3989 matches found
CVE-2004-1753
The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindowNULL calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs...
hostingControl.txt
-= Security Advisory =- Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004 Release Date:...
Hosting Controller
-= Security Advisory =- Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004 Release Date:...
Hosting Controller <= 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability
Exploit for unknown platform in category remote exploits ======================================================================= Hosting Controller = 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability ======================================================================= Advisory Information...
Hosting Controller <= 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability
No description provided by source. Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004...
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing
Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004 Release Date: : 12/7/2004 Summary...
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor...
CVE-2004-0335
LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to 1 index.html, 2 cgi-bin/, or 3 users/...
Cherokee Web Server URI Traversal Arbitrary File Access
The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to directory traversal flaw when appending a '../' sequence to the web request. Additionally, this version fails to drop root privileges after it binds to listen port. Remote attack...
Multiple (Almost all) Browsers Tabbed Browsing Vulnerabilities
Exploit for unknown platform in category remote exploits ============================================================== Multiple Almost all Browsers Tabbed Browsing Vulnerabilities ============================================================== Test Your Browser Open the link below in a new tab,...
Multiple Browsers - Tabbed Browsing
Multiple Browsers - Tabbed Browsing Test Your Browser Open the link below in a new tab, then try to type data into form fields on the CitiBank website. Open this Link in New Tab Result: Keystrokes you pressed on the CitiBank website. /textarea // milw0rm.com 2004-10-22...
Multiple Browsers - Tabbed Browsing
Test Your Browser Open the link below in a new tab, then try to type data into form fields on the CitiBank website. Open this Link in New Tab Result: Keystrokes you pressed on the CitiBank website. /textarea // milw0rm.com 2004-10-22...
Multiple (Almost all) Browsers Tabbed Browsing Vulnerabilities
No description provided by source. bTest Your Browser/bbr br Open the link below in a new tab, then try to type data into form fields on the CitiBank website.br br a href="http://www.citibank.com/" onMouseOver="setInterval'document.myform.userinput.focus;', 10;"Open this Link in New Tab/abr br fo...
Multiple cups bugs
Empty packet to UDP/631 causes browsing service to fail. Foomatic printers driver code execution, information leak from log files...
IE6 + XP SP2 Vulnerability
Background information ====================== Windows XP Service Pack 2 has introduced new features that improve browsing security in Internet Explorer. Most of them are additional messages that force the user to validate everything that is done by the browser. Most of these messages are displaye...
MDKSA-2004:097 - Updated cups packages fix DoS vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: cups Advisory ID: MDKSA-2004:097 Date: September 15th, 2004 Affected versions: 10.0, 9.2, Corporate Server 2.1 Problem Description: Alvaro Martinez Echevarria discovered a vulnerability in the CUPS...
gmailSurf.txt
Anonymous Surfing Via Gmail Login Window - Poor Sanitization User can do anonymous surfing apart form other cool tricks from Gmail login window. The window is small, still checking your mails via google is phun. : 1. Open https://gmail.google.com/?dest=http%3A%2F%2Fblablabla. 2. The login window...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1694.prm...