4295 matches found
CVE-2005-0110
Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function...
CMDExe.txt
This unpatched vulnerability is a variant of the "Auto SP2 RC Exploit" Solution : Set the security level for all zones to "High" in Internet Explorer // index.htm // locate.HHClick;setTimeout"locator.HHClick",100;setTimeout "window.opener=null;window.close",10000 // htm.txt // document.write" par...
MSXPSP2-ieEXP.txt
This is a multi-part message in MIME format. ------=NextPart00000B201C4E9A9.341A2510 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Did they really do a good job on service pack 2? Was it worth the investment that's reported more then the missile defense system? All...
DEBIAN-CVE-2004-0829
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service daemon crash by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2...
Microsoft Internet Explorer SP2 Fully Automated Remote Compromise
Microsoft Internet Explorer SP2 Fully Automated Remote Compromise Dec, 21 2004 Vulnerable ---------- - Microsoft Internet Explorer 6.0 - Microsoft Windows XP Pro SP2 - Microsoft Windows XP Home SP2 Not Tested ------------------------ - Microsoft Windows 98 - Microsoft Internet Explorer 5.x -...
Microsoft Internet Explorer (Windows XP SP2) - HTML Help Control Local Zone Bypass
// sp2rc.htm // localpage.HHClick; setTimeout"inject.HHClick",100; // writehta.txt // Dim Conn, rs Set Conn = CreateObject"ADODB.Connection" Conn.Open "Driver=Microsoft Text Driver .txt; .csv;" & "Dbq=http://server;" & "Extensions=asc,csv,tab,txt;" & "Persist Security Info=False" Dim sql sql =...
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could...
Windows XP SP2 protection bypass
For dialup connection whole network of dynamic IP class is treated as local segment...
Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption
source: https://www.securityfocus.com/bid/12031/info The Windows Media Player ActiveX control is prone to a security weakness. The issue is that the control may be abused by a Web page to change attributes of media files such as MP3. An attacker can influence attributes such as the artist, song...
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration
source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could aid in further attacks. This issue is reported to affect Windows Media...
MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass
Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass ================================================================== Orginal Advisory and exploit by...
Microsoft Internet Explorer 6.0 SP2 - File Download Security Warning Bypass
Orginal Advisory and exploit by cyberflash Vengy Circumvent Windows XP SP2 security features using execCommand 'SaveAs' function! Demonstration: Notice that you don't receive any warning messages such as: "File Download - Security Warning" or "Open File - Security Warning". If "Hide file extensio...
CVE-2004-0985
CVE-2004-0985 is linked to the Drag-and-Drop Vulnerability in Internet Explorer (IE6) and is addressed by Microsoft’s MS05-014/MS05-008 security updates. The connected documents describe a privilege-elevation/remote code execution scenario in IE6 via drag‑and‑drop handling, which could allow savi...
Windows XP SP2 dangerous content filtering protection bypass
Comment in predefined format causes content to bypass protection...
CVE-2004-0839
CVE-2004-0839 is the IE Drag-and-Drop Vulnerability. The connected docs show it as a publicly disclosed CAN-2005-0053 vulnerability, which was addressed by Microsoft security updates MS05-014 and related MS05-008. The vulnerability arises from Internet Explorer handling drag-and-drop events, allo...
CVE-2004-0829
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service daemon crash by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2...
CVE-2004-0829
The provided connected documents confirm CVE-2004-0829 is a DoS vulnerability in Samba prior to 2.2.11, where sending a FindNextPrintChangeNotify without a preceding FindFirstPrintChangeNotify can crash the daemon (as demonstrated by the Windows XP SP2 SMB client). Affected product: Samba (before...
CVE-2002-1413
The CVE-2002-1413 issue concerns Novell Netware RCONAG6 (SP2). When RconJ runs in secure mode, using the Secure IP (SSL) option can allow a remote attacker to bypass authentication due to a failure to validate the user password, potentially granting unauthorized access. The CERT entry (VU-746251)...
CVE-2004-0712
BEA WebLogic Server 8.1 through SP2: The configuration tools (Unix config.sh and Windows config.cmd) create a log file that stores the administrative username and password in cleartext, enabling local privilege escalation. Affected component: WebLogic Server configuration tooling. Root cause: cre...
CVE-2004-0322
Affected software: XMB 1.8 Final SP2. Vulnerability type: multiple cross-site scripting (XSS). Root cause / vectors: manipulation of input parameters and HTML attributes that allow script execution, including (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user paramete...