AOL Instant Messenger installer adds "http://free.aol.com" to Trusted Sites Zone in Microsoft Internet Explorer

Overview The installer for AOL Instant Messenger contains a vulnerability that weakens the security settings of Microsoft Internet Explorer. Description There is a vulnerability in the installer for AOL Instant Messenger AIM that silently adds "http://free.aol.com" to the list of Trusted Sites in...

CVE-2002-1591

AOL Instant Messenger AIM 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions...

CGIscript.net - csSearch.cgi - Remote Code Execution (up to 17,000 sites vulnerable)

CGIscript.net - csSearch.cgi - Remote Code Execution up to 17,000 sites vulnerable --------------------------------------------------------------------- Name : csSearch.cgi - Remote Code Execution Date : March 25, 2002 Product : csSearch Version : 2.3 vulnerable Vuln Type : Access Validation Erro...

PostNuke Bugged

Hi everyone, this post is 4 weeks after the original information was made available to the developers, allowing time for many effected users to patch and also the developers to fix / check newer versions. --------- rookidd found another set of vulnerabilities in postnuke, this time in version 7.0...

CVE-2002-0058

Vulnerability in Java Runtime Environment JRE allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in 1 Netscape 6.0 through 6.1 and 4.79 and earlier, 2 Microsoft VM...

Security Bulletin MS01-010

---------------------------------------------------------------------- Title: Patch Available for "Windows Media Player Skins File Download" Vulnerability Date: February 14, 2001 Software: Windows Media Player 7 Impact: Run arbitrary code Bulletin: MS01-010 Microsoft encourages customers to...

Multiple QNX Voyager Issues

Tested Versions: QNX Voyager 2.01B Tested Distributions: QNX Demo Disk Modem v405 QNX Demo Disk Network v405 Distributor: QNX Software Systems Limited http://www.qnx.com Distributor Status: No response after 3 weeks Intro: QNX is a whole operating system aimed at the embedded computing market. Th...

Black Watch Labs Vulnerability Alert

Dear Security Professional, The following vulnerability: "Environment and Setup Variables Can Be Viewed Through DBMan db.cgi Script" is in the text of the message below and has just been posted to the Black Watch Labs Web site at http://www.perfectotech.com/blackwatchlabs/ Thank you, Black Watch...

domino3.txt

L0pht Security Advisory ------------- URL Origin: http://www.l0pht.com/advisories.html Release Date: October 9th, 1998 Application: Lotus Domino Severity: Web users can retrieve sensitive data in many Domino based Internet applications Author: [email protected] Operating Sys: All platforms...

bandwidthrape.txt

Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping Bandwidth Raping...

Microsoft Internet Explorer 45 - DHTML Edit ActiveX Control File Stealing Cross Frame Access

Microsoft Internet Explorer 45 - DHTML Edit ActiveX Control File Stealing Cross Frame Access source: https://www.securityfocus.com/bid/116/info Vulnerabilities in an ActiveX control distributed with Internet Explorer 5 and available for Internet Explorer 4 allow malicous web sites to steal local...

PT-1995-1006 · Satan · Satan

Name of the Vulnerable Software and Affected Versions: SATAN affected versions not specified Description: The issue allows the SATAN session key to be disclosed when the user navigates to other sites using their web browser, potentially enabling root access. Recommendations: At the moment, there ...

MS07-047: Vulnerability in Windows Media Player could allow remote code execution

None None...

MS09-053: Vulnerabilities in FTP Service for Internet Information Services could allow remote code execution

None None...

MS04-041: A vulnerability in WordPad could allow code execution

None None...

Windows Azure Pack: Web Sites V2

Detectoid checks for the existence of Windows Azure Pack: Web Sites V2 or Windows Azure Pack Web Sites V2U1 or Windows Azure Pack Web Sites V2U2 or Windows Azure Pack Web Sites V2U3 or V2U4 or V2U6 13,18 or V2U7 or V2U9 or V2U11 or V2U12...