5660 matches found
Domain Analyzer Security Tool - Finds all the security information for a given domain name
Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way. Features It creates a directory with all the information, including nmap output files. It uses colors to remark...
Mozilla 1.x,opera 6/7 Timed Document.Write Method Cross Domain Policy Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7847/info It has been reported that under some circumstances, it is possible violate the cross-domain restriction of browser security. Because of this, an attacker may be able to execute a file across domains and in the...
ISC BIND 8.1 host Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1887/info An exploitable buffer overflow vulnerability exists in certain non-current versions of the ISC host command. host can be used to issue an AXFR command to effect a zone transfer for a given domain name. In affect...
SMC Router 1.2x Random UDP Packet Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8711/info A denial of service has been reported in the SMC SMC2404WBR BarricadeT Turbo 11/22 Mbps Wireless Cable/DSL Broadband Router. It is possible to trigger this condition by sending UDP packets randomly to ports...
Maxthon3 about:history XCS Trusted Zone Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Microsoft Internet Explorer 5 NavigateAndFind() Cross-Zone Policy Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9568/info A vulnerability has been reported in Microsoft Internet Explorer. Because of this, an attacker may be able to violate cross-zone policy. It has been reported that the issue presents itself due to a failure by...
Microsoft Internet Explorer 6.0 - Local Resource Reference Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8886/info Microsoft Internet Explorer is prone to an issue that may allow for unauthorized access to local resources. Internet Explorer version 6 SP1 imposed restrictions to limit remote sites from accessing local resourc...
TSguestbook 2.1 Message Field HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8520/info It has been reported that TSguestbook may be prone to HTML injection attacks. The problem is said to occur due to insufficient sanitization of user-supplied input within the 'message' field. As a result, an...
Opera Web Browser 7 IFRAME Zone Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8887/info A flaw in the Opera web browsers security model has been discovered that could allow an attacker to access a users filesystem within the Local Zone. The problem occurs when handling malformed HTML iframes which...
Microsoft Windows XP HCP URI Handler Abuse Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5478/info Microsoft Internet Explorer on Windows XP comes equipped with a protocol handler for the 'Help and Support Center' application. The protocol handler may be specified in links, and when such a link is submitted b...
MS IE 5 IFrame/Frame Cross-Site/Zone Script Execution Vulnerability
No description provided by source...
Vastal I-Tech Agent Zone (search.php) Blind SQL Injection Vulnerability
No description provided by source. Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step...
Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit
No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at info-pull.com Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can...
V3 Chat Live Support 3.0.4 - Insecure Cookie Handling Vulnerability
No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...
Microsoft Internet Explorer 5.0.1 ITS Protocol Zone Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9658/info Microsoft Internet Explorer has been reported prone to a vulnerability that may permit hostile content to be interpreted in the Local Zone. The issue may be exploited via the ITS InfoTech Storage Protocol URI...
Joomla Component com_noticias 1.0 - SQL Injection Vulnerability
No description provided by source. CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ joomla comnoticiasSQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net/ WHEN YOU PUT THIS SQL CODE YOU LL SEE ADMÝN NAME,ADMIN HASH AND EMAÝL DorK : ''comnoticias''...
Microsoft Internet Explorer 5.0.1 JavaScript Method Assignment Cross-Domain Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10689/info A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itself due to a failure to properly validate trust...
SDP Downloader 2.3.0 - (.ASX) Local Buffer Overflow Exploit (SEH) (2)
No description provided by source. / SDP-BOF.c SDP Downloader Local Buffer overflow exploit SEH Credits : Cyber-Zone Exploit BY : SimO-s0fT [email protected] Shoot to : Stack & r1z & Str0ke / include stdio.h include string.h include stdlib.h define OFFSET 529 define NOP 0x90 char...
Vastal I-Tech Cosmetics Zone 'view_products.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36485/info Cosmetics Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...
Vastal I-Tech Agent Zone SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36503/info Agent Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...