RemotelyAnywhere - Default.HTML Logout Message Injection

source: https://www.securityfocus.com/bid/9202/info RemotelyAnywhere has been reported prone to a logout message injection weakness. It has been reported that this issue presents itself due to a lack of sufficient restrictions performed by RemotelyAnywhere on user supplied 'reason' URI parameters...

gaimexploit.txt

It has come to my attention that people have actually used this example code for a gaim plugin: AIM::register"Festival TTS", "0.0.1", "goodbye", ""; AIM::print"Perl Says", "Loaded Festival TTS"; AIM::command"idle", "60000" if $pro ne "Offline"; AIM::addeventhandler"eventimrecv", "synthesize"; sub...

CVE-2002-0980

The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error message file via a mhtml: URL...

CVE-1999-1033

Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang...

POP3Lite 0.2.3b minor client side DoS and message injection

vulnerable POP3Lite = 0.2.3b not vulnerable POP3Lite = 0.2.4 abstract POP3Lite is a modular POP3 daemon developed to be fast, flexible and easy to use. It runs on Linux and BSD. POP3Lite fails to escape dots in messages it transfers to clients. Clients popping their mail from a vulnerable POP3Lit...

O'Reilly WebBoard 4.10.30 JavaScript code execution problem

I found following problem in the WebBoard: The Board has a paging function. User A can send a message to user B. User B gets a javascript popup produced with alert with the message from user A. The problem is that user A can close the alert function and so he can execute his javascript code on us...