Crossite browsing tracing attacks

Multiple browsing components allow to trace user browsing and to gather different information about user...

Code injection

Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service CPU consumption and hang via unknown vectors involving "browsing the web"...

CVE-2006-0336

Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service CPU consumption and hang via unknown vectors involving "browsing the web"...

hcXSS.txt

In GOD We Trust Kachal667 Under9round Team KuT Hi, Here's myLrK new advisory about Hosting Controller. Hosting Controller - CSS vulnerabilities Found date : Pri8 Public Date: 02/11/2005 Summary ------- Hosting Controller is an all-in-one administrative hosting tool for Windows. It automates a wid...

Novell Web Server NDS Tree Browsing

The Novell Web Server default ndsobj.nlm CGI LCGI was detected. This CGI allows browsing of the NDS Tree without any need for authentication. Gaining access to the NDS Tree reveals sensitive information to an attacker. OpenVAS Vulnerability Test $Id: ndswebbasedbrowsing.nasl 8023 2017-12-07...

CUPS Empty UDP Datagram DoS Vulnerability

The target is running a CUPS server that supports browsing of network printers and that is vulnerable to a limited type of denial of service attack. Specifically, the browsing feature can be disabled by sending an empty UDP datagram to the CUPS server. SPDX-FileCopyrightText: 2004 George A. Theal...

Allaire/Macromedia JRun Directory Browsing Vulnerability (MPSB01-13) - Active Check

Allaire JRun 3.0/3.1 under a Microsoft IIS 4.0/5.0 platform has a problem handling malformed URLs. This allows a remote user to browse the file system under the web root normally \inetpub\wwwroot. SPDX-FileCopyrightText: 2005 Felix Huber Some text descriptions might be excerpted from a referenced...

Allaire JRun directory browsing vulnerability

Allaire JRun 3.0/3.1 under a Microsoft IIS 4.0/5.0 platform has a problem handling malformed URLs. This allows a remote user to browse the file system under the web root normally \inetpub\wwwroot. Under Windows NT/2000any service pack and IIS 4.0/5.0: - JRun 3.0 all editions - JRun 3.1 all editio...

/cgi-bin directory browsable

The /cgi-bin directory is browsable. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2005 Hendrik Scholz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Novell Web Server NDS Tree Browsing

The Novell Web Server default ndsobj.nlm CGI LCGI was detected. This CGI allows browsing of the NDS Tree without any need for authentication. Gaining access to the NDS Tree reveals sensitive information to an attacker. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001...

Web Trojan of conventional production methods-vulnerability warning-the black bar safety net

Today in the morning just to school, you have a classmate said to me his QQ is others stolen! （This terrible? Bully to my buddy to head to La.） I then said to him:“rest assured., I'm sure to give you back!” In fact, my heart also not the end, the other when I can steal OICQ, then how much will a...

Hosting Controller 6.1 HotFix 2.2 - Add Domain without Quota

Hosting Controller 6.1 HotFix 2.2 - Add Domain without Quota Website Name : ThirdLevelDomainCheck: WebUsers: hostcustid: Website Type : IP Based Domain Name Based Domain IPAddress : PortNo :IPLessDomain: td colspan="2" a...

Hosting Controller 6.1 HotFix 2.2 - Add Domain without Quota

Website Name : ThirdLevelDomainCheck: WebUsers: hostcustid: Website Type : IP Based Domain Name Based Domain IPAddress : PortNo :IPLessDomain: table width="100%" cellspacing="0" cellpadding=...

FreeBSD : kdelibs -- local DCOP denial of service vulnerability (972697a7-9a42-11d9-a256-0001020eed82)

A KDE Security Advisory reports : Sebastian Krahmer of the SUSE LINUX Security Team reported a local denial of service vulnerability in KDE's Desktop Communication Protocol DCOP daemon better known as dcopserver. A local user can lock up the dcopserver of arbitrary other users on the same machine...

CVE-2005-0336

Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...

kdelibs -- local DCOP denial of service vulnerability

A KDE Security Advisory reports: Sebastian Krahmer of the SUSE LINUX Security Team reported a local denial of service vulnerability in KDE's Desktop Communication Protocol DCOP daemon better known as dcopserver. A local user can lock up the dcopserver of arbitrary other users on the same machine...

CVE-2005-0685: Undefined Security Weakness

Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...

CVE-2004-1753

The CVE-2004-1753 issue affects the Apple Java plugin used by Netscape 7.1/7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5. The vulnerability stems from improper handling of SetWindow(NULL) calls when tabbed browsing is enabled, allowing Java applets from one tab to draw to other tabs and...

CVE-2005-0336

CVE-2005-0336 pertains to a Cross-site scripting (XSS) flaw in EMotion MediaPartner Web Server 5.0. The vulnerability arises when a URL containing .. sequences and HTML is processed, causing a directory browsing page to fail to filter HTML, enabling remote attackers to inject arbitrary HTML or we...

CVE-2005-0336: Undefined Security Weakness

Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...