CVE-2005-0145

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature...

CVE-2005-0145: Undefined Security Weakness

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature...

OutlookMuteX.txt

' Recent versions of Outlook, as well as a released patch, ' make Outlook prompt the user whenever a remote appliction ' tries to access specific contact information in the Outlook ' Contact database. The user can then decide to allow or not ' allow the application to get that access. ' ' Microso...

Phishing attack possible with a delayed JavaScript prompt

A malicious page can be crafted to send the userto his banking site, and shortly afterwardsdisplay a dialog enticing the user to type inhis bank login credentials.The dialog will appear in front of the bankingpage, while the window it really belongs to willbe hidden. If the timing and context is...

Phishing attack possible with a delayed JavaScript prompt – Opera Security Advisories

Phishing attack possible with a delayed JavaScript prompt – Opera Security Advisories OPCOM Team | January 5, 2005 Severity: Moderate/low Problem description A malicious page can be crafted to send the userto his banking site, and shortly afterwardsdisplay a dialog enticing the user to type inhis...

CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Remote Buffer Overflow

/ CoffeeCup FTP Clients Buffer Overflow Vulnerability Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on: CoffeeCup Direct FTP 6.2.0.62 CoffeeCup Free FTP 3.0.0.10 on a Windows XP Professional sp2 operating system. This exploit creates a fa...

Mailtraq 2.x - Administration Console Privilege Escalation

Mailtraq 2.x - Administration Console Privilege Escalation source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local use...

Mailtraq 2.x - Administration Console Privilege Escalation

source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the administration console interface to...

MS Windows JPEG GDI+ Overflow Shellcoded Exploit

Exploit for unknown platform in category remote exploits ================================================ MS Windows JPEG GDI+ Overflow Shellcoded Exploit ================================================ // launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ //...

Altiris Deployment Solution < 6.9.176 Multiple Vulnerabilities

Binary data 4504.prm...

IE 6 Print Without Prompt

Ben Garvey Application: Microsoft Internet Explorer Versions: 6.0 Platforms: Windows Bugs: IE 6 allows JavaScript to send documents to the printer without prompting the user. Exploitation: Client Date: 12 April 2004 Author: Ben Garvey [email protected] http://www.bengarvey.com Bugtraq report...

MSIE.printer.txt

Ben Garvey Application: Microsoft Internet Explorer Versions: 6.0 Platforms: Windows Bugs: IE 6 allows JavaScript to send documents to the printer without prompting the user. Exploitation: Client Date: 12 April 2004 Author: Ben Garvey [email protected] http://www.bengarvey.com Bugtraq report...

Lovgate Virus Detection

The remote host seems to be infected with the 'lovgate' virus which opens a command prompt shell on this port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11633; scriptversion "1.13"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Lovgate Virus Detection";...

Microsoft Windows NT cmd.exe buffer overflow

Buffer overflow Windows NT or batch failure Windows 2000 on oversized paths...

Community Vizard Board SQL injection

SQL injection into login protmpt...

CGI bugs

No description provided...

ymxp.txt

Yahoo! Messenger 5,0,0,1061 Buffer Overflow Exploit for Win XP Pro Intro: Proof of concept code for YM Buffer Overflow as discovered in: http://packetstorm.decepticons.org/advisories/misc/yahoo-im.txt Code flow: Overwrite EIP at 218 Point EIP to a "RET" in the memory "RET" jumps to beginning of...

PT-2002-1032 · Sudo · Sudo

Name of the Vulnerable Software and Affected Versions: sudo versions prior to 1.6.6 Description: The issue is caused by an off-by-one error that can result in a heap-based buffer overflow. This may allow local users to gain root privileges via special characters in the -p prompt argument, which a...

CVE-1999-1198

BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges...

CVE-1999-1297

cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters such as those from password prompts via the L2/AGAIN key...