Design/Logic Flaw

corefoundation.dll in Apple Safari 3.0.1 552.12.2 for Windows allows remote attackers to cause a denial of service crash via certain forms that trigger errors related to History, possibly involving multiple form fields with the same name...

CVE-2007-3284

corefoundation.dll in Apple Safari 3.0.1 552.12.2 for Windows allows remote attackers to cause a denial of service crash via certain forms that trigger errors related to History, possibly involving multiple form fields with the same name...

CVE-2007-3087

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

Information disclosure

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

CVE-2007-3087

Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...

Unfixed XSS vulnerability at www.wisconsinhistory.org

Security researcher Hotpockets, has submitted on 29/05/2007 a cross-site-scripting XSS vulnerability affecting www.wisconsinhistory.org, which at the time of submission ranked 191658 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/05/2007. I...

Unfixed XSS vulnerability at dbs.ohiohistory.org

Security researcher MaXWeL, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting dbs.ohiohistory.org, which at the time of submission ranked 322641 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/03/2007. It is...

[Full-disclosure] Stealing Browser History Without Using JavaScript

In case anyone is interested, I was able to port the old CSS history hacking stuff that Jeremiah Grossman originally found to a version that does not require JavaScript to fire using images and conditional logic built into CSS using a:visited and display attributes. It works in both IE7.0 and...

CVE-2007-1116

The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history...

Input validation

The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history...

CVE-2007-1116

The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history...

Firefox Cache Hack - Firefox History Hack redux

http://www.gnucitizen.org/projects/hscan-redux/ Inspired by Michal Zalewski recent Firefox bug hunt, I decided to give it a go and see what I can come up with. We all know how vulnerable Firefox and other browsers are. This is the reason why I am not particularly interested in finding specific...

CVE-2006-6574

Mantis before 1.1.0a2 does not implement per-item access control for Issue History Bug History, which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field...

SQL SERVER security risks--triggers-vulnerability warning-the black bar safety net

| This article is dedicated to the cross I of the development program teacher-XI'an ZHAOLONG of the week the teacher, and learning together AT2Q6101 of classmates. Trigger permissions and ownership CREATE TRIGGER permissions default to the definition of the trigger table owner, members of the...

Cisco Secure Desktop SSL VPN会话多个信息泄露漏洞

Cisco Secure Desktop CSD可以通过加密降低远程用户注销或SSL VPN会话超时后cookies、浏览器历史记录、临时文件和下载内容在系统上所遗留的风险。 CSD的实现上存在如下一些问题，可能导致在SSL VPN会话相关的敏感信息泄露。 1. Windows页面文件信息泄露 由于Windows虚拟内存子系统运行的方式，任何应用程序所使用的虚拟物理内存，包括在Secure...

SiteSchool2.4.02.txt

Title: Site@School 2.4.02 and below Multiple remote Command Execution Vulnerabilities Vendor: Site@School webiste : http://siteatschool.sourceforge.net/ Version : Exploit writting by: Simo Ben youssef Discovered: 05 Aout 2006 Published : 15 September 2006 MorX Security Research Team...

Site@School <= 2.4.02 Advisory / Remote File Upload Exploit

No description provided by source. Title: Site@School 2.4.02 and below Multiple remote Command Execution Vulnerabilities Vendor: Site@School webiste : http://siteatschool.sourceforge.net/ Version : = 2.4.02 Severity: Critical Discovered by: Simo64 simo64atmorxorg Exploit writting by: Simo Ben...

CVE-2006-4798

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history...

CVE-2006-4798

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history...

[Full-disclosure] Latinchat Denial Of Service

Denial Of Service on Chat Magma Latinchat http://www.latinchat.com Researcher: Vicente Perez 1.-Overview Latinchat is one of the most known chat server, and used basically by latin american people. 2.-Description This system has a vulnerabily as DoS, taking system offline by a while. The fail...