115 matches found
CVE-2008-4382: Undefined Security Weakness
Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service application crash via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters...
CVE-2008-3950
Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...
CVE-2008-3950
Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...
Unfixed XSS vulnerability at www.bargainoutfitters.com
Security researcher tenest, has submitted on 28/10/2007 a cross-site-scripting XSS vulnerability affecting www.bargainoutfitters.com, which at the time of submission ranked 181557 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It i...
Format string
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...
CVE-2007-0148
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...
CVE-2007-0148
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...
CVE-2007-0148: Undefined Security Weakness
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...
OmniWeb Browser < 5.5.2 Javascript alert Function Format String
Binary data 3879.prm...
OmniWeb 5.5.1 - JavaScript alert() Remote Format String (PoC)
OmniWeb 5.5.1 - JavaScript alert Remote Format String PoC MOAB-07-01-2007 / LMH / function boom var str = 'A'; while str.length milw0rm.com 2007-01-07...
OmniWeb 5.5.1 Javascript alert() Remote Format String PoC
Exploit for macOS platform in category dos / poc ========================================================= OmniWeb 5.5.1 Javascript alert Remote Format String PoC ========================================================= MOAB-07-01-2007 / LMH / function boom var str = 'A'; while str.length...
PHP-Nuke <= 7.9 Search XSS Vulnerability
PHP-Nuke = 7.9 Search module XSS Vulnerability It could work on later versions if PHP-Nuke does not patch it. 1: Enter: http://host/modules.php?name=Search 2: Search for: "body onload="alertdocument.cookie // You'll get a javascript alert with your cookie in it. Credits: O.G...
XMB-XSS.txt
NightWarrior nightwarrior771athotmail.com XMB Forum HTML Code Injection http://www.xmbforum.com/ Post This Code: Contact :nightwarrior771athotmail.com NightWarrior...
WebCT 4.1 vulnerable to XSS attacks
The discussion board feature of WebCT is vulnerable to XSS. Here is the proof of concept: When you are composing a new message, in the message field of the form, type this: /pretable background=javascript:alert"XSS Warning" /table Then submit the message. You should see a JavaScript alert box tha...
XSS bug in vBulletin
Vulnerable systems: Jelsoft vBulletin 2.2.9 and prior Exploit: http://www.vbulletin.com/forum/memberlist.php? s=23c37cf1af5d2ad05f49361b0407ad9e&what=""Scriptjavascript:alert document.cookie/Script you can use this code thanx for SP.IC: ?PHP // vBulletin XSS Injection Vulnerability: Exploit // --...