187 matches found
CVE-2008-2139
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the...
Windows Vista: Non-privileged code can redirect shortcuts to intercept privilege elevation requests
Tested on x86 and x64 editions of Windows Vista Ultimate, though this exploit should function correctly on all x86 and x64 editions of Windows Vista. This exploit requires an attack vector such as a Trojan horse. However, in light of the enormous success of such types of attacks in the past, and...
ebayla.txt
http://www.because-we-can.com/ebayla/ THE EBAYLA BUG AND HOW TO PROTECT YOURSELF This page describes a security problem that Blue Adept discovered with eBay's on-line auctions on March 31, 1999 realaudio interview. The security hole allows eBay users to easily steal the passwords of other eBay...
hotmail-javascript-8-98.txt
Date: Mon, 24 Aug 1998 14:21:56 -0600 From: Tom Cervenka Subject: Serious Security Hole in Hotmail We have just found a serious security hole in Microsoft's Hotmail service http://www.hotmail.com which allows malicious users to easily steal the passwords of Hotmail users. The exploit involves...
Security update 1970-01-01
...