41 matches found
EUVD-2002-1476
Malware in sbrugna...
EUVD-2006-2805
Malware in sbrugna...
angelfire.lycos.com Cross Site Scripting vulnerability OBB-3846793
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
angelfire.lycos.com Cross Site Scripting vulnerability OBB-3472892
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
registration.lycos.co.uk Cross Site Scripting vulnerability OBB-3127857
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tripod.lycos.com Cross Site Scripting vulnerability OBB-2165883
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
registration.lycos.com Cross Site Scripting vulnerability OBB-1392759
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
search6.lycos.com XSS vulnerability
Open Bug Bounty ID: OBB-622952 Description| Value ---|--- Affected Website:| search6.lycos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
jobs.lycos.at XSS vulnerability
Open Bug Bounty ID: OBB-603495 Description| Value ---|--- Affected Website:| jobs.lycos.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
jobs.lycos.com XSS vulnerability
Open Bug Bounty ID: OBB-555883 Description| Value ---|--- Affected Website:| jobs.lycos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
LYCOS Cloud Service Detection
Binary data 8469.prm...
kawf <= 1.0 (main.php) Remote File Include Vulnerability
No description provided by source. kawf config Remote File Include --------------------------------------------------------------------------------------------- Kawf is a web forum written in PHP4 using MySQL v. 1.0 and all below...
Lycos HTMLGear guestGear CSS HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5728/info Lycos htmlGEAR guestGEAR does not sanitize HTML from CSS Cascading Style-Sheets elements in guestbook fields. An attacker could capitalize on this situation to include arbitrary HTML and script code in a guestbo...
PHP Forge 3 Beta 2 - id SQL Injection
PHP Forge 3 Beta 2 - id SQL Injection ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0...
Heap overflow
Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party informatio...
CVE-2008-0443
Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party informatio...
Lycos文件上传组件'FileUploader.dll' ActiveX控件缓冲区溢出漏洞
Lycos FileUploader是一款文件上传组件。 Lycos FileUploader包含的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建恶意的WEB页,诱使用户打开,可导致以应用程序进程权限执行任意指令. Lycos FileUploader.dll 2.0 2 目前没有详细解决方案提供...
CVE-2008-0443
Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party informatio...
lycos-overflow.txt
Lycos FileUploader Control Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...
Lycos FileUploader Control ActiveX Remote Buffer Overflow Exploit
No description provided by source. !-- Lycos FileUploader Control Buffer Overflow Exploit written by e.b. Note: If IE doesn't crash, the shellcode will get executed when IE is closed. Tested on Windows XP SP2fully patched English, IE6, FileUploader.dll version 2.0.0.2...