EUVD-2012-1240

Malware in sbrugna...

EUVD-2009-4071

Malware in sbrugna...

EUVD-2012-1241

Malware in sbrugna...

CVE-2012-1214

Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

CVE-2012-1215

Cross-site scripting XSS vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

Cross site scripting

Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

Cross site scripting

Cross-site scripting XSS vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

CVE-2012-1214

The CVE-2012-1214 vulnerability affects Yoono Desktop Application (before 1.8.21) in the Add friends module. It is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the create field in a “Create a group” action. Documented impact is arbitrar...

CVE-2012-1215

The CVE-2012-1215 entry describes a Cross-site scripting (XSS) vulnerability in the Add friends module of the Yoono Firefox extension, exploited via the create field in a "Create a group" action. The affected product is the Yoono extension for Firefox, with versions prior to 7.7.8. The underlying...

CVE-2012-1215

Cross-site scripting XSS vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

CVE-2012-1214

Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

CVE-2012-1214: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

PT-2012-3137

Name of the Vulnerable Software and Affected Versions Yoono Desktop Application versions prior to 1.8.21 Description A cross-site scripting XSS issue exists in the Add friends module, allowing remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" actio...

CVE-2012-1215: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

PT-2012-3138

Name of the Vulnerable Software and Affected Versions Yoono extension versions prior to 7.7.8 Description A cross-site scripting XSS issue exists in the Add friends module of the Yoono extension, allowing remote attackers to inject arbitrary web script or HTML via the create field in a "Create a...

Yoono Firefox 7.7.0 Cross Site Scripting

TITLE: Yoono firefox addon Persistent XSS vendor: Yoono Version: 7.7.0 Impact: Persistent XSS Software Link: https://addons.mozilla.org/en-US/firefox/addon/yoono-twitter-facebook-linkedi/ Author: r007k17-w Email: [email protected] Twitter: http://twitter.com/!/r007k17w My blog:...

Yoono Desktop 1.8.16 Cross Site Scripting

TITLE: Yoono Desktop Application Persistent XSS vendor: Yoono Version: 1.8.16 Impact: Persistent XSS Software Link: available in yoono site Author: r007k17-w Email: [email protected] Twitter: http://twitter.com/!/r007k17w My blog: http://shadowrootkit.wordpress.com/...

Mozilla Firefox Yoono extension code execution

It's possible to inject code via img tag events...

Yoono Firefox Extension - Privileged Code Injection

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Yoono Firefox Extension Code Injection Vulnerability Versions affected: 6.1.1 +-----------+ |Description| +-----------+ The Yoono Firefox extension provides an interface for users t...

Firefox Yoono扩展DOM事件处理器跨域脚本执行漏洞

BUGTRAQ ID: 37123 CVECAN ID: CVE-2009-4100 Yoono是一个简单易用的Firefox侧栏，允许用户方便的连接到Facebook、MySpace等社会网络和AIM等即时聊天工具。 Yoono在处理onLoad标签等DOM事件处理器时没有正确地过滤用户输入，用户受骗加载了恶意的RSS源就可能导致向用户浏览器中注入恶意脚本，并以chrome:权限执行。 Mozilla Yoono 6.1.1 厂商补丁： Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...