Design/Logic Flaw

Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' double-quote space sequence followed by the -autologin and -loginuri arguments, whic...

CVE-2006-4060

PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfgdir parameter...

AxWebRemoveCtrl ActiveX Control Arbitrary Code Execution

The remote host contains an ActiveX control from SunnComm called AxWebRemoveCtrl. This control was likely installed by requesting an uninstaller for SunnComm's MediaMax digital rights management software used, for example, on select Sony CDs. By design, AxWebRemoveCtrl allows any website to cause...

ie50.frame-spoofing.txt

ult IE 5.0 security settings allow frame spoofing Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of th...