Cross site scripting

The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...

mimesweeperXSS.txt

This is a multi-part message in MIME format. ------=NextPart00101C6A369.3FE6BA2F Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 MIMESweeper For Web 5.X Cross Site Scripting =20 =20 I. INTRODUCTION =20 MIMESweeper For Web is a policy-based content...

SEC-20051025-1.txt

SEC-CONSULT Security Advisory 20051025-1 ===================================================================== title: RSA ACE Web Agent XSS program: RSA ACE/Agent for Web vulnerable version: 5.1, 5.1.1 newer versions may be vulnerable homepage: www.rsasecurity.com found: 2005-10 by: SEC-CONSULT /...

CVE-2004-1715

CVE-2004-1715 describes a directory traversal vulnerability in MIMEsweeper for Web (pre-5.0.4). The flaw allows reading arbitrary files via dot-dot sequences like "..\" or ".." in the URL, potentially impacting remote attackers or local users. The connected documents confirm the affected product ...

CVE-1999-1073

Technical details about CVE-1999-1073 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE listings.

CVE-1999-1072

Excite for Web Servers EWS 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi...

CVE-1999-1071

Excite for Web Servers EWS 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file...

CVE-1999-1073

Excite for Web Servers EWS 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack...

CVE-1999-0279

Excite for Web Servers EWS allows remote command execution via shell metacharacters...

Excite for Web Server architext_query.pl Shell Metacharacter Arbitrary Command Execution

Excite for Webservers is installed. This CGI has a well-known security flaw that lets a remote attacker execute arbitrary commands with the privileges of the web server. Versions newer than 1.1. are patched. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-1999-1072

Excite for Web Servers EWS 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi...

CVE-1999-1071

Excite for Web Servers EWS 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file...

CVE-1999-1073

Excite for Web Servers EWS 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack...

Excite for Web Servers 1.1 - Administrative Password

Excite for Web Servers 1.1 - Administrative Password source: https://www.securityfocus.com/bid/2665/info Excite for Web Servers 1.1 EWS is a search engine suite for web servers running under Windows NT and UNIX. By default the file containing the administrative password, architext.conf, is world...

Excite for Web Servers 1.1 - Administrative Password

source: https://www.securityfocus.com/bid/2665/info Excite for Web Servers 1.1 EWS is a search engine suite for web servers running under Windows NT and UNIX. By default the file containing the administrative password, architext.conf, is world readable and world writable. This allows an attacker...

Microsoft Visual Studio 2012 Shell (Minimum) MSI - Language Neutral

This MSI is included in all languages of the following bundles products a customer would install: Team Explorer 2012 Feedback Client 2012 Professional 2012 Premium 2012 Ultimate 2012 Test Professional 2012 Express 2012 for Web Express 2012 for Windows 8 Express 2012 for Windows Desktop Express 20...