Cross site scripting

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

CVE-2007-0059

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

CVE-2007-0059

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

WEB2. 0 attack the trendy—Ajax Hacking-vulnerability warning-the black bar safety net

0 5 at the beginning, with web2. 0 this word in China each large network media such as a flood the emergence of Ajax technology AJAX, IE"Asynchronous JavaScript And XML"acronym, can be translated as asynchronous JavaScript and XML technology. At its core is a host in the browser called...

hotmail_xss.txt

Adivisory Name : Hotmail and Windows Live Mail XSS Vulnerabilities Release Date : 2006.11.03 Test On : Microsoft IE 6.0 Discover : Cheng Peng Suapplesoupatgmail.com Introduction: Hotmail and Windows Live Mail are both web-based e-mail services by Microsoft. Details: Hotmail's filter identifies...

OpenBSD 2.6 / 2.7ftpd Remote Exploit

No description provided by source. / h0h0h0 0-day k0d3z Exploit by Scrippie, help by dvorak and jimjones greets to sk8 Not fully developt exploit but it works most of the time ; Things to add: - automatic writeable directory finding - syn-scan option to do mass-scanning - worm capabilities? shoul...

Microsoft Word 0-day Vulnerability (September) FAQ document available

New FAQ document about the recently discovered 0-day vulnerability in Microsoft Word is available. This vulnerability has been reported especially in Office 2000 on Windows 2000 machines. Possible other Office versions are affected as well. This vulnerability is being exploited by Trojan from...

Microsoft Windows RRAS Service buffer overflow

Buffer overflows in service RPC interface. May be used by network worm...

[Full-disclosure] Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: DokuWiki PHP code execution vulnerability in spellchecker Release Date: 2006/06/05 Last Modified: 2006/06/05 Author: Stefan Esser [email protected] Application: DokuWiki...

ipb search.php vulnerability analysis and thinking-vulnerability warning-the black bar safety net

Author: SuperHeiAtph4nt0m.org Blog: http://superhei.blogbus.com/ Team: http://www.ph4nt0m.org Data: 2006-04-27 Simple analysis The vulnerability is another one of pregreplace+/e vulnerability,代码 在 \sources\actionadmin\search.php line 1 2 5 8-1 2 6 a 2: if $this-ipsclass-input'lastdate' $this-outp...

Sasser Worm ftpd Remote Buffer Overflow Exploit (port 5554)

Exploit for unknown platform in category remote exploits =========================================================== Sasser Worm ftpd Remote Buffer Overflow Exploit port 5554 =========================================================== / / // / / / / \ / / / / / / / // // / // / // //// -...

Welchia Worm

...

CodeRed version X detection

Your machine is infected with the 'Code Red' worm. Your Windows system seems to be compromised. OpenVAS Vulnerability Test $Id: coderedx.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: CodeRed version X detection Authors: Noam Rathaus Copyright: Copyright C 2001 SecuriTeam This program is fr...

Tests for Nimda Worm infected HTML files

Your server appears to have been compromised by the Nimda mass mailing worm. It uses various known IIS vulnerabilities to compromise the server. Anyone visiting compromised Web servers will be prompted to download an .eml Outlook Express email file, which contains the worm as an attachment. Also,...

w32.spybot.fcd worm infection

The remote system is infected with a variant of the worm w32.spybot.fcd. Infected systems will scan systems that are vulnerable in the same subnet in order to attempt to spread. This worm also tries to do DDoS against targets in the Internet. OpenVAS Vulnerability Test $Id:...

Code Red X Worm Detection - Active Check

Your machine is infected with the SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:internetinformationservices";...

Tests for Nimda Worm infected HTML files

Your server appears to have been compromised by the Nimda mass mailing worm. It uses various known IIS vulnerabilities to compromise the server. SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

w32.spybot.fcd worm infection

The remote system is infected with a variant of the worm w32.spybot.fcd. SPDX-FileCopyrightText: 2004 jorge rodriguez Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Kibuv worm detection

A fake FTP server was installed by the KIBUV.B worm on this port. This worm uses known security flaws to infect the system. This machine may already be a SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Korgo worm detection

The remote host is probably infected with Korgo worm. It propagates by exploiting the LSASS vulnerability on TCP port 445 as described in Microsoft Security Bulletin MS04-011 and opens a backdoor on TCP ports 113 and 3067. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might b...