42 matches found
CVE-2021-44585
A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...
Cross site scripting
A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...
CVE-2021-44585
A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...
CVE-2021-44585
A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...
PT-2022-12176
Name of the Vulnerable Software and Affected Versions jeecg-boot version 3.0 Description A Cross Site Scripting XSS issue exists in jeecg-boot, specifically in the /jeecg-boot/jmreport/view endpoint with a mouseover event. This issue is related to jeecg-boot being a code generator. Recommendation...
CVE-2021-44585: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...
New critical vulnerability discovered in open-source office suites
A great number of attack techniques these days are using Microsoft Office documents to distribute malware. In recent years, there has been serious development on document exploit kit builders, not to mention the myriad of tricks that red-teamers have come up with to bypass security solutions. In...
Zusy Malware Installs Via Mouseover – No Clicking Required
Researchers are warning of several recent spam campaigns delivering PowerPoint files that when opened contain a mouseover link that installs a variant of the Zusy malware. The malware is novel because it does not rely on macros, JavaScript or VBA macros to be enabled for the dropper file to...
HackerOne: Deleted name still present via mouseover functionality for user accounts
Hey guys, So this isn't really a security bug or a big information disclosure. However, I noticed that if a user removes their name "Eric Angeles" from their account page https://hackerone.com/exodiaforbiddenone it will still be visible by mousing over the users handle on a disclosed report...
Qualcomm Eudora 6.x Embedded Hyperlink URI Obfuscation Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10305/info It has been reported that the Qualcomm Eudora MTA is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatted in such a way that a ...
Mozilla Browser 1.5 URI MouseOver Obfuscation Weakness
No description provided by source. source: http://www.securityfocus.com/bid/9203/info It has been discovered that the Mozilla browser is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatted in such a way that a NUL...
Microsoft Internet Explorer 7 - Clickjacking
Microsoft Internet Explorer 7 - Clickjacking Application Name : Ä°nternet Explorer 7 Vulnerable Type : Clickjacking Author : UzmiX function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'open'.style.left=mouseX-2;...
New DoS vulnerability in Google Chrome (DoS on MouseOver)
Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Denial of Service уязвимости в Google Chrome. Браузер Chrome уязвим к DoS-атаке, в связи с тем, что при наведении курсора на специально созданную ссылку браузер не может её отобразить в статусбаре и вылетает DoS при MouseOver. Для демонстрац...
MouseoverDictionary vulnerable to arbitrary script execution
Overview MouseoverDictionary, an add-on for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an arbitrary script. MouseoverDictionary, an add-on mouseover English-Japanese dictionary for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an...
Cross site scripting
Cross-site scripting XSS vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim...
CVE-2008-0354: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim...
[NT] Microsoft Internet Explorer Drag-and-Drop Redeux
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2005-0374: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Bitboard 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via an img bbcode image tag with an event such as mouseover...
Qualcomm Eudora 6.x - Embedded Hyperlink URI Obfuscation
Qualcomm Eudora 6.x - Embedded Hyperlink URI Obfuscation source: https://www.securityfocus.com/bid/10305/info It has been reported that the Qualcomm Eudora MTA is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatte...
Qualcomm Eudora 6.x - Embedded Hyperlink URI Obfuscation
source: https://www.securityfocus.com/bid/10305/info It has been reported that the Qualcomm Eudora MTA is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatted in such a way that a "^A" control character is located...