CVE-2006-3923

CVE-2006-3923 affects Fire-Mouse Toplist 1.1 and earlier. The vulnerability is an XSS in add.php that can be triggered when register_globals is enabled , allowing remote attackers to inject arbitrary script or HTML via the Seitenname parameter. The underlying issue is improper handling of user-su...

[MajorSecurity #24] Fire-Mouse TopList <=v1.1 - Cross Site Scripting

MajorSecurity 24 Fire-Mouse TopList =v1.1 - Cross Site Scripting ---------------------------------------------------------------------------------------- Software: Fire-Mouse TopList v1.1 Version: 1.1 Type: Cross site scripting Vendor: Fire-Mouse.com Page: http://www.fire-mouse.com TIMELINE:...

Stack overflow

Stack-based buffer overflow in the info tip shell extension zipinfo.dll in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an 1 ACE, 2 RAR, or 3 ZIP archive, which is triggered when the user moves the mouse over the archive...

msieCrashMouse.txt

Title: Microsoft Internet Explorer - Crash on mouse button click Author: Kil13r - http://www.kil13r.info/ Local / Remote: Both Date of discovery: 2003/12/28 Release date: 2006/05/20 Affected software: Microsoft Internet Explorer Description: There is a bug in Microsoft Internet Explorer, which...

Hooked on prank-vulnerability warning-the black bar safety net

PS. Today on hard disk search for things when there is such an article..... Have been writing for a long time...forget the issue here...are fast becoming my hard disk a program on fossils...... The program did not have any technology, we looked to play it, useful to take to go.... Want to write a...

Opera < 8.02 Multiple Vulnerabilities

The remote host is using Opera, an alternative web browser. The version of Opera installed on the remote host contains several flaws. One involves imaging dragging and could result in cross-site scripting attacks and user file retrieval. A second may let attackers spoof the file extension in the...

CVE-2005-0821

Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...

CVE-2005-0839

Linux kernel 2.6 before 2.6.11 does not restrict access to the NMOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions...

CVE-2005-0839

Linux kernel 2.6 before 2.6.11 does not restrict access to the NMOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions...

security flaw

Linux kernel 2.6 before 2.6.11 does not restrict access to the NMOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions...

CVE-2005-0839

Linux kernel 2.6 before 2.6.11 does not restrict access to the NMOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions...

PT-2005-1868 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.11 Description: The issue allows local users to gain privileges by injecting mouse or keyboard events into other user sessions due to a lack of access restriction to the N MOUSE line discipline for a TTY...

CVE-2005-0821

Citrix MetaFrame Conferencing Manager 3.0 is cited as vulnerable in CVE-2005-0821, with the issue described as a bypass of organizer restrictions that allows conference members to control the keyboard and mouse. The connected documents confirm the affected product and the general impact but do no...

CVE-2005-0821

Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...

Microsoft Internet Explorer 5.0.1 - Mouse Event URI Status Bar Obfuscation

source: https://www.securityfocus.com/bid/12541/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue presents itself when a HREF tag contains certain mouse events. This issue may be leveraged by an attacker to display false information in the status bar or U...

OutlookMuteX.txt

' Recent versions of Outlook, as well as a released patch, ' make Outlook prompt the user whenever a remote appliction ' tries to access specific contact information in the Outlook ' Contact database. The user can then decide to allow or not ' allow the application to get that access. ' ' Microso...

Microsoft Windows - JPEG Processing Buffer Overrun (MS04-028)

Microsoft Windows - JPEG Processing Buffer Overrun MS04-028 !/bin/sh The JPEG vuln is triggered by the 0 or 1 length field with an integer flaw The crafted JPEG header makes Windows crash a couple of different ways 1 First, it crashes when the image is opened. 2 Second, it crashes when hovering t...

Multiple Microsoft Internet Explorer crossite scripting bugs

Same name function redirection crossite scripting, ADODB.Stream vulnerability variant Shell.Application, mouse click hijacking with Popup.show, Media Preview crossite scripting, drag-n-drop files to shell:Startup...

Microsoft Internet Explorer 5.0.1 - Popup.show Mouse Event Hijacking

source: https://www.securityfocus.com/bid/10690/info A vulnerability exists in Microsoft Internet Explorer that may permit a malicious Web page to hijack mouse events. This could potentially be exploited to trick an unsuspecting user into performing unintended actions such as approving pop-up...

Microsoft Internet Explorer 5.0.1 - Popup.show Mouse Event Hijacking

Microsoft Internet Explorer 5.0.1 - Popup.show Mouse Event Hijacking source: https://www.securityfocus.com/bid/10690/info A vulnerability exists in Microsoft Internet Explorer that may permit a malicious Web page to hijack mouse events. This could potentially be exploited to trick an unsuspecting...