exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files from Juan Carlos Garcia Cuartango

microsoft-install.txt

Posted Feb 23, 2000

Authored by Juan Carlos Garcia Cuartango

An ActiveX control shipped with IE can be used to install software components signed by Microsoft without prompting the user. This of course raises trust issues. Someone, not necessarily Microsoft, could use this control to install a Microsoft signed component in your system.

tags | exploit, activex

SHA-256 | 00f3f0b2e0d5491b814f02f98a69262203221432818c66cf49198886b616c325

Download | Favorite | View

cuartangojc-clipboard-msie.txt

Posted Aug 17, 1999

Authored by Juan Carlos Garcia Cuartango

MSIE 4 Privacy Issue: clipboard content can be made public by a javascript code two lines long. Exploit code included.

tags | exploit, javascript

SHA-256 | 533480375e13300a1ea411f4dea31920cc0d84718326039eb9f44a2afd0493a2

Download | Favorite | View

msie.5.dhtml.cuartango.txt

Posted Aug 17, 1999

Authored by Juan Carlos Garcia Cuartango

More Microsoft Internet Explorer 5 vulnerabilities! Microsoft Active X control called "DHTML Edit control Safe for Scripting for IE 5" contains security holes that allow public access to the clipboard and cross-frame access, among other things. Exploit code examples included.

tags | exploit, vulnerability, activex

SHA-256 | c2521e524f27af1a173959487b0052a7eba6c27e26cb67ddea1ef8b99b484082

Download | Favorite | View

ie4.clipboard.txt

Posted Aug 17, 1999

Authored by Juan Carlos Garcia Cuartango

Microsoft Internet Explorer 4.x vulnerability in ActiveX object allows remote attacker to obtain local user's clipboard content with simple JavaScript code.

tags | exploit, remote, local, javascript, activex

SHA-256 | 3a9e7508d8e89ab51d6906bf042aed33297223303be07f2cab87430a42c6fa97

Download | Favorite | View