1031 matches found
Firefox wyciwyg:// cache zone bypass
There is an interesting vulnerability in how Mozilla Firefox handles internal wyciwyg:// pseudo-URIs. These cache-related resource identifiers are meant to be inaccessible by the user - but there are at least three routes to bypass these restrictionss, one of which - HTTP 302 redirect - also...
CVE-2007-3092
Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls. NOTE: this issue can be leveraged for phishing and other attacks...
CVE-2007-3092
Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls. NOTE: this issue can be leveraged for phishing and other attacks...
By URL spoofing install Trojan-vulnerability warning-the black bar safety net
URL spoofing the usual moves 1.＠ Flag filter user name resolution Originally＠flag is the E－mail address of the user name and host separator, but in my URL, the same applies, but function exactly the same. HTTP Hypertext Transfer Protocol, governs me the URL of the full format is“Http://Name:...
CVE-2005-4809
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag...
CVE-2005-4809
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag...
Crtical Shockwave Embeded XSS Execution
The critical bug Shockwave videos allows to embebded code execution... This code can be XSS or activex mechanism. The victim cant understand because it ll executed background of real video without any redirection or url spoofing.. ====================================== Source Code: There is there...
URL spoofing-security encryption-vulnerability warning-the black bar safety net
URL structure We take a closer look at the URLs and the associated security implications. An“interesting”URL, use has been garbage advertising Delivery person found a long time, but now the“KB”in the Knowledge Base deception and February published in Crypto-Gram article, it has been so that the U...
CVE-2006-0799
The provided connected documents confirm a vulnerability in Microsoft Internet Explorer (CVE-2006-0799) where an attacker can spoof a legitimate URL in the status bar to facilitate phishing via a crafted page containing an anchor, a form pointing to a malicious URL, and an INPUT submit control st...
CVE-2006-0731
WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing phishing attacks via an absolute URL in the url parameter, which loads the URL inside a frame...
CVE-2006-0731
WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing phishing attacks via an absolute URL in the url parameter, which loads the URL inside a frame...
CVE-2005-4678
Apple Safari 2.0.2 aka 416.12 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4678
Apple Safari 2.0.2 (416.12) is affected by CVE-2005-4678. The vulnerability allows remote attackers to spoof the status bar URL by abusing the title attribute of an image inside a link to a trusted site within a form to the malicious site. The note indicates provenance is from third-party informa...
EUVD-2005-4673
Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site...
CVE-2005-4679
This CVE affects Internet Explorer 6 for Windows XP SP2 . The vulnerability allows remote attackers to spoof the URL in the status bar by abusing the title attribute of an image linked to a trusted site within a form, leading to potential user deception. The description does not specify affected ...
CVE-2005-4678
Apple Safari 2.0.2 aka 416.12 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4809
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag...
CVE-2005-4809
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag...
CVE-2005-3699
CVE-2005-3699 affects Opera Web Browser 8.50 and 8.0–8.0.2. The issue allows remote attackers to spoof the URL shown in the status bar by manipulating the title of an image link within a form to a trusted site, directing users to a malicious site. Public details describe that the exploit involves...