6052 matches found
security flaw
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."...
security flaw
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."...
Cross-site Scripting through global scope pollution — Mozilla
As you browse from site to site each new page should start with a clean slate. shutdown reports a technique that pollutes the global scope of a window in a way that persists from page to page. A malicious script could define a setter function for a variable known to be used by a popular site, and...
CVE-1999-0655
CVE-1999-0655 is rejected/not used per the description.
CVE-1999-0660
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is not about any specific product, protocol, or design, so it is out of scope of CVE. It might be more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description is:...
PT-1999-1249 · Qbik · Wingate
Name of the Vulnerable Software and Affected Versions: WinGate affected versions not specified Description: General information about the issue is not provided. There is no mention of the estimated number of potentially affected devices worldwide or details about real-world incidents where this...
Windows Persistent Startup Folder
This module establishes persistence by creating a payload in the user or system startup folder. Works on Vista and newer systems. Module Options msf use exploit/windows/persistence/startup/folder msf undefinedfolder show actions ...actions... msf undefinedfolder set ACTION msf undefinedfolder sho...
CVE-2023-38814
CVE-2023-38814 is rejected/not used; this CVE entry does not represent an active vulnerability.
