Lucene search
K

5113 matches found

0day.today
0day.today
added 2006/07/01 12:0 a.m.24 views

Opera Web Browser 9.00 (iframe) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================================ Opera Web Browser 9.00 iframe Remote Denial of Service Exploit ================================================================ function mystyle if fake.document.styleSheets.length...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2006/07/01 12:0 a.m.10 views

Opera Web Browser 9.00 - iframe Remote Denial of Service

Opera Web Browser 9.00 - iframe Remote Denial of Service function mystyle if fake.document.styleSheets.length == 1 f = document.forms"basicstyle".elements; for j = 0; j milw0rm.com 2006-07-01...

0.4AI score
Exploits0
NVD
NVD
added 2006/06/23 8:6 p.m.22 views

CVE-2006-3200

Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service crash via an IFRAME with a src tag containing a "File://" URI followed by an 8-bit character. NOTE: some third parties were unable to verify this issue...

5CVSS6.7AI score0.15687EPSS
Exploits1References4
Cvelist
Cvelist
added 2006/06/23 8:0 p.m.20 views

CVE-2006-3200

Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service crash via an IFRAME with a src tag containing a "File://" URI followed by an 8-bit character. NOTE: some third parties were unable to verify this issue...

6.7AI score0.15687EPSS
Exploits1References4
Packet Storm
Packet Storm
added 2006/06/12 12:0 a.m.20 views

freecodesource.txt

Freecodesource.com is a distributor of myspace profile mods and general crapola. They provide an swf file which allows a myspace user to pop an alert box on profile page load, with custom text; the text is extracted from the url of the swf file, then used as a get parameter 'what' to the url...

7.4AI score
Exploits0
Prion
Prion
added 2006/06/05 5:2 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in Lycos Tripod htmlGEAR guestGEAR aka Guest Gear allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra "iframe" tagname within that element,...

6.8CVSS6.1AI score0.01199EPSS
Exploits0References2
Cvelist
Cvelist
added 2006/06/05 5:0 p.m.13 views

CVE-2006-2808

Cross-site scripting XSS vulnerability in Lycos Tripod htmlGEAR guestGEAR aka Guest Gear allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra "iframe" tagname within that element,...

5.7AI score0.01199EPSS
Exploits0References2
OSV
OSV
added 2006/06/02 7:2 p.m.1 views

DEBIAN-CVE-2006-2779

Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 nested tags in a select tag, 2 a DOMNodeRemoved mutation event, 3 "Content-implemented tree views," 4 BoxObjects, 5 the XBL implementation, 6 an ifram...

9.3CVSS8.8AI score0.06832EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2006/06/02 7:0 p.m.41 views

CVE-2006-2779

Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 nested tags in a select tag, 2 a DOMNodeRemoved mutation event, 3 "Content-implemented tree views," 4 BoxObjects, 5 the XBL implementation, 6 an ifram...

9.3CVSS7.4AI score0.06832EPSS
Exploits0
myhack58
myhack58
added 2006/05/26 12:0 a.m.27 views

MediaPlayer+IE6 the latest vulnerability of the simple research-vulnerability warning-the black bar safety net

This vulnerability only IE6. 0 and above versions. Because from IE6 began to support something like the following java script:window. open"http://ip/";,"media"; The main problem out here. All of the following code are in XP+WMP8. 0+IE6. 0 1+IIS6. 0 environment test pass. Wherein xp and IE by...

7.2AI score
Exploits0
Saint
Saint
added 2006/05/03 12:0 a.m.28 views

Internet Explorer IFRAME buffer overflow

Added: 05/03/2006 CVE: CVE-2004-1050 BID: 11515 OSVDB: 11337 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A buffer overflow when processing the name attribute in an IFRAME tag allows command execution when a malformed web page ...

10CVSS6.6AI score0.67061EPSS
Exploits4
Saint
Saint
added 2006/05/03 12:0 a.m.28 views

Internet Explorer IFRAME buffer overflow

Added: 05/03/2006 CVE: CVE-2004-1050 BID: 11515 OSVDB: 11337 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A buffer overflow when processing the name attribute in an IFRAME tag allows command execution when a malformed web page ...

10CVSS6.6AI score0.67061EPSS
Exploits4
Saint
Saint
added 2006/05/03 12:0 a.m.30 views

Internet Explorer IFRAME buffer overflow

Added: 05/03/2006 CVE: CVE-2004-1050 BID: 11515 OSVDB: 11337 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A buffer overflow when processing the name attribute in an IFRAME tag allows command execution when a malformed web page ...

10CVSS6.6AI score0.67061EPSS
Exploits4
Saint
Saint
added 2006/05/03 12:0 a.m.24 views

Internet Explorer IFRAME buffer overflow

Added: 05/03/2006 CVE: CVE-2004-1050 BID: 11515 OSVDB: 11337 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A buffer overflow when processing the name attribute in an IFRAME tag allows command execution when a malformed web page ...

10CVSS6.6AI score0.67061EPSS
Exploits4
Prion
Prion
added 2006/04/25 12:50 p.m.16 views

Buffer overflow

Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which causes a reference to a deleted controller contex...

5.1CVSS8.2AI score0.51346EPSS
Exploits1References24Affected Software1
NVD
NVD
added 2006/04/25 12:50 p.m.17 views

CVE-2006-1993

Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which causes a reference to a deleted controller contex...

5.1CVSS7.9AI score0.51346EPSS
Exploits1References24
CVE
CVE
added 2006/04/25 10:0 a.m.86 views

CVE-2006-1993

CVE-2006-1993 – Firefox focus() designMode vulnerability : A flaw in the JavaScript focus implementation allowed a remotely triggered crash and, in theory, arbitrary code execution by referencing a deleted controller context object when contentWindow.focus is used inside an iframe with designMode...

5.1CVSS7.8AI score0.51346EPSS
Exploits1References24Affected Software1
RedHat Linux
RedHat Linux
added 2006/04/21 3:41 p.m.2 views

security flaw

The WYSIWYG rendering engine "rich mail" editor in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which i...

9.3CVSS5.8AI score0.07066EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2006/04/18 11:12 a.m.6 views

security flaw

The WYSIWYG rendering engine "rich mail" editor in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which i...

9.3CVSS5.8AI score0.07066EPSS
Exploits1References4
securityvulns
securityvulns
added 2006/04/02 12:0 a.m.34 views

linksubmit <= All version Html Tag Injector in index.php

Vendor : linksubmit Version : All Version www : http://www.phpselect.com AUTHOR : s3rv3rhack3r you can submit html tag's in $description linksubmit.php Exploit : !/usr/bin/perl Exploit by s3rv3rhack3r Special Thanx : hessamx , f0rk ,sattar.li , stanic, mfox,blood moon and.. / | | | / / | |/ // / ...

0.1AI score
Exploits0
Rows per page
Query Builder