Microsoft Internet Explorer Deleted Object Access Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

[SECURITY] Fedora 8 Update: lynx-2.8.6-12.fc8

Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays webpages...

[SECURITY] Fedora 10 Update: lynx-2.8.6-18.fc10

Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays webpages...

JVN#02216739 Movable Type Enterprise cross-site scripting vulnerability

Movable Type Enterprise, a web log system from Six Apart KK for business users, contains a cross-site scripting vulnerability. This vulnerability is different from JVN30385652 and JVN81490697. Impact An arbitrary script may be executed on an user's web browser. Solution Update the Software Update...

DSA-1675-1 phpmyadmin - cross site scripting

Bulletin has no description...

CVE-2008-5282

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via 1 a link with a long HREF attribute, and 2 a DIV tag with a long id attribute...

CVE-2008-5282

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via 1 a link with a long HREF attribute, and 2 a DIV tag with a long id attribute...

CVE-2008-5282

CVE-2008-5282 concerns the W3C Amaya Web Browser (notably version 10.0.1) and describes multiple stack-based buffer overflow vulnerabilities. The flaws allow remote attackers to execute arbitrary code by supplying a link with an excessively long HREF attribute and by using a DIV tag with a very l...

CVE-2008-5282

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via 1 a link with a long HREF attribute, and 2 a DIV tag with a long id attribute...

W3C Amaya 10.1 Web Browser (id) Remote Stack Overflow PoC

No description provided by source. W3C Amaya 10.1 Web Browser Amaya id Remote Stack Overflow Vulnerability Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/41/ ------------------------------------------------------ Shellcode...

Amaya (id) Remote Stack Overflow Vulnerability

W3C Amaya 10.1 Web Browser Amaya id Remote Stack Overflow Vulnerability Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/41/ ------------------------------------------------------ Shellcode notes: The application fails to...

w3camayaurl-overflow.txt

W3C Amaya 10.1 Web Browser Amaya URL Bar Remote Stack Overflow Vulnerability Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/40/ ------------------------------------------------------ Shellcode notes: The application fails to...

[SECURITY] Fedora 10 Update: drupal-cck-6.x.2.0-3.fc10

The Content Construction Kit allows you create and customize fields using a web browser. The 4.7x version of CCK creates custom content types and allows you to add custom fields to them. In Drupal 5.x custom content types can be created in core, and CCK allows you to add custom fields to any...

DSquare Exploit Pack: D2SEC_OPERAHEAP

Name| d2secoperaheap ---|--- CVE| CVE-2008-5178 Exploit Pack| D2ExploitPack Description| Opera Web Browser file:// Heap Overflow Notes|...

Opera Web浏览器file://处理器堆溢出漏洞

BUGTRAQ ID: 32323 Opera是一款流行的WEB浏览器，支持多种平台。 Opera Web浏览器的file://处理器没有正确地验证用户提供输入参数，如果用户受骗打开了恶意的HTML文档并向处理器传送了大约16,500个字符的话，就可以触发堆溢出，导致执行任意指令。请注意无法从Internet调用file://处理器，因此访问恶意网页不会触发这个溢出。 Opera Software Opera 9.62 Opera Software -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Novell iPrint Client nipplib.dll ActiveX Control Buffer Overflow (CVE-2008-2436)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A buffer overflow vulnerability has been reported in Novell iPrint Client. The vulnerability is due to a boundary error in the Novell iPrint Client nipplib.dll ActiveX contro...

Immunity Canvas: SAFARI_FILE_STEALING

Name| safarifilestealing ---|--- CVE| CVE-2008-4216 Exploit Pack| CANVAS Description| Safari 3.2 File Stealing Notes| A Warning: Due to the nature of this exploit, a file error.html will be left behind on the target system CVE Name: CVE-2008-4216 VENDOR: Apple NOTES: There are a lot of things...

Apple Safari 3.2版本修复多个安全漏洞

BUGTRAQ ID: 32291 CVECAN ID: CVE-2008-4216,CVE-2008-3644,CVE-2008-3623 Safari是苹果家族机器操作系统中默认捆绑的WEB浏览器。 WebKit的插件接口没有阻止插件启动本地URL，访问恶意站点可能允许远程攻击者在Safari中启动本地文件，导致泄露敏感信息。 禁止自动填充表单字段可能无法防范在浏览器页面缓存中存储字段中的数据，这可能导致向本地用户泄露敏感信息。 CoreGraphics处理颜色空间时存在堆溢出，查看恶意的图形可能导致浏览器意外终止或执行任意代码。 Apple Safari 3.2 Apple ---...

Fedora 8 : Miro-1.2.7-2.fc8 / blam-1.8.3-19.fc8 / cairo-dock-1.6.3.1-1.fc8.1 / chmsee-1.0.0-5.31.fc8 / etc (2008-9667)

Updated firefox and xulrunner packages that fix various security issues are now available for Fedora Core 8. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the processin...

devhelp, firefox, nss, xulrunner, yelp security update

CentOS Errata and Security Advisory CESA-2008:0978 An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open...