2411 matches found
Yahoo Messenger information leak
Web mail authentication response reply with session identifier is saved in browser cache...
Yahoo! Messenger Auth Bypass Vulnerability
This advisory is being provided to you under the policy documented at http://www.wiretrip.net/rfp/policy.html. You are encouraged to read this policy; however, in the interim, you have approximately 5 days to respond to this initial email. This policy encourages open communication, and I look...
phppos-rfi.txt
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= PHP Point Of Sale for osCommerce = index.php Remote File Include Vuln Script: PHP Point Of Sale for osCommerce Version: 1.1 URL: http://puzzle.dl.sourceforge.net/sourceforge/phppointofsale/PHPPointOfSaleosCommerce1.1.zip Discover: BorN To...
rot13-lfi.txt
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Rot 13 = enkrypt.php Remote File Disclosure Vulnerability Script: Rot 13 Download: http://www.holtstraeter.com/cybercheffe/scriptsharing/php/categories/misc/rot13.zip Class: Remote File Disclosure Vulnerability Discover: BorN To K!LL...
PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= PHP Point Of Sale for osCommerce = index.php Remote File Include Vuln Script: PHP Point Of Sale for osCommerce Version: 1.1 URL: http://puzzle.dl.sourceforge.net/sourceforge/phppointofsale/PHPPointOfSaleosCommerce1.1.zip Discover: BorN To...
Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Weekly Drawing Contest = checkvote.php Remote File Disclosure Vuln Script: Weekly Drawing Contest Version: 0.0.1 S!Te: http://www.hotscripts.com/jump.php?listingid=52638&jumptype=1 Discover: BorN To K!LL...
AssetMan 2.4a <= (download_pdf.php) Remote File Disclosure Vulnerability
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= | |AssetMan 2.4a = downloadpdf.php Remote File Disclosure Vulnerability | |Script: AssetMan | |Verson: 2.4a | |URL: http://www.bctree.com/assetman/assetman-2.4a.zip | |Discover: BorN To K!LL |...
Microsoft MFC Embedded OLE Object Remote Code Execution Vulnerability
Description The Microsoft MFC component for Microsoft Windows and Microsoft Visual Studio .NET is prone to a remote code-execution vulnerability. This issue occurs when the application using the component attempts to parse malformed Rich Text Files RTF. An attacker could exploit this issue by...
CVE-2007-0868
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Security feature bypass
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-0868
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-0868
CVE-2007-0868 concerns an unspecified vulnerability in the chat room feature of Yahoo! Messenger up to version 8.1.0.239, allowing a remote attacker to cause a denial of service. The impact is described as partial availability loss, with no confidentiality or integrity impact stated. The vulnerab...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG element to the 1 First Name, 2 Last Nam...
CVE-2007-0768
Multiple cross-site scripting XSS vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG element to the 1 First Name, 2 Last Nam...
CVE-2007-0768
Multiple cross-site scripting XSS vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG element to the 1 First Name, 2 Last Nam...
CVE-2007-0768
CVE-2007-0768 affects Yahoo! Messenger
Windows Live Messenger / Windows MSN Messenger decryptable password
Password is stored in registry in reversable encryption...
Yahoo! Messenger通知消息HTML注入漏洞
Yahoo! Messenger是一款流行的即时通信程序。 Yahoo! Messenger处理通知消息缺少过滤，远程攻击者可以利用漏洞进行跨站脚本攻击，获得目标用户敏感信息。 Hai Nam Luke发现问题存在对对话框中，自动通知消息如?Hai Nam Luke has signed out. 1/26/2007 10:03 PM? or ?Hai Nam Luke has signed back in. 1/26/2007 10:04 PM?可被注入恶意脚本，Yahoo Messenger使用Internet...
Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
DESCRIPTION: I’ve found a cross-site scripting vulnerability in Yahoo! Messenger, a popular advertisement-supported instant messaging client and protocol provided by Yahoo! Attacker can inject a malicious script with local privilege to Y!M notification message. The vulnerability is discovered in...