Google Toolbar Local zone scripting

By using resource from GoogleToolbar1.dll it's possible to execute scripting in local zone...

CVE-2004-0820: Undefined Security Weakness

Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...

CVE-2002-0615

The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML scripts in the Local Computer zone, aka "Media Playback Script Invocation"...

CVE-2002-0694: Undefined Security Weakness

The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to...

CVE-2002-0615: Undefined Security Weakness

The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML scripts in the Local Computer zone, aka "Media Playback Script Invocation"...

VulnCheck KEV: CVE-2004-0820

Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...

DNS Server Zone Transfer Allowed

Binary data 1017.prm...

CVE-2004-0727

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as...

CVE-2004-0727

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as...

CVE-2004-0727

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as...

CVE-2004-0727: Undefined Security Weakness

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as...

Two Vulnerabilities in Mozilla may lead to remote compromise

Two Vulnerabilities in Mozilla may lead to remote compromise. =--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--= ---------------------- Vendor Information: ---------------------- Homepage : http://www.mozilla.org Vendor : informed on 11/06/04 Mailed advisory: 13/06/04 Vender Response :...

Media Preview Script Execution Vulnerability

Note: This vulnerability as well as several more can be found at http://www.geryhats.cjb.net Media Preview Script Execution Vulnerability Tested MSDXM.DLL file version 6.4.09.1128 Microsoft Windows 2000 Discussion By using the windows media player control, media can be played in a browser,...

Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting

Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting source: https://www.securityfocus.com/bid/10689/info A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itsel...

[Full-Disclosure] ZH2004-14SA (security advisory):Sql Injection in Infinity WEB

06/27/2004 Vendor contacted: June 1st 2004 Published: June 26th 2004 Title: Infinity WEB Vulnerable versions :1.0 unpatched Type: Sql Injection Author: D'Amato Luigi from Zone-h Security Labs - [email protected] - [email protected] Vendor: http://www.websoft.it/ Description...

[Full-Disclosure] ZH2004-13SA (security advisory): Sql Injection in Help Desp Pro 2.0

26/06/2004 ZH2004-10SA security advisory: Sql Injection in Help Desp Pro 2.0 Date of discovery : 1 Giugno 2004 Date of release 26 Giugno 2004 Nome: Help Desk Pro Vulnerable Version: 2.0 non patchato Vulnerability: Sql Injection Autore: D'Amato Luigi from Zone-h Security Labs -...

Microsoft Internet Explorer 5.0.1 / Opera 7.51 - URI Obfuscation

source: https://www.securityfocus.com/bid/10517/info A weakness is reported in Microsoft Internet Explorer and Opera allowing an attacker to obfuscate the URI of a link. This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from unsuspecting users...

Microsoft Internet Explorer does not properly validate source of redirected frame

Overview Microsoft Internet Explorer IE does not adequately validate the security context of a frame that has been redirected by a web server. An attacker could exploit this vulnerability to evaluate script in different security domains. By causing script to be evaluated in the Local Machine Zone...

Microsoft Internet Explorer 6 - URL Local Resource Access

source: https://www.securityfocus.com/bid/10472/info Microsoft Internet Explorer is prone to a security weakness that may permit unauthorized access to local resources on a client computer. This will effectively bypass security restrictions implemented in Internet Explorer 6 SP1. Specifically, a...

CVE-2004-0502

CVE-2004-0502 affects Microsoft Outlook 2003. When replying to an email, Outlook 2003 stores certain files in a predictable location used as the src of an img tag in the original message. This behavior can allow remote attackers to bypass zone restrictions and potentially exploit other issues tha...