DEBIAN-CVE-2010-2713

The vtesequencehandlerwindowmanipulation function in vteseq.c in libvte aka libvte9 in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a 1 wind...

Adobe to Share Vulnerability Data with Security Vendors

LAS VEGAS — Adobe’s push to beef up its security posture took another leap forward here with the announcement of plans to start sharing details on software vulnerabilities with security vendors ahead of time to help reduce the window of exposure to hacker attacks. In partnership with Microsoft,...

Mozilla Cross-origin data leakage from script filename in error messages

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows...

Mozilla Cross-origin data leakage from script filename in error messages

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows...

Firefox: Spoofing attacks via vectors involving 'No Content' status code or via a windows.stop call

The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a document that is...

Mozilla Cross-origin data leakage from script filename in error messages

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows...

VTE control characters vulnerability

Control characters are not checked when setting window or icon title, making it possible to insert terminal ESC-sequences...

FireStats window-add-excluded-ip.php 'edit' parameter XSS

The version of FireStats installed on the remote host fails to properly sanitize user-supplied input to the 'edit' parameter of the 'window-add-excluded-ip.php' script. An unauthenticated, remote attacker can leverage this issue to execute arbitrary script code in a user's browser. Note that this...

Fedora Update for gv FEDORA-2010-10642

Check for the Version of gv OpenVAS Vulnerability Test Fedora Update for gv FEDORA-2010-10642 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

[SECURITY] Fedora 13 Update: gv-3.7.1-1.fc13

GNU gv is a user interface for the Ghostscript PostScriptTM interpreter. Gv can display PostScript and PDF documents on an X Window System...

[SECURITY] Fedora 12 Update: gv-3.7.1-1.fc12

GNU gv is a user interface for the Ghostscript PostScriptTM interpreter. Gv can display PostScript and PDF documents on an X Window System...

Saving Files from Firefox

You will then see an Options window that has a Category row at the top and the features for that category below. The first category of interest is the General category. Select the option Always ask me where to save files. This will make it more obvious when a web page attempts to save a file to...

2daybiz B2B Portal Script (selling_buy_leads1.php) SQL Injection Vulnerability

No description provided by source. Exploit Title: 2daybiz B2B Portal Script Sql Injection Date: 25/06/2010 Author: r45c4l Email: r45c4lathotmaildotcom Site : www.garage4hackers.com Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE :...

JC - Top 25 Movie Trailers module XSS Vulnerability

Exploit for php platform in category web applications =================================================== JC - Top 25 Movie Trailers module XSS Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

File Sharing Wizard 1.5.0 - Remote Overflow (SEH)

File Sharing Wizard 1.5.0 - Remote Overflow SEH !/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print...

CVE-2010-1750

Use-after-free vulnerability in Apple Safari before 5.0 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to improper window management...

Design/Logic Flaw

Use-after-free vulnerability in Apple Safari before 5.0 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to improper window management...

CVE-2010-1750

CVE-2010-1750 describes a use-after-free vulnerability in Apple Safari on Windows , specifically before version 5.0, caused by faulty window management. The issue allows remote attackers to cause a crash or execute arbitrary code. The provided connected sources corroborate a Windows Safari vector...

CVE-2010-1750

Use-after-free vulnerability in Apple Safari before 5.0 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to improper window management...

Windows Win32k.sys驱动创建窗口权限提升漏洞（MS10-032）

BUGTRAQ ID: 40569 CVE ID: CVE-2010-0485 Windows是微软发布的非常流行的操作系统。 Windows的Win32k.sys内核驱动在创建新的窗口时没有充分地验证所有的回调参数，本地用户可以通过运行特制的应用程序导致执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows...