Design/Logic Flaw

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by...

CVE-2011-4850

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by...

CVE-2011-4756: Exposure of Sensitive Information to an Unauthorized Actor

Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by domains/sitebuilderedit.p...

CVE-2011-4729: Undefined Security Weakness

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by...

Microsoft Internet Explorer Shift JIS字符编码信息泄露漏洞

Bugtraq ID: 49032 CVE ID：CVE-2011-1962 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer Shift JIS字符编码处理存在安全问题，允许脚本访问其他域或Internet Explorer域中敏感信息。攻击者可以向WEB站点注入特制字符串来利用此楼哦的那个，当用户查看WEB站点时泄露敏感信息 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer...

CVE-2011-1245

Microsoft Internet Explorer 6 and 7 does not properly restrict script access to content from a 1 different domain or 2 different zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Javascript Information Disclosure Vulnerability."...

Information disclosure

Microsoft Internet Explorer 6 and 7 does not properly restrict script access to content from a 1 different domain or 2 different zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Javascript Information Disclosure Vulnerability."...

CVE-2011-1245

Microsoft Internet Explorer 6 and 7 does not properly restrict script access to content from a 1 different domain or 2 different zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Javascript Information Disclosure Vulnerability."...

Flash Player (Flash6.ocx) Denial Of Service

PARAM NAME="AllowScriptAccess"...

CVE-2010-3330

Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different 1 domain or 2 zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Cross-Domain Information Disclosure Vulnerability."...

PT-2010-4741 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 8 Description: The issue allows remote attackers to obtain sensitive information via a crafted web site due to improper restriction of script access to content from a different domain or zone. An...

For IIS write permissions for the simple analysis-vulnerability warning-the black bar safety net

//Or to be symbolic of a copyright, reproduced, please indicate the b0r3d's blog http://www.b0r3d.org //Last month to the Black hand cast went, people since there is no published, I will send to it, after all the articles of original content is too small, the technical content is not high. Recent...

Script access to .documentURI and .textContent in mail — Mozilla

Mozilla developer Boris Zbarsky reported that a malicious mail message might be able to glean personal information about the recipient from the mailbox URI such as computer account name if the mail recipient has enabled JavaScript in mail. If a malicious mail is forwarded "in-line" to a recipient...

Wonderful with IIS write permissions to trigger the backdoor-vulnerability warning-the black bar safety net

Mentioned Microsoft IIS, many people will think of“vulnerability”: UNICODE, CGI parsing, ida, idq, a Printer and other remote overflow, and the front of last year's webdav remote overflow, etc., really the so-called“porous”in. These are the IIS itself, the application vulnerability, as long as by...

security flaw

Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations...

security flaw

The mbparsestr function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal registerglobals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with registerglobals functionality that is not...

Opera 9.10 - Configuration Overwrite (Metasploit)

Opera 9.10 - Configuration Overwrite Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Opera 9 Configuration Overwrite

Opera web browser in versions use exploit/multi/browser/opera/configoverwrite msf undefinedconfigoverwrite show actions ...actions... msf undefinedconfigoverwrite set ACTION msf undefinedconfigoverwrite show options ...show and set options... msf undefinedconfigoverwrite run This module requires...

CVE-2002-1715

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...

BetaParticle blog 2.03.0 - myFiles.asp File Manipulation

BetaParticle blog 2.03.0 - myFiles.asp File Manipulation source: https://www.securityfocus.com/bid/12861/info betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported: It is reported that betaparticle blog fails to sufficiently secure the...