132 matches found
HTML Creator & Sender 2.3 build 697 - Local Buffer Overflow (SEH)
!/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for From and To, Send Email. import stru...
HTML Email Creator 2.1b668 - html Local Overwrite (SEH)
/ :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun HTML Email Creator or or 520 | | NOPs jmp 11 pop-pop-ret NOPs shellcode NOPs 56 4 4 40 343 73 Greetz: suN8Hclf, str0ke...
google-chrome-dos4.txt
Metascortexsecurity img...
Unfixed XSS vulnerability at www.sektorum.org
Security researcher PotentialQuilty, has submitted on 18/07/2008 a cross-site-scripting XSS vulnerability affecting www.sektorum.org, which at the time of submission ranked 2499992 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/07/2008. It ...
CSRF through HTML message in squirrelmail
Cross-site request forgery CSRF vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element...
Google Reader cross-site request forgery vulnerability
Overview Google Reader is vulnerable to a persistent cross-site request forgery attack that may be exploited by a specially crafted RSS feed. Description Google Reader is an online RSS feed reader. It can display text and images when displaying RSS feeds.Google Reader contains a cross-site reques...
security flaw
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting XSS protection by changing the src attribute of an IMG element to a javascript: URI...
security flaw
Cross-site scripting XSS vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into 1 performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or 2 selecting "Show on...
Toasts Forums 1.6.44 in Xss
ENGLISH Title : Toast Forums 1.6.44 in Xss Author : ajann Exploit; XSS Example Forum Post Message,Reply.. IMG onmouseover=Javascript:alertdocument.domain src="x.gif" Alert: xxx.com / ajann,Turkey TURKISH Baslk : Toast Forums 1.6.44 in Xss Ac Bulan : ajann Ack bulunan dosyalar; Foruma post...
PYSEC-2005-1
Cross-site scripting XSS vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...
CommuniGate Pro Webmail 4.0.6 - Session Hijacking
CommuniGate Pro Webmail 4.0.6 - Session Hijacking !/usr/bin/perl Below is exploit code. Place it into cgi-bin, then recommended make symlink from DocumentRoot/AnyImage.gif to shj.pl, configure at least $url variable, and possible other vars and send victim HTML message with img src to your...
