Unfixed XSS vulnerability at www.192.com

Security researcher TreX, has submitted on 06/12/2007 a cross-site-scripting XSS vulnerability affecting www.192.com, which at the time of submission ranked 19380 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is currently...

Microsoft Internet Explorer Speech API 4 COM Object Instantiation Buffer Overflow Vulnerabilities

Description Microsoft Internet Explorer is prone to multiple buffer-overflow vulnerabilities when instantiating certain COM objects. An attacker may exploit these issues by enticing victims into opening a maliciously crafted webpage. Successfully exploiting these issues allows remote attackers to...

CVE-2005-4845

CVE-2005-4845 concerns the Java Plug-in versions 1.4.2_03 and 1.4.2_04, including the associated applet redirector controls. The issue is that creating a COM object linked to the control’s CLSID (not intended for use within Internet Explorer) can crash Internet Explorer, resulting in a denial of ...

CVE-2005-4842

The CVE-2005-4842 entry describes a vulnerability in the System Monitor Source Properties control that can cause a denial-of-service (Internet Explorer crash) when a remote attacker creates a COM object of the control’s CLSID, which IE does not intend to use. Multiple sources (NVD, CVE list, Red ...

CVE-2005-4841

Technical details about CVE-2005-4841 are not publicly available in the provided documents. Monitor for updates from Red Hat, NVD, CVE listings, and related advisories.

CVE-2005-4842

The System Monitor Source Properties control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

CVE-2005-4843

The CVE-2005-4843 vulnerability affects the SmartConnect Class control. It allows remote attackers to cause an Internet Explorer crash by creating a COM object of the control’s CLSID that is not intended for use within Internet Explorer. The issue is described across multiple sources (Red Hat, CV...

Unfixed XSS vulnerability at www.ringtones2.com

Security researcher CoNqUeRoR, has submitted on 06/07/2007 a cross-site-scripting XSS vulnerability affecting www.ringtones2.com, which at the time of submission ranked 3636048 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is...

Unfixed XSS vulnerability at www.grafi2000.com

Security researcher MaXWeL, has submitted on 06/03/2007 a cross-site-scripting XSS vulnerability affecting www.grafi2000.com, which at the time of submission ranked 39452 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2007. It is current...

Unfixed XSS vulnerability at mobile365.com

Security researcher TheFlash, has submitted on 31/05/2007 a cross-site-scripting XSS vulnerability affecting mobile365.com, which at the time of submission ranked 339929 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/05/2007. It is currentl...

Code injection

Microsoft Internet Information Services IIS 6.0 allows remote attackers to cause a denial of service server instability or device hang, and possibly obtain sensitive information device communication traffic; and might allow attackers with physical access to execute arbitrary code after connecting...

CVE-2007-2897

Microsoft Internet Information Services IIS 6.0 allows remote attackers to cause a denial of service server instability or device hang, and possibly obtain sensitive information device communication traffic; and might allow attackers with physical access to execute arbitrary code after connecting...

vBulletin vBGSiteMap 2.41 - 'root' Remote File Inclusion

============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage : Host4vb.com , Hack-Teach.Org...

vBulletin vBGSiteMap 2.41 - root Remote File Inclusion

vBulletin vBGSiteMap 2.41 - root Remote File Inclusion ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] ,...

Unfixed XSS vulnerability at www.austin360.com

Security researcher MaXWeL, has submitted on 24/05/2007 a cross-site-scripting XSS vulnerability affecting www.austin360.com, which at the time of submission ranked 40210 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is current...

Breakthrough Windows 2 0 0 3 the PHP server to new ideas-vulnerability warning-the black bar safety net

From WIN2000 to WIN XP, WIN2003, MS IIS server security improvement is obvious. In WIN2000, a regular PHP SHELL will be able to put it down; in WIN XP, even Safe mode = off,you cannot use system function executes a system command, but we can also use the comfunction to break;to WIN 2 0 0 3,even i...

Unfixed XSS vulnerability at www.clyde1.com

Security researcher FuZz, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.clyde1.com, which at the time of submission ranked 286506 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is currently...

Unfixed XSS vulnerability at www.haber53.com

Security researcher THE-SH0CK-B0Y, has submitted on 20/05/2007 a cross-site-scripting XSS vulnerability affecting www.haber53.com, which at the time of submission ranked 114749 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/05/2007. It is...

Unfixed XSS vulnerability at www.steps365.com

Security researcher THE-SH0CK-B0Y, has submitted on 20/05/2007 a cross-site-scripting XSS vulnerability affecting www.steps365.com, which at the time of submission ranked 928276 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/05/2007. It is...

Unfixed XSS vulnerability at 555.com

Security researcher St@rExT, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting 555.com, which at the time of submission ranked 644333 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2007. It is currently...