CVE-2008-6005

Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute arbitrary code via "duplicated" attribute value inputs...

CVE-2009-0323

CVE-2009-0323 pertains to multiple stack-based buffer overflows in the W3C Amaya Web Browser (11.0.x and earlier, including 10.0.1). Technical details in CORE-2008-1211 describe unchecked buffers (e.g., MaxMsgLength) used by EndOfXmlAttributeValue() and ProcessStartGI(), with specific overflow ri...

CVE-2009-0323

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via 1 a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; 2 an "HTML GI" in a start tag, which is not properly...

CVE-2008-6005

CVE-2008-6005 affects the W3C Amaya Web Browser (notably versions 10.0.1 and possibly 11.0.1). The vulnerability is in the CheckUniqueName function, where multiple buffer overflows could allow remote attackers to execute arbitrary code via crafted inputs in the duplicated attribute value. The Ope...

Apple Safari JavaScript Engine Cross Domain Information Disclosure Vulnerability

Apple Safari web browser is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Internet Explorer Information Disclosure Vulnerability

This host is installed with Internet Explorer and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodmsieinfodisvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Information Disclosure Vulnerability Authors: Sharath S Copyright:...

Apple Safari RSS Feed Information Disclosure Vulnerability

The host is running Apple Safari web browser which is prone to remote file access vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariinfodiscvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari RSS Feed Information Disclosure Vulnerability Authors: Nikita MR Copyright: Copyright c...

Apple Safari RSS Feed Information Disclosure Vulnerability

Apple Safari web browser is prone to remote file access vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

NetSurf Web Browser 1.2 Multiple Remote Vulnerabilities

No description provided by source. -------------------------------------------------------------------------------------------------------------------------------------------- Jeremy Brown 01-14-2009 [email protected]/jbrownsec.blogspot.com netsurfmultipleadv.txt...

Netsurf multiple adv

-------------------------------------------------------------------------------------------------------------------------------------------- Jeremy Brown 01-14-2009 [email protected]/jbrownsec.blogspot.com netsurfmultipleadv.txt...

NetSurf Web Browser 1.2 Multiple Remote Vulnerabilities

Exploit for unknown platform in category dos / poc ======================================================= NetSurf Web Browser 1.2 Multiple Remote Vulnerabilities =======================================================...

netsurf Web browser 1.2 - Multiple Vulnerabilities

-------------------------------------------------------------------------------------------------------------------------------------------- Jeremy Brown 01-14-2009 [email protected]/jbrownsec.blogspot.com netsurfmultipleadv.txt...

Apple Safari WebKit Property Memory Leak Remote DoS Vulnerability

The host is installed with Apple Safari web browser and is prone to denial of service. OpenVAS Vulnerability Test $Id: gbapplesafarimemleakdosvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari WebKit Property Memory Leak Remote DoS Vulnerability Authors: Chandan S Copyright: Copyright c 20...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...

Microsoft IE screen[""]远程拒绝服务漏洞

BUGTRAQ ID: 33149 CVECAN ID: CVE-2009-0072 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 如果用户通过Internet Explorer打开网页的BODY单元中设置了onload=screen""属性值的话，就会导致浏览器崩溃。 Microsoft Internet Explorer 8 beta 2 Microsoft Internet Explorer 8 beta 1 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 厂商补...

JVN#10170564 MODx cross-site scripting vulnerability

MODx, an open source contents management system, contains multiple cross-site scripting vulnerabilities. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the developer. Products Affected MODx 0.9.6.2 and earlier...

Microsoft Internet Explorer 'screen[""]'远程拒绝服务漏洞

BUGTRAQ ID: 33149 CNCAN ID：CNCAN-2009010805 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在NULL指针引用问题，远程攻击者可以利用漏洞使应用程序崩溃。 如下的HTML代码可导致NULL PTR引用而使浏览器崩溃： BODY onload=screen"" Microsoft Internet Explorer 8 beta 2 Microsoft Internet Explorer 8 Beta 1 Microsoft Internet Explore...

Links SSL证书验证漏洞

BUGTRAQ ID: 33108 Links是一款图形和文本模式的web浏览器。 Links浏览器没有验证所接收到的证书，即使用户访问的网页证书已过期、未经可信任的CA签名、或证书的主机名错误，也不会出现任何警告信息。这有助于攻击者扮演为可信任的网站，执行中间人攻击。 0 Twibright Labs Links 2.2 厂商补丁： Twibright Labs -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href=http://links.twibright.com/ target=blank...

JVN#36802959 MyNETS cross-site scripting vulnerability

MyNETS from Usagi Project is an open source SNS Social Networking Service software. MyNETS contains a cross-site scripting vulnerability. Impact If a user views a specially crafted web page, an arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the...

Safari (Arguments) Array Integer Overflow PoC (New Heap Spray)

Exploit for multiple platform in category dos / poc ============================================================== Safari Arguments Array Integer Overflow PoC New Heap Spray ==============================================================...