8107 matches found
security flaw
FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolli...
Mitel 3300 ICP IP PBX VOIP device Web session hijack
Predictable session id allos to hijack Web administration session...
CVE-2004-0866
CVE-2004-0866 involves Internet Explorer 6.0. The vulnerability allows websites to set cookies for country‑specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a remote attacker to perform a session fixation attack and hijack a user’s HTTP session. The provided documen...
D-BUS message bus system session hijack
Malicious local user can connect to another user's session bus...
CVE-2005-0079
CVE-2005-0079 affects xtrlock 2.0, where a buffer overflow allows local users to cause a denial of service (application crash) and potentially hijack the desktop session. The vulnerability is confirmed across multiple feeds (NVD, OSV, Debian DSA, OpenVAS, Nessus) and is described as a local, low-...
CVE-2005-0079
Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service application crash and hijack the desktop session...
CVE-2004-1224
Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...
CVE-2004-1224
The CVE-2004-1224 entry concerns an off-by-one in the mtr_curses_keyaction function affecting MTR versions 0.55–0.65. This flaw can allow local attackers to hijack raw sockets via the 's' keybinding, leaving a buffer without a NULL terminator. Affected products are multiple CVE trackers (NVD, OSV...
security flaw
The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions...
CVE-2004-0746
CVE-2004-0746 affects Konqueror in KDE 3.2.3 and earlier. The issue allows a remote attacker to cause a web site to set cookies for country-specific top‑level domains (for example .ltd.uk, .plc.uk, .firm.in), enabling a session fixation attack and potential HTTP session hijacking. Connected docum...
XV 3.x BMP Parsing Local Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ======================================== Qt BMP Parsing Bug Heap Overflow Exploit ======================================== / heap overflow exploit for qt bmp parsing bug infamous42md AT hotpop DOT com shouts to mitakeet, MB, and peeps...
bblog 0.7.2 cross site scripting
Introduction: Bblog, a blogging system scripted in PHP does not perform sufficient filtering when submitting a blog name. The severity of this flaw however, is low as the required privileges to access the administration panel for bblog is superuser. The problem: The flaw lies in...
Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration
Title: Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration. Software: News Manager Lite 2.5 & News Manager Lite administration. Vendor: http://www.expinion.net/software/appnewsmanager.asp Impact: Disclosure of authentication information, Disclosure of user information,...
newsmanlite25.txt
Title: Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration. Software: News Manager Lite 2.5 & News Manager Lite administration. Vendor: http://www.expinion.net/software/appnewsmanager.asp Impact: Disclosure of authentication information, Disclosure of user information,...
ASP Portal Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Asp Portal Multiple Vulnerabilities By: Manuel Lpez Software: Asp Portal Vendor Description: ASP Portal is a an ASP powered portal site which uses an Access database to store all the site info. The script also includes and easy to use Admin...
ASPportal.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Asp Portal Multiple Vulnerabilities By: Manuel López Software: Asp Portal Vendor Description: ASP Portal is a an ASP powered portal site which uses an Access database to store all the site info. The script also includes and easy to use Admin...
CVE-2003-0823
Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027...
Apache 2.0.4x mod_perl - File Descriptor Leakage (3)
source: https://www.securityfocus.com/bid/9471/info A vulnerability has been reported to exist in the Apache modperl module that may allow local attackers to gain access to privileged file descriptors. This issue could be exploited by an attacker to hijack a vulnerable server daemon. Other attack...
CVE-2003-0823
Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027...
