CVE-2007-5158

The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to...

GLSA-200708-01 : Macromedia Flash Player: Remote arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200708-01 Macromedia Flash Player: Remote arbitrary code execution Mark Hills discovered some errors when interacting with a browser for keystrokes handling CVE-2007-2022. Stefano Di Paola and Giorgio Fedon from Minded Security...

CVE-2007-3511

The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated ...

Design/Logic Flaw

The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated ...

kdebase3 flash-player interaction problem

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information browser keystrokes, which are leaked to the Flash Player applet...

CVE-2007-0724

The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console...

CVE-2006-6953

The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...

X Display Manager Control Protocol (XDMCP) Detection

The XDMCP service is running on the remote host. SPDX-FileCopyrightText: 2005 Pasi Eronen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple Browsers - Tabbed Browsing

Multiple Browsers - Tabbed Browsing Test Your Browser Open the link below in a new tab, then try to type data into form fields on the CitiBank website. Open this Link in New Tab Result: Keystrokes you pressed on the CitiBank website. /textarea // milw0rm.com 2004-10-22...

Multiple (Almost all) Browsers Tabbed Browsing Vulnerabilities

No description provided by source. bTest Your Browser/bbr br Open the link below in a new tab, then try to type data into form fields on the CitiBank website.br br a href="http://www.citibank.com/" onMouseOver="setInterval'document.myform.userinput.focus;', 10;"Open this Link in New Tab/abr br fo...