CVE-2006-6009: Undefined Security Weakness

Unspecified vulnerability in the Java Runtime Environment JRE Swing library in JDK and JRE 5.0 Update 7 and earlier allows attackers to obtain certain information via unknown attack vectors, related to an untrusted applet accessing data in other applets...

Sun Java运行时环境信息泄露漏洞

Sun的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 Sun Java运行时环境Swing库中存在安全漏洞，可能允许不可信任的Applet访问其他Applet中的数据。 Sun J2SE = 5.0 Update 7 Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-102622）以及相应补丁: Sun-Alert-102622：A Security Vulnerability in the Java Runtime Environment Swing Library may Allow an Untrusted Applet to Access...

IBM DB2 JDBC Applet Server Detection

The remote host is running an IBM DB2 JDBC Applet Server. DB2 is a commercial database from IBM, and the JDBC Applet Server is used by Java apps and applets to communicate with a DB2 server using the type 3 a.k.a 'net' driver. Note that use of this driver has been deprecated since DB2 V8.1. C...

dragonflyCMS.txt

HeLiOsZ - Dark End Team - Internet Security Team Dragonfly CMS 9.0.6.1 and prior XSS IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.cpgnuke.com/ Exploit: - The vuln is in the search section,it don't validate t...

BlogHoster v2.2 Post Comment Html Injection

HeLiOsZ - Dark End Team - Internet Security Team BlogHoster v2.2 Post Comment Html Injection IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.blogsplosion.com Exploit: - To exploit this issue you must put your...

CivicSpace Version 0.8.5 HTML injection

HeLiOsZ - Dark End Team - Internet Security Team CivicSpace Version 0.8.5 HTML injection IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: www.civicspacelabs.org Exploit: - To exploit this issue you must only put your...

Archangel Weblog 0.90.02 and prior Multiple HTML injections

HeLiOsZ - Dark End Team - Internet Security Team Archangel Weblog 0.90.02 and prior Multiple HTML injections IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.archangelmgt.com/ Exploit: - To exploit this issue yo...

blur6ex 0.3 Comment title HTML inyection vuln.

HeLiOsZ - Dark End Team - Internet Security Team blur6ex 0.3 Comment title HTML inyection vuln. IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.blursoft.com Exploit: - To exploit this vuln you simply need an...

simplog 0.9.3 and prior XSS

HeLiOsZ - Dark End Team - Internet Security Team simplog 0.9.3 and prior XSS IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.simplog.org/ Exploit: - The vuln is in the search section,it don't validate the imput...

CVE-2005-2530

CVE-2005-2530 is an unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X that allows an untrusted applet to gain privileges via Mac OS X specific extensions. Affected component: Java for Mac OS X 1.3.1 (and possibly 1.4.2 per Nessus plugin reference). Impact: elevated privile...

CVE-2005-2530

Unspecified vulnerability in Java 1.3.1 before 1.3.116 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."...

CVE-2006-3545: Undefined Security Weakness

Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service application crash via a web page with multiple empty APPLET start tags. NOTE: a third party has disputed this issue, stating that the crash does not occur with Microsoft Internet Explorer 7.0 Beta3...

PT-2006-4420 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 7.0 Beta Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a web page containing multiple empty APPLET start tags. A third party has dispute...

Multiple OpenOffice security vulnerabilities

BASIC macro auto launch without user intercation, Java applet sandbox protection bypass, XML parsing buffer overflow...

Sun Java Applet - Font.createFont Remote Denial of Service

source: https://www.securityfocus.com/bid/17981/info Sun Java is prone to a remote denial-of-service vulnerability because the application fails to properly handle certain Java applets. Successfully exploiting this issue will cause the application to create a temporary file that will grow in an...

JDK java applet disk space DoS

It's possible to consume all available disk space with temporary file...

Sun Java Applet - Font.createFont Remote Denial of Service

Sun Java Applet - Font.createFont Remote Denial of Service source: https://www.securityfocus.com/bid/17981/info Sun Java is prone to a remote denial-of-service vulnerability because the application fails to properly handle certain Java applets. Successfully exploiting this issue will cause the...

GLSA-200602-07 : Sun JDK/JRE: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200602-07 Sun JDK/JRE: Applet privilege escalation Applets executed using JRE or JDK can use 'reflection' APIs functions to elevate its privileges beyond the sandbox restrictions. Adam Gowdiak discovered five vulnerabilities that...

Sun Java Reflection API security bypass vulnerabilities

Overview Multiple vulnerabilities in the Sun Java Reflection API may allow an untrusted Java applet to bypass security restrictions and execute arbitrary code. Description The Sun Java Reflection API allows Java classes to determine information about other Java classes, such as public methods...

GLSA-200601-10 : Sun and Blackdown Java: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200601-10 Sun and Blackdown Java: Applet privilege escalation Adam Gowdiak discovered multiple vulnerabilities in the Java Runtime Environment's Reflection APIs that may allow untrusted applets to elevate privileges. Impact : A...