5825 matches found
A Stateful Inspection of FireWall-1
A Stateful Inspection of FireWall-1 Thomas Lopatic, John McDonald TUV data protect GmbH tl,[email protected] Dug Song Center for Information Technology Integration University of Michigan [email protected] 1 Introduction -------------- At the Black Hat Briefings 2000, we presented an analysis of...
CVE-2000-0419
The Office 2000 UA ActiveX control is described as wrongly marked “safe for scripting.” This vulnerability allows an intruder to script interactions through the control’s Show Me feature, potentially disabling macro warnings and enabling arbitrary actions within Office applications (e.g., launchi...
CVE-2000-0059
PHP3 with safemode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands...
PHP 3.0.13 - 'Safe_mode' Failure
source: https://www.securityfocus.com/bid/911/info PHP Version 3.0 is an HTML-embedded scripting language. Much of its syntax is borrowed from C, Java and Perl with a couple of unique PHP-specific features thrown in. The goal of the language is to allow web developers to write dynamically generat...
PHP 3.0.13 - Safe_mode Failure
PHP 3.0.13 - Safemode Failure source: https://www.securityfocus.com/bid/911/info PHP Version 3.0 is an HTML-embedded scripting language. Much of its syntax is borrowed from C, Java and Perl with a couple of unique PHP-specific features thrown in. The goal of the language is to allow web developer...
CVE-1999-0379
The CVE-1999-0379 entry concerns the Taskpads ActiveX control included with Windows/Resource Kit components. The vulnerability arises because the Taskpads ActiveX control was incorrectly marked as Safe-for-Scripting, enabling remote web content to trigger execution of commands on a visiting user’...
CVE-1999-0379
Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting...
foolproof.txt
Fooling Foolproof Security By Nightmare Foolproof security is a program that runs on a windows 9x box. The purpose of foolproof I guess is to keep people that don't know really know what they are doing from messing with stuff. It can be quite a annoying program if you are trying to do anything wi...
msie.fixes.4.99.txt
Date: Wed, 21 Apr 1999 18:13:39 -0700 From: [email protected] To: [email protected] Subject: Microsoft Security Bulletin MS99-011 The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an...
opera.txt
Date: Fri, 14 Aug 1998 09:54:09 +0800 From: "Zac Leow C.H" Subject: URL exploit to crash Opera Browser By putting an extra slash at the end of http:// tag will crash your opera browser. Tested on version 3.21 e.g. http:///opera.nta.no Seems to be save on Netscape and MSIE, they just generate an...
foolproof-bypass.txt
FoolProof found to be full of security glitches FoolProof a product by SmartStuff was intentionally programed to stop users from increasing computer maintaince by installing new software, changing the current computer configuration and so on by limiting the functions a user can do. The mentioned...
foolproof-PC.txt
Date: Wed, 4 Nov 1998 15:55:09 -0500 From: Krish Jagannathan To: [email protected] Subject: FoolProof for PC Exploit I figured this much out -- if you are running on FoolProof for the PC Win9x and you boot up in safe mode with or without network support it will bypass the FoolProof TSR and...
CVE-1999-0379
Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting...
[SECURITY] Debian not affected by samba problems
There have been reports that some Linux distributions are affected by a vulnerability in samba. There are two issues: the wsmbconf program which is still a prototype application not meant for general release is unsafe. Debian does not distribute this program. some distributions used a...
DUO-PSA-2017-002: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2017-002 Publication Date: 2017-05-31 Revision Date: 2017-05-31 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Security has identified an issue in duounix, which, under certain uncommon configurations, could enable attackers to bypass...
HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`
More info at https://symfony.com/cve-2026-46637...
Windows 10 Version 1703 Build Targeting for Component DU
Windows 10 Version 1703 Build and Branch Targeting for Component Critical DU and Safe OS DU...
Cross-Site Scripting
I've picked up on the work started over at 276 and rebased on erusev/master. Since this is rebased on master, I can't point at PR at naNuke/master without running into the merge conflicts that I've already resolved manually. I've implemented what I suggested earlier so that all attributes are...