CVE-1999-1167

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation...

Microsoft IE cookies readable via about: URLS

Microsoft Internet Explorer has a vulnerability which allows a malicious website to access any cookie in the browser's memory or those stored on disk. Cookies are used by web sites for storing preferences, statistics and tracking users, but also for storing more sensitive information such as...

CVE-2000-0406

Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability...

SubSeven Trojan Detection

This host seems to be running SubSeven on this port. SubSeven is a Trojan Horse which allows an intruder to take the control of the remote computer. An attacker may use it to steal your passwords, modify your data, and preventing you from working properly. C Tenable Network Security, Inc. Added...

javascript.hotmail.txt

Georgi Guninski security advisory 3, 2000 Yet another Hotmail security hole - injecting JavaScript in IE using "@import urljavascript:..." Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact...

Hybrid_network_cable_modems.txt

KSRT Security Advisories http://www.ksrt.org Contact Account: [email protected] Advisory Subscription: Send an empty message to: [email protected] ---- KSRT Advisory 012 Date: Oct. 6 1999 ID : hybr-hsmp-012 Affected Program: Hybrid Network's Cable Modems Author: David Goldsmith...

CVE-1999-0351

FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client...

rocketmail.txt

http://securityhole.8m.com/ New Webmail Security Hole Found - 10 April 1999 MAO Enterprises announced today that a security flaw in Rocketmail's free web email services at www.rocketmail.com. If you should happen to know the login name of an account at Rocketmail which has been inactive for a...

promail.1.21.trojan.txt

Date: Fri, 19 Mar 1999 09:41:18 +0100 From: Aeon Labs To: [email protected] Subject: security/privacy news Perhaps this might be of interest to Your readers. ProMail v1.21, an advanced freeware mail program spread through several worldwide distribution networks SimTel.net, Shareware.co...

GirlFriend Backdoor Detection

The remote host has the GirlFriend backdoor installed. This backdoor allows anyone to partially take control of the remote system. An attacker could use it to steal your password or prevent your system from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-1999-0351

FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client...

Microsoft Internet Explorer 4 - Clipboard Paste

source: https://www.securityfocus.com/bid/215/info The Windows clipboard contains data that has been cut or copied from various windows applications. This data can be accessed and posted to malicious web forms at web sites without the knowledge of the visiting end-user. Normally, Microsoft securi...