Opera Web Browser 9.62 - History Search Input Validation

source: https://www.securityfocus.com/bid/32015/info Opera Web Browser is prone to an input-validation vulnerability because of the way it stores data used for the History Search feature. Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing th...

Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting

Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting source: https://www.securityfocus.com/bid/31991/info Opera Web Browser is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Opera Web Browser Multiple XSS Vulnerability (Linux)

The host is installed with Opera Web Browser and is prone to multiple Cross Site Scripting XSS Vulnerability. OpenVAS Vulnerability Test $Id: gboperamultvulnoct08lin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Opera Web Browser Multiple XSS Vulnerability Linux Authors: Chandan S Copyright: Copyrigh...

Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting

source: https://www.securityfocus.com/bid/31991/info Opera Web Browser is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...

RHEL 2.1 / 3 / 4 / 5 : lynx (RHSA-2008:0965)

An updated lynx package that corrects two security issues is now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execution flaw was...

Opera Web Browser HTML注入和跨站脚本漏洞

BUGTRAQ ID: 31842 CNCAN ID：CNCAN-2008102207 Opera Web Browser是一款开放源代码的WEB浏览器。 Opera Web Browser存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息。 -如果链接使用JavaScript URL触发Opera快速转发功能，当用户激活快速转发，脚本将运行在当前页面上，当页面处于帧中，脚本将不正确的最外面页面上执行，而不是URL定位的页面上，这可导致脚本以不相关内容上下文执行。 -当Opera预览新FEED时，部分脚本没有正确阻止，这些脚本能够订阅用户到任意攻击者选择的FEED...

DSquare Exploit Pack: D2SEC_OPERAXSS

Name| d2secoperaxss ---|--- CVE| CVE-2008-4696 Exploit Pack| D2ExploitPack Description| Opera Web Browser History Search Input Validation Vulnerability Notes|...

Opera Web浏览器HTML注入及跨站脚本漏洞

BUGTRAQ ID: 31842 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.61之前版本中的多个安全漏洞可能允许恶意用户执行脚本注入攻击、绕过某些安全限制或泄露敏感信息。 1 History Search功能没有正确地过滤某些输入，用户在查看恶意数据时可能在用户的浏览器会话中注入任意HTML和脚本代码，导致泄露之前所访问的页面。 2 实现Fast Forward功能中的错误可能允许通过特制的JavaScript URL在受限制的帧中执行任意脚本代码。 3 在预览新闻源期间时阻断脚本存在错误，可能导致泄露所订阅新闻源的内容，或将用户订阅到任意的新闻源。 Oper...

JVN#03300113 Blosxom vulnerable to cross-site scripting

Blosxom is an open source weblog system. Blosxom contains a cross-site scripting vulnerability. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest udpate provided by the developer. Products Affected Blosxom 2.1.1 and earlier...

Nokia Web浏览器数组排序拒绝服务漏洞

BUGTRAQ ID: 31703 Nokia Web浏览器之前被称为Nokia Mini Map浏览器，是为S60手机平台所开发的web浏览器。 Nokia Web浏览器基于S60WebKit，而S60WebKit的JavaScript核心对递归数组调用了sort函数。如果用户受骗访问了恶意的HTML页面的话，就会导致浏览器崩溃。 Nokia Web Browser for S60 Nokia ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.nokia.com foo = new Array;...

Microsoft Internet Explorer HTML Objects Uninitialized Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer...

Microsoft Office CDO Protocol Cross Site Scripting Vulnerability

Description Microsoft Office is prone to a cross-site scripting vulnerability that arises because the software fails to handle specially crafted CDO protocol URIs in a proper manner. Successfully exploiting this issue may allow an attacker to execute arbitrary script code in the browser of an...

iSEC Partners Security Advisory - 2008-002-lenovornr - Lenovo Rescue and Recovery 4.20

iSEC Partners Security Advisory - 2008-002-lenovornr https://www.isecpartners.com -------------------------------------------- Lenovo Rescue and Recovery Local Kernel Overflow Vendor: Lenovo Vendor URL: http://www.lenovo.com Versions affected: 4.20 Systems Affected: Windows XP, Windows Vista...

Nokia Web Browser for S60 - Infinite Array Sort Denial of Service

source: https://www.securityfocus.com/bid/31703/info Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files. A successful exploit of this issue allows remote attackers to consume excessive system resources in the affected browser, which will cau...

Nokia Web Browser for S60 - Infinite Array Sort Denial of Service

Nokia Web Browser for S60 - Infinite Array Sort Denial of Service source: https://www.securityfocus.com/bid/31703/info Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files. A successful exploit of this issue allows remote attackers to consume...

Opera Web Browser URI重定向远程代码执行漏洞

BUGTRAQ ID: 31631 CNCAN ID：CNCAN-2008100914 Opera是一款开放源代码的WEB浏览器。 Opera存在设计问题，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 如果恶意页面重定向Opera到一个特殊构建的URL地址，可导致Opera崩溃，给定足够的地址内容，可能导致任意代码执行。 Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.50 Opera Software Opera Web Browser 8.0.2 Opera Software...

Opera Web Browser 8.51 - URI redirection Remote Code Execution

source: https://www.securityfocus.com/bid/31631/info Opera Web Browser is prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application or cause a denial-of-service condition. NOTE:...

Opera Web Browser 8.51 - URI redirection Remote Code Execution

Opera Web Browser 8.51 - URI redirection Remote Code Execution source: https://www.securityfocus.com/bid/31631/info Opera Web Browser is prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the...

DoS vulnerability in Internet Explorer

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Denial of Service уязвимости в браузере Microsoft Internet Explorer. DoS: Эксплоит: http://websecurity.com.ua/uploads/2008/IE20DoS20Exploit5.html При запуске эксплоита открывается большое количество окон, что усложняет и замедляет работу компьютер...

JVN#92651529 Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting

Nucleus is an open source content management system provided by The Nucleus Group. Nucleus EUC-JP Japanese Edition contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the specific web browser. Solution Update the Software Apply the latest update provided b...