662 matches found
Safari Improperly Parses HTML Documents & BlogSpot XSS vulnerability
Overview: Safari on occasions may improperly parse the source of an HTML document, which can lead to the execution of html tags within comments. This can become dangerous when input filters allow html tags within comments, as they will get parsed and executed under certain circumstances. Details:...
Implemented browser control-bug warning-the black bar safety net
A review Usually, intruders through Telnet login is out of the back door of the intruder system, using text commands to interact to achieve the purpose; remote with a Trojan a peek at the screen. This is generally the C/S mode Client/Server, client/server. C/S mode requires that the intruder must...
Kmail-1.9.1.txt
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SilentHack.co.uk Vulnerability Research =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Background: Kmail is a HTML compatible email client that comes installed by default with the KDE desktop. This DOS requires...
[Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SilentHack.co.uk Vulnerability Research =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Background: Kmail is a HTML compatible email client that comes installed by default with the KDE desktop. This DOS requires...
KMail DoS
Crash on HTML parsing...
Kmail 1.9.1 - IMG SRC Remote Denial of Service
Kmail 1.9.1 - IMG SRC Remote Denial of Service nnp at silenthack.co.uk http://silenthack.co.uk Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into your local...
Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
No description provided by source. nnp at silenthack.co.uk http://silenthack.co.uk Kmail = 1.9.1 latest suffers from a crash when trying to parse an incorrectly formatted img tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick...
Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
Exploit for multiple platform in category dos / poc =============================================================== Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into you...
Kmail 1.9.1 - IMG SRC Remote Denial of Service
nnp at silenthack.co.uk http://silenthack.co.uk Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into your local /var/spool/mail/whoami or send a mail containing the HTML pa...
CVE-2006-1193
Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access OWA, allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."...
Cross site scripting
Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access OWA, allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."...
CVE-2006-1193
CVE-2006-1193 describes a script-injection (XSS) vulnerability in Microsoft Exchange Server running Outlook Web Access (OWA) across Exchange 2000 SP1–SP3. The issue arises from improper sanitization of e-mail content read via OWA, allowing a remote attacker to inject and execute HTML/script in th...
CVE-2006-1193
Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access OWA, allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."...
Multiple Microsoft Internet Explorer security vulnerabilities
Jump to ininitialized function pointer by referencing unspupported object's method createTextRange for checkbox. Potentially can be used for code execution and hidden malware installation. Memory corruption on uninitialized event handlers. HTA code execution. HTML parsing memory corrution. COM...
Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service (2)
Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service 2 source: https://www.securityfocus.com/bid/18112/info Microsoft Internet Explorer is affected by a denial-of-service vulnerability. This issue arises because the application fails to handle exceptional conditions in a prope...
Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service (2)
source: https://www.securityfocus.com/bid/18112/info Microsoft Internet Explorer is affected by a denial-of-service vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner. An attacker may exploit this issue by enticing a user to visit a...
Multiple MacOS X security vulnerabilities
Buffer overflow in BOMArchiveHelper on ZIP archive extraction, multiple security bugs in Safari on HTML and different image formats parsing...
Mozilla Firefox 1.0.x1.5 - HTML Parsing Null Pointer Dereference Denial of Service
Mozilla Firefox 1.0.x1.5 - HTML Parsing Null Pointer Dereference Denial of Service source: https://www.securityfocus.com/bid/17499/info Mozilla Firefox is prone to a denial-of-service condition when parsing certain malformed HTML content. Successful exploitation will cause the browser to fail or...
Mozilla Firefox 1.0.x/1.5 - HTML Parsing Null Pointer Dereference Denial of Service
source: https://www.securityfocus.com/bid/17499/info Mozilla Firefox is prone to a denial-of-service condition when parsing certain malformed HTML content. Successful exploitation will cause the browser to fail or hang. Mozilla Firefox versions 1.5.0.1 and prior are prone to this issue...