1936 matches found
CVE-2003-0814
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand"Refresh" to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability...
CVE-2002-2308
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself...
Code execution via Eudora
Using META REFRESH it's possible to launch mhtml file...
REFRESH: EUDORA MAIL 5.1.1
Tuesday, July 23, 2002 Trivial silent delivery and installation of an executable on a target computer. This can be accomplished with the default installation of the mail client Eudora 5.1.1: 'allow executables in HTML content' DISABLED 'use Microsoft viewer' ENABLED The manufacturer...
Выполнение приложений через Microsoft Internet Explorer для Macintosh (code execution)
Можно выполнить служебный системный скрипт через META REFRESH. Или через файл с образом диска...
CVE-1999-0993
The CVE-1999-0993 entry concerns Microsoft Exchange 5.5 where changes to ACLs do not take effect until the directory store cache is refreshed. Connected PT-1999-1512 confirms affected software: Microsoft Exchange 5.5, with the behavior that ACL modifications only apply after refreshing the direct...
PT-1999-1512 · Microsoft · Exchange Server
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange version 5.5 Description: The issue concerns modifications to ACLs Access Control Lists in Microsoft Exchange. These modifications do not take effect until the directory store cache is refreshed. Recommendations: For Microso...
netscape-4.x-DoS.txt
Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice Now, some DoSes on Netscape 4.0x browsers: ------------------------------------------ Meta refresh or href to URL "mocha:document.open'300k times A';"...
Mar16 Media CBB Refresh WSUS Win10
This is the detectoid to be used for making the March Windows 10 CBB refresh build applicable, via WSUS, to Windows 7 SP1, Windows 8.1 Update and Windows 10 WU clients...
Update Rollup 7 for System Center 2016 Virtual Machine Manager
None None...
Mar16 Media CBB Refresh WSUS – downlevel
This is the detectoid to be used for making the March Windows 10 CBB refresh build applicable, via WSUS, to Windows 7 SP1, Windows 8.1 Update and Windows 10 WU clients...
CVE-2026-48761: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object>, <applet>, <iframe>, <img> and the URL Inside <meta http-equiv="refresh"> content
More info at https://symfony.com/cve-2026-48761...
CVE-2026-48761: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object>, <applet>, <iframe>, <img> and the URL Inside <meta http-equiv="refresh"> content
More info at https://symfony.com/cve-2026-48761...
SurfaceHub Win 10 RS1 refresh WSUS
This is used in WSUS RS1 Refresh ESD pub XML for PPIPRO for Win10...