Memory corruption

Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a crafted Cascading Style Sheets CSS tag that triggers memory corruption...

CVE-2007-2718

Cross-site scripting XSS vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags...

security flaw

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an 1 img, 2 link, or 3 style tag, which...

jgbbs-sql.txt

JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-13 Product / Vendor : JGBBS Is a Tree-style Online Forum System http://sourceforge.net/projects/jgbbs/ Bug : http://localhost/script/search.asp?author=-SQL Inj.-&bid=0 SQL Injection Exploi...

JGBBS 3.0beta1 (search.asp author) SQL Injection Exploit

No description provided by source. JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit SQL Injection Code input name="author" type="text" value="UniquE-Key'UNION SELECT...

JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit

JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-13 Product / Vendor : JGBBS Is a Tree-style Online Forum System http://sourceforge.net/projects/jgbbs/ Bug : http://localhost/script/search.asp?author=-SQL Inj.-&bid=0 SQL Injection Exploi...

Macrovision / InstallShield InstallFromTheWeb buffer overflows

Overview Macrovision / InstallShield InstallFromTheWeb contains multiple buffer overflows, which could allow an attacker to execute arbitrary code on a vulnerable system. Description InstallShield InstallFromTheWeb is a web-based software installation product for Microsoft Windows systems...

[Full-disclosure] CVSTrac 2.0.0 Denial of Service (DoS) vulnerability

SECURITY ADVISORY ================= Application: CVSTrac Version: 2.0.0 Vulnerability: Denial of Service DoS Identification: CVE-2007-0347 Date: 2007-01-29 12:00 UTC DESCRIPTION ----------- A Denial of Service DoS vulnerability exists in CVSTrac http://www.cvstrac.org/ version 2.0.0, a web-based...

Bradabra <= 2.0.5 (include/includes.php) Remote Inclusion Vulnerability

No description provided by source. ====================================================================== Bradabra == v2.0.5 Remote File Include Vulnerability ====================================================================== Downlaoad Script :ftp://ftp1.comscripts.com/PHP/773bradabra-205.gz...

XSS 0DAY-vulnerability warning-the black bar safety net

See dream light out! I also do not hide! 1 0 On 7, When I sent the logs,prompting everyone! Here was the last issued byXSS WORM beginning to try to continue it. Actually very simple,is two times the transfer code. DIV STYLE="background-image: urljavascript:var XmlHttp=new ActiveXObject"Microsoft...

CVE-2006-5712

Cross-site scripting XSS vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets CSS function, as demonstrated using the width style for an IMG element...

CVE-2006-5712

Technical details (affected product/version, root cause, impact, or remediation) are not publicly provided in the connected documents for CVE-2006-5712. Monitor for updates.

[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Web Mail platform by "Mirapoint"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Web Mail platform by "Mirapoint" Discovered Date: 19/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.mirapoint.com/ Details: Mirapoint Web Mail platform is prone to a Cross Site...

Cross Site Scripting (XSS) Vulnerability in Web Mail service by "Walla! Communications LTD"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Web Mail service by "Walla! Communications LTD" Discovered Date: 05/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.walla.co.il/ Details: Walla! Communications LTD Web Mail servic...

Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" Discovered Date: 25/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.sun.com/ Details: iPlanet Messaging Server Messenger Expres...

Update Protection against Microsoft Internet Explorer Memory Corruption Vulnerabilities (MS06-042)

Microsoft Internet Explorer is prone to multiple memory corruption vulnerabilities. The application fails to properly handle un-initialized COM objects and chained Cascading Style Sheets CSS. This flaw allows attackers to cause denial of service and possibly to execute arbitrary code by convincin...

Microsoft Excel fails to properly process malformed STYLE records

Overview Microsoft Excel contains a vulnerability in the handling of malformed STYLE records, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Excel contains a vulnerability that could be exploited when Excel opens a...

CVE-2006-4619

The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain system privileges via a "Shatter" style attack on the 1 IParam parameter, and the 2 PBMGETRANGE and 3 PBMSETRANGE messages in an unspecified progress bar. NOTE: some details are...

CVE-2006-4619

The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain system privileges via a "Shatter" style attack on the 1 IParam parameter, and the 2 PBMGETRANGE and 3 PBMSETRANGE messages in an unspecified progress bar. NOTE: some details are...

CVE-2006-3450

Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet CSS elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file...