27 matches found
OmniWeb 5.5.1 - JavaScript alert() Remote Format String (PoC)
OmniWeb 5.5.1 - JavaScript alert Remote Format String PoC MOAB-07-01-2007 / LMH / function boom var str = 'A'; while str.length milw0rm.com 2007-01-07...
OmniWeb 5.5.1 Javascript alert() Remote Format String PoC
Exploit for macOS platform in category dos / poc ========================================================= OmniWeb 5.5.1 Javascript alert Remote Format String PoC ========================================================= MOAB-07-01-2007 / LMH / function boom var str = 'A'; while str.length...
CVE-2005-0236
The International Domain Name IDN support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks...
CVE-2005-0976
AppleWebKit-based browsers (WebCore/WebKit) are affected by CVE-2005-0976, which allows remote attackers to read local files via the XMLHttpRequest component. The vulnerability affects Safari 1.2+ and OmniWeb 5.1+ (and other WebKit-based apps using file: URLs), triggered by attacker‑supplied cont...
CVE-2005-0976
AppleWebKit WebCore and WebKit, as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs...
CVE-2005-0236
This CVE (CVE-2005-0236) applies to Omniweb 5’s International Domain Name (IDN) support. The vulnerability arises from how punycode-encoded domain names are decoded in URLs and SSL certificates, allowing homograph characters from other character sets to be used and potentially spoof trusted domai...
