CVE-2006-0773: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the extended receiving box function...

CVE-2006-0772: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to execute arbitrary SQL commands via unspecified vectors in the extended receiving box function...

The Windows in the DLL Files the basic principle and modified method-vulnerability warning-the black bar safety net

A DLL file is common sense DLL is a Dynamic Link Library acronym meaning Dynamic Link Library. In Windows, many applications are not a complete executable file, which is divided into a number of relatively independent Dynamic Link Library that DLL file, placed in the system. When we execute a...

win32/xp sp2 Pop up message box 110 bytes

win32/xp sp2 Pop up message box 110 bytes. Shellcode exploit for win32 platform / Author : Omega7 Assembly Code : Steve Hanna Changed by : Omega7 Description : It is 110 Byte Shellcode which Pops up Message Box Under Windows Xp SP2 If you Want to use it in any other Windows You need to change the...

Amaxus vuln.

Amaxus vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/amaxus-vuln.html vendor:http://www.boxuk.com/ affected version: 3 and prior About Amaxus Amaxus is Box UK's XML Content Management System, currently delivering hundreds of thousands of...

CVE-2005-2829

Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by 1 overlaying a malicious new window above a file download box, then 2 using a keyboard shortcut and delaying the display of the file download box until the user hits a...

CVE-2005-2829: Undefined Security Weakness

Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by 1 overlaying a malicious new window above a file download box, then 2 using a keyboard shortcut and delaying the display of the file download box until the user hits a...

Zone Labs Zone Alarm 6.0 - Advance Program Control Bypass

Zone Labs Zone Alarm 6.0 - Advance Program Control Bypass source: https://www.securityfocus.com/bid/15347/info Zone Labs Zone Alarm is prone to a weakness that permits the bypassing of the Advanced Program Control protection. Reports indicate that applications can create a modal dialog box...

Maxthon Web Browser < 1.3.3 Cross-Domain Dialog Box Spoofing

Binary data 3240.prm...

CVE-2005-2579

Nortel Contivity VPN Client V0501.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box...

CVE-2005-2579: Undefined Security Weakness

Nortel Contivity VPN Client V0501.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box...

CVE-2005-2405

Opera 8.01 is affected when Arial Unicode MS (ARIALUNI.TTF) is installed: extended ASCII in the file-download dialog can be spoofed, potentially leading users to execute arbitrary code. The issue is documented in CVE-2005-2405; OpenVAS notes vulnerability in Opera

CVE-2005-2405: Improper Input Validation

Opera 8.01, when the "Arial Unicode MS" font ARIALUNI.TTF is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code...

CVE-2005-2274

Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."...

CVE-2005-2268

Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."...

CVE-2005-2272

CVE-2005-2272 affects Safari 2.0 (412). The vulnerability stems from the dialog origin not being clearly associated with the generating web page, enabling remote attackers to spoof a dialog box from a trusted site and facilitate phishing. The available connected records confirm the issue and its ...

CVE-2005-2271

CVE-2005-2271 affects iCab 2.9.8: a vulnerability where the browser does not clearly associate a Javascript dialog box with the page that generated it, enabling remote attackers to spoof a dialog box from a trusted site and facilitate phishing (Dialog Origin Spoofing). The underlying issue is the...

CVE-2005-2274

The connected sources confirm CVE-2005-2274 affects Microsoft Internet Explorer 6.0 and describes a dialog-origin spoofing vulnerability where a JavaScript dialog box may not be clearly tied to the page that generated it, enabling an attacker to impersonate a trusted site and facilitate phishing....

CVE-2005-2273

Opera 7.x and 8 before 8.01 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."...

CVE-2005-2268

CVE-2005-2268 affects Firefox up to 1.0.4 and Mozilla up to 1.7.8 (before 1.0.5/1.7.9) where Javascript dialogs were not clearly tied to the originating web page, enabling spoofing of dialog boxes from trusted sites and facilitating phishing attacks. The issue arises from the dialog origin not be...