided by source. !/usr/bin/perl Amaya Web Browser = 11.0.1 Remote Buffer Overflow Exploit Found/Exploit by SkD [email protected] [email protected] ----------------------------------------------- This is advanced buffer overflow exploitation using my new method called shellhuntin...
Amaya Web Browser <= 11.0.1 Remote Buffer Overflow Exploit (vista)
Exploit for unknown platform in category remote exploits ================================================================== Amaya Web Browser = 11.0.1 Remote Buffer Overflow Exploit vista ================================================================== !/usr/bin/perl Amaya Web Browser = 11.0.1...
Amaya Web Browser 11.0.1 (Windows Vista) - Remote Buffer Overflow
Amaya Web Browser 11.0.1 Windows Vista - Remote Buffer Overflow !/usr/bin/perl Amaya Web Browser = 11.0.1 Remote Buffer Overflow Exploit Found/Exploit by SkD [email protected] [email protected] ----------------------------------------------- This is advanced buffer overflow exploitation using my...
Amaya Web Browser 11.0.1 (Windows Vista) - Remote Buffer Overflow
!/usr/bin/perl Amaya Web Browser = 11.0.1 Remote Buffer Overflow Exploit Found/Exploit by SkD [email protected] [email protected] ----------------------------------------------- This is advanced buffer overflow exploitation using my new method called shellhunting : Get more information about this...
Trend Micro HouseCall ActiveX control does not adequately validate update server parameters
Overview The Trend Micro HouseCall ActiveX control contains a vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Trend Micro HouseCall ActiveX control HousecallActiveX.dll includes an update feature. A web page hosting...
JVN#17298485 Mayaa cross-site scripting vulnerability
Mayaa from Seasar Project is an open source Java template engine. The default error page that Mayaa displays contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Apply the latest update provided by the...
FreeBSD -- Cross-site request forgery in ftpd(8)
Problem Description: The ftpd8 server splits long commands into several requests. This may result in the server executing a command which is hidden inside another very long command. Impact: This could, with a specifically crafted command, be used in a cross-site request forgery attack. FreeBSD...
seamonkey security update
CentOS Errata and Security Advisory CESA-2008:1037-01 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...
firefox, nspr, nss, seamonkey, xulrunner security update
CentOS Errata and Security Advisory CESA-2008:1036 An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open...
[SECURITY] Fedora 8 Update: epiphany-extensions-2.20.1-12.fc8
Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...
[SECURITY] Fedora 8 Update: galeon-2.0.4-7.fc8.3
Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...
[SECURITY] Fedora 8 Update: epiphany-2.20.3-9.fc8
epiphany is a simple GNOME web browser based on the Mozilla rendering engine...
[SECURITY] Fedora 8 Update: kazehakase-0.5.6-1.fc8.2
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine...