Microsoft Internet Explorer content spoofing

It's possiblt to emulate navigation to different site by using document.open, actually stayin in context of previous page...

[Full-disclosure] Papoo CMS 3.6 - SQL Injection

Papoo Content Management System Backend SQL Injection Jun 24 2007 Product Papoo Content Management System Vulnerable Versions Papoo 3.6 and maybe prior Vendor Status The Vendor was notified and the issue was fixed. A patch is available at http://www.papoo.de/index/menuid/204/reporeid/215 Details...

Microsoft Windows Vista - Windows Mail Local File Execution

source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link...

Microsoft Windows Vista - Windows Mail Local File Execution

Microsoft Windows Vista - Windows Mail Local File Execution source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker mu...

CVE-2007-1091

Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via onUnload Javascript handlers...

Yahoo! Messenger远程搜索字符串任意浏览导航漏洞

Yahoo! Messenger是一款流行的即时通信软件。 Yahoo! Messenger不正确处理恶意消息，远程攻击者可以利用漏洞在目标用户浏览器上打开浏览器窗口到任意页面。 发送如下私有消息给目标用户： :+-%/?=/;@$@;+?/?@@-?@+@;?msg:---------------------------------------------embed onload=window.open'http:\\google.com/'helomsg...

Microsoft Windows Internet Explorer插件导航地址栏伪造漏洞(MS04-038)

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理插件导行时存在问题，远程攻击者可以利用这个漏洞伪造地址，欺骗用户。 此漏洞可导致攻击者可以把不正确的URL列在地址栏中，而非实际用户要访问的URL，造成一定的欺骗，可能导致用户访问恶意站点，泄露敏感信息。 Microsoft Internet Explorer 6.0SP1 Microsoft Internet Explorer 5.5SP2 Microsoft Internet Explorer 5.0.1SP4 Microsoft Interne...

phpGreetz Remote File Inclusion Vulnerability

Author: [email protected] mozi phpGreetz Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org Greetz: SpiderZ , fUSiON ---------------------------------------------------------------- Download: http://sourceforge.net/project/showfiles.php?groupid=6127...

PHPGreetz 0.99 - 'footer.php' Remote File Inclusion

Author: [email protected] mozi phpGreetz Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org Greetz: SpiderZ , fUSiON ---------------------------------------------------------------- Download: http://sourceforge.net/project/showfiles.php?groupid=6127...

phpGreetz <= 0.99 (footer.php) Remote File Include Vulnerability

No description provided by source. Author: [email protected] mozi phpGreetz Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org Greetz: SpiderZ , fUSiON ---------------------------------------------------------------- Download:...

PHPGreetz 0.99 - footer.php Remote File Inclusion

PHPGreetz 0.99 - footer.php Remote File Inclusion Author: [email protected] mozi phpGreetz Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org Greetz: SpiderZ , fUSiON ---------------------------------------------------------------- Download:...

A-Blog.txt

1A-Blog Remote File Include BuG FounD by Drago84 Application Affect:2A-Blog Source Code: 3http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir : /navigate/ Exempe Of ExPloit is:...

A-Blog v2.0 Remote File Include

============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...

A-Blog 2.0 - Multiple Remote File Inclusions

A-Blog 2.0 - Multiple Remote File Inclusions ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous...

A-Blog 2.0 Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= A-Blog 2.0 Multiple Remote File Include Vulnerabilities =======================================================...

A-Blog 2.0 Multiple Remote File Include Vulnerabilities

No description provided by source. ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...

A-Blog 2.0 - 'menu.php' Remote File Inclusion

ToXiC A-Blog Remote File Include BuG FounD by Drago84 Application Affect:A-Blog Source Code: http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir : /navigation/ Exempe Of ExPloit is:...

CVE-2006-3640

CVE-2006-3640 is an Information Disclosure vulnerability in Microsoft Internet Explorer (IE 5.01 and 6) where a script can persist across navigations to reveal the window location in another domain/IE zone. The NVD description matches a Window Location Information Disclosure Vector, and the conne...

Yahoo! Messenger 7.0/7.5 - Remote Search String Arbitrary Browser Navigation

source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary page. This issue occurs because the application fails to sanitize malicious...

Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation

Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary...