Internet Explorer HHCtrl.ocx Image Property Heap Corruption (MS06-046; CVE-2006-3357)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The browser is also compatible with Microsoft's Common Object Model COM scheme, whereby...

Microsoft Releases Security Advisory to Address VBScript Vulnerability

Microsoft has released a security advisory to address a vulnerability in VBScript. The advisory indicates that this vulnerability exists in the way that VBScript interacts with Windows Help files when using Internet Explorer. By convincing a user to view a specially crafted HTML document web page...

Microsoft VBScript MsgBox Call with Malicious HLP File (CVE-2010-0483)

A remote code execution vulnerability has been discovered in the way that VBScript interacts with Windows Help files when using Internet Explorer. The vulnerability is due to the VBScript functionality available from within Internet Explorer that exposes the MsgBox function, allowing script on a...

Microsoft Warns of New IE Code Execution Flaw

Microsoft’s security response team is investigating reports of a potentially dangerous code execution vulnerability in its flagship Internet Explorer browser. The company warned that an attacker could host a maliciously crafted web page and run arbitrary code if they could convince a user to visi...

Internet Explorer VBScript Windows Help arbitrary code execution

Overview Microsoft Internet Explorer is vulnerable to arbitrary code execution through the use of VBScript and Windows Help. Description Microsoft Internet Explorer supports the use of VBScript, in addition to the more widely-used JavaScript scripting language. Several VBScript commands allow a...

Bank Trojan Annoys Users With Pop Ups

Researchers recently came face to face with a Trojan with an aggressive modus operandi – it continually forces you to update your banking credentials with irritating pop up windows. Read the full article. Help Net Security...

Hybserv2 :help命令远程拒绝服务漏洞

BUGTRAQ ID: 38006 CVE ID: CVE-2010-0303 Hybserv2是改进版的Hybserv IRC服务器，可提供即时会话服务。 Hybserv2的mystring.c文件中存在拒绝服务漏洞，远程用户可以通过向MemoServ服务发送包含有help \t选项的私人消息导致守护程序崩溃。 Hybserv2 Hybserv2 1.9.4 Hybserv2 Hybserv2 1.9.3 Hybserv2 Hybserv2 1.9.2 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1982-1）以及相应补丁:...

DEBIAN-CVE-2010-0300

cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...

Null pointer dereference

cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...

UBUNTU-CVE-2010-0300

cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...

CVE-2010-0300

cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...

CVE-2010-0300: Undefined Security Weakness

cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...

ircd-ratbox 'HELP' Command Denial Of Service Vulnerability

The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100471";...

hybrid and ratbox IRC servers multiple security vulnerabilities

LINKS command, integer overflow, HELP command DoS...

DSA-1980-1 ircd-hybrid ircd-ratbox - arbitrary code execution

Bulletin has no description...

irc-ratbox -- multiple vulnerabilities

SecurityFocus reports: The first affects the /quote HELP module and allows a user to trigger an IRCD crash on some platforms. The second affects the /links processing module when the flattenlinks configuration option is not enabled...

PT-2010-2124 · Typo3 · Typo3 Helpdesk (Mg Help) Extension

Name of the Vulnerable Software and Affected Versions: TYPO3 Helpdesk mg help extension version 1.1.6 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions 1.1.6 and earlier, update to a version later than 1.1.6 to...

Hesk Help Desk Cross Site Request Forgery

Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Değiştirilebilinir. author : The.Morpheus Demo : http://www.hesk.com/demo/admin/ The.Morpheus " / YES access to all features and categories NO you can limit features and categories Suppo...

Hesk Help Desk 2.1 - Cross-Site Request Forgery

Hesk Help Desk 2.1 - Cross-Site Request Forgery Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " / YES access to all features and categories NO you can limit features and categorie...

Hesk Help Desk 2.1 XSRF

Exploit for unknown platform in category web applications ======================= Hesk Help Desk 2.1 XSRF ======================= Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " /...