Webhints <= 1.03 Remote Command Execution Exploit (perl code) (1)

Exploit for cgi platform in category web applications ================================================================= Webhints mhp0rtal -- oilKarchack -- The-CephaleX -- Str0ke...

php2014.txt

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 14 - 17/04/05 -------------------------------------------------------- Program: phpBB 2.0.14 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.14 & Lower versions Risk: Low Risk!! Impact:...

CVE-2005-1477

CVE-2005-1477 describes an arbitrary JavaScript execution flaw in Firefox 1.0.3 via the installer’s IconURL handling, enabling code execution with chrome privileges when a trusted extension install site (e.g., update.mozilla.org/addon.mozilla.org) is used, potentially chaining with CVE-2005-1476....

CVE-2005-0817

Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites...

CVE-2005-1186

Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting XSS attacks...

CVE-2005-1186

Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting XSS attacks...

CVE-2005-1186

The CVE-2005-1186 entry affects Musicmatch Jukebox 10.00.2047 and earlier. The root cause is that the software adds the musicmatch.com domain to the Internet Explorer Trusted Sites zone, which can enable unauthorized activities within a domain and is demonstrated via cross-site scripting (XSS) at...

CVE-2005-1301

nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote malicious web sites to write arbitrary files...

Microsoft Internet Explorer 5.0.1 - DHTML Object Race Condition Memory Corruption

Microsoft Internet Explorer 5.0.1 - DHTML Object Race Condition Memory Corruption source: https://www.securityfocus.com/bid/13120/info A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This iss...

DeluxeFTP FTP client weak permissions

FTP sites accounts are stored in world readable file...

Microsoft Internet Explorer 5.0.1 - DHTML Object Race Condition Memory Corruption

source: https://www.securityfocus.com/bid/13120/info A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This issue presents itself the affected application attempts to process certain script...

Microsoft Internet Explorer DHTML Object Race Condition Memory Corruption Vulnerability

Description A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This issue presents itself the affected application attempts to process certain script objects, a race condition may lead to the...

CVE-2005-0905

CVE-2005-0905 relates to Maxthon 1.2.0, where remote websites could obtain potentially sensitive data from the browser’s search bar via the m2_search_text property. The available documents identify the affected product/version and the vulnerable data exposure mechanism but do not provide explicit...

CVE-2002-1647

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2005-0587

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK link file twice, which overwrites the file that was referenced in the first .LNK file...

CVE-2005-0587

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK link file twice, which overwrites the file that was referenced in the first .LNK file...

CVE-2005-0585

Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks...

CVE-2005-0817

Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites...

CVE-2005-0817

CVE-2005-0817 affects Symantec Gateway products by a DNS proxy service (DNSD.exe) that caches DNS responses without proper verification, enabling DNS cache poisoning and potential site spoofing/Man-in-the-Middle. Affected products include DNS proxy/cache in Symantec Gateway Security 5400/5300, En...

CVE-2002-1591

AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to Internet Explorer’s Trusted Sites Zone without user approval, potentially allowing code from that domain to bypass access restrictions. The connected documents provide AIM as the affected product and indicate the root cause is improper Tru...