4495 matches found
[Full-disclosure] Privilege escalation in Linksys WLAN Monitor v2.0.
Summary: Privilege escalation in Linksys WLAN Monitor v2.0 http://www.linksys.com/ Details: The Linksys WLAN Monitor service WLSVC that is used to configure settings for various Linksys wireless network cards runs under the context of the LocalSystem account. It is possible to manipulate the...
USN-155-1: Mozilla vulnerabilities
Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious web site to spoof the contents of other web sites. CAN-2005-1937 It was discovered that a malicious website could...
USN-149-1: Firefox vulnerabilities
Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious web site to spoof the contents of other web sites. CAN-2005-1937 In several places the browser user interface did not...
Javascript prompt origin spoofing — Mozilla
Alerts and prompts created by scripts in web pages are presented with the generic title JavaScript Application which sometimes makes it difficult to know which site created them. A malicious page could attempt to cause a prompt to appear in front of a trusted site in an attempt to extract...
Apple Safari automatically installs Dashboard widgets
Overview Apple Safari on Mac OS X Tiger automatically installs Dashboard widgets without user intervention or notice. Description DashboardDashboard is a new feature introduced in Apple Mac OS X Tiger 10.4. Dashboard is a collection of applications called "widgets." The system-installed widgets a...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix various bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the Firefox string handling functions. If a malicious website is...
CVE-2004-1428
CVE-2004-1428 affects ArGoSoft FTP Server before 1.4.2.1. The authentication error message differs for nonexistent usernames, enabling remote attackers to enumerate valid usernames. This information disclosure can facilitate dictionary attacks against the remote host. A fix is available: upgrade ...
CVE-2005-0145
CVE-2005-0145 affects Firefox up to version prior to 1.0. The vulnerability arises because Firefox does not properly distinguish between user-generated and synthetic click events, allowing a malicious page to use JavaScript to bypass the file download prompt via the Alt-click feature. Impact is t...
CVE-2005-0145
Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature...
OutlookMuteX.txt
' Recent versions of Outlook, as well as a released patch, ' make Outlook prompt the user whenever a remote appliction ' tries to access specific contact information in the Outlook ' Contact database. The user can then decide to allow or not ' allow the application to get that access. ' ' Microso...
Phishing attack possible with a delayed JavaScript prompt
A malicious page can be crafted to send the userto his banking site, and shortly afterwardsdisplay a dialog enticing the user to type inhis bank login credentials.The dialog will appear in front of the bankingpage, while the window it really belongs to willbe hidden. If the timing and context is...
Phishing attack possible with a delayed JavaScript prompt – Opera Security Advisories
Phishing attack possible with a delayed JavaScript prompt – Opera Security Advisories OPCOM Team | January 5, 2005 Severity: Moderate/low Problem description A malicious page can be crafted to send the userto his banking site, and shortly afterwardsdisplay a dialog enticing the user to type inhis...
CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Remote Buffer Overflow
/ CoffeeCup FTP Clients Buffer Overflow Vulnerability Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on: CoffeeCup Direct FTP 6.2.0.62 CoffeeCup Free FTP 3.0.0.10 on a Windows XP Professional sp2 operating system. This exploit creates a fa...
Mailtraq 2.x - Administration Console Privilege Escalation
source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the administration console interface to...
Mailtraq 2.x - Administration Console Privilege Escalation
Mailtraq 2.x - Administration Console Privilege Escalation source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local use...
MS Windows JPEG GDI+ Overflow Shellcoded Exploit
Exploit for unknown platform in category remote exploits ================================================ MS Windows JPEG GDI+ Overflow Shellcoded Exploit ================================================ // launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ //...
Altiris Deployment Solution < 6.9.176 Multiple Vulnerabilities
Binary data 4504.prm...
IE 6 Print Without Prompt
Ben Garvey Application: Microsoft Internet Explorer Versions: 6.0 Platforms: Windows Bugs: IE 6 allows JavaScript to send documents to the printer without prompting the user. Exploitation: Client Date: 12 April 2004 Author: Ben Garvey [email protected] http://www.bengarvey.com Bugtraq report...
MSIE.printer.txt
Ben Garvey Application: Microsoft Internet Explorer Versions: 6.0 Platforms: Windows Bugs: IE 6 allows JavaScript to send documents to the printer without prompting the user. Exploitation: Client Date: 12 April 2004 Author: Ben Garvey [email protected] http://www.bengarvey.com Bugtraq report...
Lovgate Virus Detection
The remote host seems to be infected with the 'lovgate' virus which opens a command prompt shell on this port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11633; scriptversion "1.13"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Lovgate Virus Detection";...