CVE-2006-4661

CVE-2006-4661 affects AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll). The vulnerability stems from insufficient validation of the origin of the configuration page (options2.html), enabling an attacker to present a crafted web page with disguised checkboxes to trick the user into reconfi...

CVE-2006-4661

AOL ICQ Toolbar 1.3 for Internet Explorer toolbaru.dll does not properly validate the origin of the configuration web page options2.html, which allows user-assisted remote attackers to provide a web page that contains disguised checkboxes that trick the user into reconfiguring the toolbar...

CVE-2006-4660

CVE-2006-4660 concerns multiple XSS vulnerabilities in the RSS Feed module of AOL ICQ Toolbar 1.3 for Internet Explorer. The weaknesses arise from the RSS feed item fields (title and description) being appended to HTML output without sanitization, enabling remote attackers to execute arbitrary sc...

CVE-2006-4660

Multiple cross-site scripting XSS vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer toolbaru.dll allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the 1 title and 2 description elements within an item element in an...

Multiple ICQ Toolbar vulnerabilities

RSS crossite scripting, web configuration interface remote control...

CORE-2006-0322: Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer

Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer Date Published: 2006-09-07 Last Update: 2006-09-06 Advisory ID: CORE-2006-0322 Bugtraq ID: None currently assigned CVE Name: None currently assign...

wowroster15x.txt

Title : WoW Roster = 1.5.x Remote File Include hsList.php Discovered By :::: AG-Spider ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger ----------------------------------------------------------------------------- dork : "wow...

Microsoft Internet Explorer Version Detection (Google Toolbar)

Binary data 3725.prm...

Google Toolbar Detection

Binary data 3726.prm...

Virtual War v1.5.0 Remote File Include (vwar_root)

Title : Virtual War v1.5.0 Remote File Include vwarroot Discovered By :::: :::: :::: AG-Spider :::: :::: :::: ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger Application : Virtual War v1.5.0 URL : www.vwar.de...

JVN#77886599 Hatena Toolbar sends URL information unecnrypted

Impact When a user of Hatena Toolbar views a SSL secured web page, an attacker could obtain the information contained in the URL such as a session ID which needs to be protected. As a result, an attacker could possibly conduct session hijacking. Solution Products Affected Hatena Toolbar v1.5.4 an...

CVE-2004-2475

Cross-site scripting XSS vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section. NOTE: some followup posts suggest that the demonstration code's use of the res:// protocol does not cross privilege boundaries, since it i...

CVE-2004-2475

The CVE-2004-2475 entry concerns a cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 that could allow remote scripts to be injected via about.html in the About section. The connected documentation notes that demonstrations using the res:// protocol may not cross privilege bound...

CVE-2002-1888

CommonName Toolbar 3.5.2.0 is affected. It sends unqualified domain name requests to the CommonName organization and potentially other web servers for name resolution, which can reveal internal server names to those organizations. This describes the root cause as unqualified DNS/name-resolution r...

CVE-2002-1888

CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names...

CVE-2005-0187

Stack-based buffer overflow in the SetSkin function in AtHoc toolbar allows remote attackers to execute arbitrary code via a long skin name...

Google Toolbar < 2.0.114.1 Multiple Vulnerabilities

The remote host is running the Google Toolbar, a toolbar of Internet Explorer. The remote version of this software is reportedly affected by an HTML injection vulnerability that could allow an attacker to execute a cross-site scripting attack. C Tenable Network Security, Inc. include"compat.inc";...

CVE-2005-0188

Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log...

CVE-2005-0188

CVE-2005-0188 concerns a format-string vulnerability in the SetBaseURL function of the AtHoc toolbar. The issue allows remote attackers to execute arbitrary code by supplying an invalid URL that is recorded in the debug log, leveraging format specifiers. Public references in NVD/CVE records indic...

CVE-2005-0187

CVE-2005-0187 describes a stack-based buffer overflow in the SetSkin function of the AtHoc toolbar. The vulnerability allows remote attackers to execute arbitrary code by supplying a long skin name, indicating a remote code execution risk via the affected component. The documents identify the aff...