Hack rampage the era of the URL address will lie-vulnerability warning-the black bar safety net

My name is URL, i.e.,“Uniform Resource Locators”, which means Uniform Resource Locator. In the address bar URL will belong to me the URL of an expression. Substantially all of the visit website the friends are used to me, so my role is very large. Perhaps many friends don't know that I'm very...

CVE-2004-2491

CVE-2004-2491 describes a race condition in Opera 7.53 Build 3850 that causes the address bar to be filled before the page is loaded, enabling remote attackers to spoof the URL via window.open and location.replace and potentially facilitate phishing. Affected product: Opera Web Browser 7.53 Build...

Microsoft Internet Explorer URL spoofing

It's possible to spoof URL with document.write within OnClick method for a tag...

[Full-disclosure] New (19.10.05) MS-IE Url Spoofing bug (by K-Gen).

New 19.10.05 MS-IE Url Spoofing bug by K-Gen. Gr337s .. I K-Gen have found a new I think.. URL spoofing bug in IE. Affected : All MS-IE Browsers Win XP SP2 as well. This allows a malicious website to host a specially crafted A HREF tag that shows to the user as a link to one location, but actuall...

CVE-2005-0500

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks...

CVE-2004-1121

The provided data confirms CVE-2004-1121 affects Apple Safari 1.0 through 1.2.3. The vulnerability allows a remote attacker to spoof the URL displayed in the status bar by exploiting TABLE tags in the page, potentially misleading users about the address they are visiting. Based on the connected d...

CVE-2004-1121

Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags...

thaiXSS.txt

-=--------------------ADVISORY-------------------=- -= =- -= THai's Shoutbox =- -= =- -= Author: CorryL www.x0n3-h4ck.org =- -= =- -=----------------------------------------------------=- -=+ Application: THai's Shoutbox -=+ Version: not available -=+ Vendor's URL: not available -=+ Platform:...

[Full-disclosure] THai's Shoutbox XSS (Spoofing URL) BUG

-=--------------------ADVISORY-------------------=- -= =- -= THai's Shoutbox =- -= =- -= Author: CorryL www.x0n3-h4ck.org =- -= =- -=----------------------------------------------------=- -=+ Application: THai's Shoutbox -=+ Version: not available -=+ Vendor's URL: not available -=+ Platform:...

CVE-2005-0500

CVE-2005-0500 affects Microsoft Internet Explorer 6 (IE6) bundled with Windows XP; the vulnerability is in how IE displays the title bar for script-initiated popup windows. Reported issues include spoofing the displayed domain name or title content in popups, potentially misleading users into bel...

CVE-2004-2491

A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks...

CVE-2004-1104

Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor a element with an empty "href" attribute, and a FORM whose...

CVE-2004-1104

Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor a element with an empty "href" attribute, and a FORM whose...

CVE-2004-1104

CVE-2004-1104 details : The connected records confirm a phishing/spoofing flaw in Microsoft Internet Explorer 6.0 SP2 where a web page can manipulate the status bar URL to mislead users. The attack pattern involves a page containing a BASE element pointing to the legitimate site, followed by an a...

CVE-2004-1121

Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags...

Mozilla JavaScript URL Host Spoofing Arbitrary Cookie Disclosure (deprecated)

Binary data 1314.prm...

CVE-2004-0528

Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack...

CVE-2004-0527

KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack...

Opera: Location, Location, Location

GreyMagic Security Advisory GM008-OP ===================================== By GreyMagic Software, 05 Aug 2004. Available in HTML format at http://www.greymagic.com/security/advisories/gm008-op/. Topic: Location, Location, Location. Discovery date: 19 Jul 2004. Affected applications:...

CVE-2004-0526

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing"...