200 matches found
Messenger/hotmail MITM exploit
hello, this a little sploit i wrote for Linux to test a man in the middle attack against Messenger/Hotmail. A kind of swiss army knife that: / use the messenger scrambler bug to get passwords hashes / spoof hotmail site to retrieve plaintext passwords since protocol is not enciphered when users...
webmail.txt
-Web Application Security Survey- Results show that Microsoft Hotmail, Excite, Altavista, E-Bay, Lycos Netscape WebMail, E-Trade, Infoseek/Go.com and their users are all currently vulnerable to web based attack. disclaimer The opinions, ideas and information expressed in the following text are my...
hack-hm-1.1.txt
Title Hotmail Security Alert Hack HM1.1! 5/10/2000 By: Da Hawaiian HaXorS "Give back da aina!" Disclaimer In no event shall Da Hawaiian HaXorS be held liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an...
CVE-1999-0750
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account...
CVE-2000-0085
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag...
CVE-2000-0085
The set of documents identifies CVE-2000-0085 as a vulnerability in Hotmail where JavaScript could bypass filters in a user’s mailbox, enabling remote code execution via the LOWSRC or DYNRC parameters in the IMG tag. The issue arises from improper filtering of JavaScript in messages, suggesting t...
CVE-1999-0750
Technical details for CVE-1999-0750 are not publicly provided in the supplied documents. Monitor for updates from official feeds.
CVE-2000-0081
The CVE-2000-0081 entry concerns Hotmail and the improper filtering of JavaScript code in a user’s mailbox. The vulnerability lets a remote attacker execute JavaScript by bypassing filters with hexadecimal encoding of the javascript: protocol (for example jAvascript). Affected product is Hotmail;...
CVE-2000-0081
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jvascript...
hotmail.java.txt
Georgi Guninski security advisory 5, 2000 Yet another Hotmail security hole - injecting JavaScript using "jvascript:" Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski ...
CVE-2000-0081
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jvascript...
javascript.hotmail.txt
Georgi Guninski security advisory 3, 2000 Yet another Hotmail security hole - injecting JavaScript in IE using "@import urljavascript:..." Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact...
CVE-2000-0085
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag...
PT-2000-1074 · Microsoft · Hotmail
Name of the Vulnerable Software and Affected Versions: Hotmail affected versions not specified Description: The issue arises from improper filtering of JavaScript code in a user's mailbox, allowing a remote attacker to execute code. This can be achieved via the LOWSRC or DYNRC parameters in the I...
CVE-1999-0750
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account...
hotmail.browser.trust.txt
Date: Wed, 5 May 1999 17:31:34 -0500 From: David L. Nicol To: [email protected] Subject: hotmail claims vulnerability patched, so here it is Dear Paul: I am reading your previous article on hotmail security, http://www.news.com/News/Item/0,4,33996,00.html and I'm CCing this message to the...
hotmail.passwd.trap.txt
Date: Fri, 23 Apr 1999 13:55:24 -0500 From: David L. Nicol To: [email protected] Subject: javascript hotmail password trap Hello, I was informed this morning that a free form data mailer I maintain http://www.tipjar.com/generic.html was being involved in a javascript-based hotmail password...
hotmail-javascript-8-98.txt
Date: Mon, 24 Aug 1998 14:21:56 -0600 From: Tom Cervenka Subject: Serious Security Hole in Hotmail We have just found a serious security hole in Microsoft's Hotmail service http://www.hotmail.com which allows malicious users to easily steal the passwords of Hotmail users. The exploit involves...
hotmail-attack-082698.txt
Date: Wed, 26 Aug 1998 18:21:40 +0200 From: Jonathan James Subject: SV: Serious Security Hole in Hotmail Dear all. I've got some e-mail-requests concerning my "second" version of the "hotmail flaw", so I've decided to post the code. This has been tested on IE 4.0 and Netscape 3.0 . The code...
