140 matches found
Microsoft Internet Explorer - Unsafe Scripting Misconfiguration (Metasploit)
$Id: ieunsafescripting.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Internet Explorer local file reading and detection vulnerability-vulnerability warning-the black bar safety net
Microsoft IE in the handling of local file access when there are some problems, combined with the Microsoft windows characteristics may be able to read the local of certain special files that may have other use. As the browser is inevitable to deal with cross-domain resource access issues, then t...
Consona (formerly SupportSoft) Intelligent Assistance Suite (IAS) cross-site scripting, ActiveX, and Repair Service vulnerabilities
Overview Consona formerly SupportSoft Intelligent Assistance Suite IAS contains a set of vulnerabilities that collectively could allow an attacker to execute arbitrary code on a remote system. Description In 2009, Consona acquired SupportSoft's enterprise software assets, including web-based...
Google Chrome < 4.0.249.78 Multiple Vulnerabilities
Binary data 5328.pasl...
Internet Explorer Unsafe Scripting Misconfiguration
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Internet Explorer...
AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==-- Discovere...
AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ========================================================== AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability ==========================================================...
AS-GasTracker 1.0.0 - Insecure Cookie Handling
AS-GasTracker 1.0.0 - Insecure Cookie Handling --==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==...
AS-GasTracker 1.0.0 - Insecure Cookie Handling
--==+================================================================================+==-- --==+ AS-GasTracker 1.0.0 Insecure Cookie Handling Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 14 MA...
Security: some HVM domain can access another domain memory.
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for movtorr, which allows a VTi domain to read memory of other domains...
Microsoft Internet Explorer and Mozilla Firefox multiple security vulnerabilities
Internet Explorer race conditions allow cross domain access. Mozilla Firefox IFRAME cross domain access. Mozilla file download dialogs delay protection bypass. MSIE address bar spoofing...
IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net
This vulnerability is primarily an information leak, see http://secunia. com/advisories/1 9 7 3 8/specific description. In order to ensure client safety, the xmlhttp is not cross-domain access to information. But the IE security problems, in the service end through the mhtml redirection...
CVE-2006-6985
Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...
IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net
Article submission: ph4yunshu wustyunshuathotmail.com IE mhtml redirection vulnerability using the method Author: yunshuAtph4nt0m.org Team: http://www.ph4nt0m.org Data: 2006-05-11 This vulnerability is primarily an information leak, seethe specific description. In order to ensure client safety, t...
Adobe SVG Viewer Cross Domain and Zone Access (GM#004-MC)
GreyMagic Security Advisory GM004-MC ===================================== By GreyMagic Software, Israel. 07 Oct 2003. Available in HTML format at http://security.greymagic.com/adv/gm004-mc/. Topic: Adobe SVG Viewer Cross Domain and Zone Access. Discovery date: 07 Sep 2003. Affected applications:...
CVE-2002-1254
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."...
Microsoft Internet Explorer 56 - Unauthorized Document Object Model Access
Microsoft Internet Explorer 56 - Unauthorized Document Object Model Access source: https://www.securityfocus.com/bid/5963/info Microsoft Internet Explorer MSIE is prone to a vulnerability that may enable a frame or iframe to gain unauthorized access to the Document Object Model DOM of other...
Security Bulletin MS02-009
---------------------------------------------------------------------- Title: Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files Date: 21 February 2002 Software: Internet Explorer Impact: Information Disclosure Max Risk: Critical Bulletin: MS02-009 Microsoft encourages...
Opera 5.0/5.1 - Same Origin Policy Circumvention
source: https://www.securityfocus.com/bid/3553/info Opera is a popular, freely available web browser that is supported across many different platforms. Opera is prone to an issue which may allow for the execution of script code across domains, allowing for circumvention of the web browser's...
CVE-2001-0332
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain using MSScriptControl.ScriptControl and...