4774 matches found
Downloading executables with "Save Image As..." — Mozilla
By layering a transparent image link to an executable on top of a visible and presumably desirable image a malicious site might be able to convince some visitors to right-click and choose "Save image as..." from the context menu and fool them by giving them the executable instead. When the users...
Improper access control
Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages...
CVE-2006-1227
Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages...
CVE-2006-1227
Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages...
drupal -- multiple vulnerabilities
Drupal reports: Mail header injection vulnerability. Linefeeds and carriage returns were not being stripped from email headers, raising the possibility of bogus headers being inserted into outgoing email. This could lead to Drupal sites being used to send unwanted email. Session fixation...
Analysis from Autorun. inf file of the attack-vulnerability warning-the black bar safety net
Recently the popular online via the AutoRun. inf file so that the each other all the hard drive completely shared, or in the Trojan horse method, since the AutoRun. inf files in hack technology the application is still very rare, the corresponding data is not much, there are a lot of people feel...
Session fixation
Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an administrative menu via a telnet session...
CVE-2006-0789: Undefined Security Weakness
Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an administrative menu via a telnet session...
The Windows in the DLL Files the basic principle and modified method-vulnerability warning-the black bar safety net
A DLL file is common sense DLL is a Dynamic Link Library acronym meaning Dynamic Link Library. In Windows, many applications are not a complete executable file, which is divided into a number of relatively independent Dynamic Link Library that DLL file, placed in the system. When we execute a...
CVE-2005-4414
Unspecified vulnerability in Teamwork 3 before alpha 1.7 has unknown impact and attack vectors, related to "a menu security bug."...
CVE-2005-4414
Technical details for CVE-2005-4414 are not publicly available in the provided documents. Monitor for updates.
CVE-2005-4414
Unspecified vulnerability in Teamwork 3 before alpha 1.7 has unknown impact and attack vectors, related to "a menu security bug."...
CVE-2005-4414: Undefined Security Weakness
Unspecified vulnerability in Teamwork 3 before alpha 1.7 has unknown impact and attack vectors, related to "a menu security bug."...
flat.txt
Description: A PHP Website Engine not using any database. Support for different languages. Using the directory-structure for menue creation. Directory names are the menue topicscategories, filenames beneath are menue items. XHTML compliant. Supports Modules like P version: flatCMS 1.01 vendor:...
CVE-2003-1251
The 1 menu.inc.php, 2 datasets.php and 3 massoperations.inc.php mistakenly referred to as massopeations.inc.php scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a cpath that references a URL on a remote web server that contains the code...
Limbo CMS <=1.0.4.2 XSS
Limbo CMS =1.0.4.2 XSS 2005-10-03 12:37:28 bugtaq at lol dot lt Vulnerability type: Permanent XSS Risk: Moderate A malicious HTML tag can be injected through the Contact menu form. A PM can be send, which will later be red by admins. E.g.: scriptalertdocument.cookie/script Information was provide...
bsod in win32k.sys(Multi-User Win32 Driver)
Hello vuln, OS: Microsoft Windows XP, SP2, other not tested VULNERABILITY: file : win32k.sys version : 5.1.2600.2180 xpspsp2rtm.040803-2158 description : Multi-User Win32 Driver author : 6star aka mg BUG DESCRIPTION: When you try HOW TO CHECK: 1. Click on Desktop to call Context Menu. 2. Then...
Microsoft Windows win32k.sys DoS
WMCLOSE event for active drop-down menu causes system to crash...
sphpblog_vulns.pl.txt
!/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1 Description: This program is for...
Vulnerability in Helpdesk software Hesk 0.92
By The Name Of Allah Vulnerability in Helpdesk software Hesk .. Vulnerability Type : Login into The Administrator Menu With out Password Injected version : Helpdesk software Hesk 0.92 Vulnerability Example http://www.springporttwppd.com/helpdesk/ add : admin.php...