976 matches found
dlink.txt
!/bin/bash Coded Bt Ph3mt Of K-Security Team This Code is private, pls do not redistribute Release Date 25/11/2007 Code function dow echo 'POST /cgi-bin/firmwarecfg HTTP/1.1' richiesta echo 'Host: $IP' richiesta echo 'User-Agent: veryprivateacsor' richiesta echo 'Accept:...
CVE-2004-2704
Hastymail 1.0.1 and earlier stable and 1.1 and earlier development does not send the "attachment" parameter in the Content-Disposition field for attachments, which causes the attachment to be rendered inline by Internet Explorer when the victim clicks the download link, which facilitates cross-si...
CVE-2004-2704
HastyMail (PHP-based mail client) does not send the attachment parameter in the Content-Disposition header for attachments in versions ≤1.0.1 (stable) and ≤1.1 (development). This causes attachments to render inline in Internet Explorer when the download link is clicked, facilitating cross-site s...
Zomplog <= 3.8.1 upload_files.php Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications =============================================================== Zomplog = 3.8.1 uploadfiles.php Arbitrary File Upload Exploit =============================================================== ?php Zomplog = 3.8.1 Arbitrary File Upload Exploi...
ibmatom-xss.txt
XSS using Atom feed in www.ibm.com Abstract: A XSS using Atom feed was in www.ibm.com already fixed. This XSS technique appears only by IE6, not appears on IE7 and Firefox. Poc: http://www.ibm.com/fscripts/search/opensearch/search.fcgi/a.html?...
SiteDepth CMS 3.44 (ShowImage.php name) File Disclosure Vulnerability
No description provided by source. Sitedepth CMS 3.44 Local File Include LFI Exploit ! Application homepage : http://www.sitedepth.com/ ! Author : H4 / Team XPK ! Contact : [email protected] ! Bug discovered : 2006-11-07 ! Bug published : 2007-06-25...
minibb205-lfi.txt
? / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ / --------------------------------------------------------------------- !...
JVN#95019167 Internet Explorer vulnerable in handling MHTML protocol
When Internet Explorer accesses a website using MHTML MIME Encapsulation of Aggregate HTML, Internet Explorer processes the contents as MHTML data, ignoring their actual content types, and it does not properly handle the Content-Disposition header field. This could cause a dialog box not to be...
Information disclosure
The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Doma...
CVE-2007-2227
The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Doma...
CVE-2007-2227
CVE-2007-2227 describes information disclosure in the MHTML protocol handler used by Outlook Express 6 and Windows Mail, which processes MHTML contents via Internet Explorer and ignores the Content-Disposition header. The vulnerability enables an attacker to obtain sensitive data from other IE do...
USP FOSS Distribution 1.01(download.php dnld)Remote File Disclosure
USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php: /user/download.php ? $file = @$GET'dnld';----+...
cattaDoc 2.21 (download2.php fn1) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ====================================================================== cattaDoc 2.21 download2.php fn1 Remote File Disclosure Vulnerability ====================================================================== cattaDoc 2.21download2.php...
Trac content displaying vulnerability
Content-Disposition MIME header is not defined. Crossite scripting...
CVE-2007-1406
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...
PYSEC-2007-3
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...
CVE-2007-1406
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...
Design/Logic Flaw
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...
