813 matches found
Microsoft Internet Explorer嵌入图象URI欺骗漏洞
Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer在处理部分URI连接时存在问题，远程攻击者可以利用这个漏洞隐藏URI连接中的真实内容，诱骗用户访问恶意站点。 图象包含在正确格式的HREF标记中时，可隐藏URI连接中的真实内容，这个漏洞可诱骗用户访问一个非法连接而不被怀疑。 攻击者可以通过提供恶意图象使的显示的URI连接指向合法信任的站点，如果没有任何怀疑的用户把鼠标移到相关的链接，可能导致他们认为链接的是信任正确的站点而被欺骗。 Microsoft Internet Explorer 6.0SP1...
GNU Mailman跨站脚本及拒绝服务漏洞
GNU Mailman是一款开放源码的邮件列表管理系统。 Mailman中存在多个安全漏洞，具体如下： 1 日志功能中的错误允许攻击者通过特制的URL向错误日志中注入欺骗性的日志消息。这可能诱骗管理员访问恶意的Web站点。 2 Mailman在处理畸形MIME首部时没有遵循RFC 2231标准，可能导致拒绝服务。 3 Mailman没有正确过滤某些用户输入，允许在用户浏览器会话中执行任意HTML和脚本代码。 受影响系统： GNU Mailman 2.1.9 不受影响系统： GNU Mailman 2.1.9rc1 GNU Mailman 2.1.9 厂商补丁： GNU ---...
How to let someone in? Trojan commonly used trick Daguan-vulnerability warning-the black bar safety net
How to let others in the Trojan horse? It is the users who ask the most questions, sketchy answers there are some, but always very little, so the small fish decided to collect everyone's wisdom and Next a little experience to write a feature article. Hope that you get to the floor, perfect this...
Examples to explain: a network of deception methods, and offensive and defensive!- Vulnerability warning-the black bar safety net
Lure the enemy in depth is a very practical tactics, ancient and modern, many military, politicians, entrepreneurs all of the tactics talked about, in the network attack and Defense is no exception, the system administrator will also use such tactics. Since each network system has a security...
How to let someone in Trojan－Trojan a commonly used trick Daguan-vulnerability warning-the black bar safety net
How to let others in the Trojan horse? It is the users who ask the most questions, sketchy answers there are some, but always very little, so the small fish decided to collect everyone's wisdom and Next a little experience to write a feature article. Hope that you get to the floor, perfect this...
Hack rampage the era of the URL address will lie-vulnerability warning-the black bar safety net
My name is URL, i.e.,“Uniform Resource Locators”, which means Uniform Resource Locator. In the address bar URL will belong to me the URL of an expression. Substantially all of the visit website the friends are used to me, so my role is very large. Perhaps many friends don't know that I'm very...
The latest hacking techniques: the XSS cross-site scripting attack detailed description-vulnerability warning-the black bar safety net
General description A simple description of what isXSSattack How to findXSSvulnerability ForXSSattack the General idea From internal attacks: How to find the internalXSSvulnerability How to construct attack How to use The junction of any instances of attacks, such as DVBBS&BBSXP From external...
Hack rampage the era of the URL address will lie-vulnerability warning-the black bar safety net
My name is URL, i.e.,“Uniform Resource Locators”, which means Uniform Resource Locator. In the address bar URL will belong to me the URL of an expression. Substantially all of the visit website the friends are used to me, so my role is very large. Perhaps many friends don't know that I'm very...
CVE-2002-2091
CVE-2002-2091 affects Deception Finger Daemon (decfingerd) 0.7, exposing a format-string vulnerability in the username field of a finger request that could allow remote code execution. The issue is documented across multiple sources (e.g., NVD, Red Hat advisory, CVE list) with the impact describe...
CVE-2002-2091
Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request...
CVE-2002-2091: Undefined Security Weakness
Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request...
security flaw
Firefox before 1.0.1 allows remote attackers to spoof the 1 security and 2 download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."...
CVE-2005-0591
Firefox before 1.0.1 allows remote attackers to spoof the 1 security and 2 download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."...
Phishing attack possible with a delayed JavaScript prompt
A malicious page can be crafted to send the userto his banking site, and shortly afterwardsdisplay a dialog enticing the user to type inhis bank login credentials.The dialog will appear in front of the bankingpage, while the window it really belongs to willbe hidden. If the timing and context is...
Microsoft Internet Explorer 6 - IFRAME Status Bar URI Obfuscation
Microsoft Internet Explorer 6 - IFRAME Status Bar URI Obfuscation source: https://www.securityfocus.com/bid/11590/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. This issue may be leveraged by an attacker to display false information in the status bar of an...
CVE-2001-0643
Internet Explorer 5.5 does not display the Class ID CLSID when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type...
MS04-024: Buffer overrun in Windows Shell (839645)
The remote host is running a version of Windows that has a flaw in its shell. An attacker could persuade a user on the remote host to execute a rogue program by using a CLSID instead of a file type, thus fooling the user into thinking that he will not execute an application but simply open a...
Netscape Navigator 7.1 - Embedded Image URI Obfuscation
source: https://www.securityfocus.com/bid/10389/info It is reported that Netscape Navigator is prone to a URI obfuscation weakness that may hide the true contents of a URI link. The issue occurs when an image is contained within a properly formatted HREF tag. This weakness could be employed to...
KDE Konqueror 3.x - Embedded Image URI Obfuscation
KDE Konqueror 3.x - Embedded Image URI Obfuscation source: https://www.securityfocus.com/bid/10383/info It is reported that KDE Konqueror is prone to a URI obfuscation weakness that may hide the true contents of a URI link. The issue occurs when an image is contained within a properly formatted...
Microsoft Outlook Express 6.0 - URI Obfuscation
source: https://www.securityfocus.com/bid/10345/info Microsoft Outlook Express has been reported prone to a URI obfuscation vulnerability. This issue is reported to affect version 6.0 of the affected software, other versions might also be affected. An attacker could reportedly get a user to visit...