190 matches found
Apple Safari 5.0.5 - SVG Remote Code Execution (DEP Bypass)
Abysssec Public Advisory apple killed one of our 0day no point to keep it private anymore : there is another version of exploit using POPup and thats more reliable but as you know safari block pop up by default so we found a cool way to bypass it and stand alone module . this exploiting using ROP...
Safari SVG DOM processing PoC
No description provided by source. / Exploit Title: CVE-2011-0222 Safari SVG DOM processing PoC Date: 2011-07-25 Author: Nikita Tarakanov CISS Research Team, Alex Bazhanyuk CISS Research Team Software Link: http://www.apple.com/au/safari/download/ Version: prior to 5.0.6, 5.1 Tested on: Win XP SP...
Apple Safari 5.0.6/5.1 - SVG DOM Processing (PoC)
/ Exploit Title: CVE-2011-0222 Safari SVG DOM processing PoC Date: 2011-07-25 Author: Nikita Tarakanov CISS Research Team, Alex Bazhanyuk CISS Research Team Software Link: http://www.apple.com/au/safari/download/ Version: prior to 5.0.6, 5.1 Tested on: Win XP SP3, Win 7 SP1 CVE : CVE-2011-0222...
Apple Safari 5.0.65.1 - SVG DOM Processing (PoC)
Apple Safari 5.0.65.1 - SVG DOM Processing PoC / Exploit Title: CVE-2011-0222 Safari SVG DOM processing PoC Date: 2011-07-25 Author: Nikita Tarakanov CISS Research Team, Alex Bazhanyuk CISS Research Team Software Link: http://www.apple.com/au/safari/download/ Version: prior to 5.0.6, 5.1 Tested o...
Apple Safari 5.1和5.0.6之前版本多个安全漏洞
BUGTRAQ ID: 48808 CVE ID: CVE-2011-0218,CVE-2011-0221,CVE-2011-0222,CVE-2011-0225,CVE-2011-0232,CVE-2011-0233,CVE-2011-0234,CVE-2011-0235,CVE-2011-0237,CVE-2011-0238,CVE-2011-0240,CVE-2011-0253,CVE-2011-0254,CVE-2011-0255,CVE-2011-1288,CVE-2011-1453,CVE-2011-1457,CVE-2011-1462,CVE-2011-1797...
CVE-2011-0222
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...
CVE-2011-0222
CVE-2011-0222 affects WebKit as used in Apple Safari prior to version 5.0.6. A crafted web site can trigger memory corruption in WebKit, enabling remote arbitrary code execution or causing an application crash (DoS). The vulnerability is tied to WebKit’s SVG handling and related memory-corruption...
Design/Logic Flaw
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custommethod file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpidebugfsinit function in drivers/acpi/debugfs.c...
Stack overflow
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...
CVE-2009-0222
CVE-2009-0222 belongs to Microsoft PowerPoint Legacy File Format vulnerabilities. A memory corruption/ buffer-overflow flaw occurs when PowerPoint 2000 SP3, 2002 SP3, or 2003 SP3 reads sound data from specially crafted PowerPoint 4.0 format streams, allowing remote code execution via crafted file...
Microsoft PowerPoint Converter SlideRec Record Memory Corruption (MS09-017; CVE-2009-0222)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...
FreeBSD Ports: gallery
The remote host is missing an update to the system as announced in the referenced advisory. VID 5752a0df-60c5-4876-a872-f12f9a02fa05 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0222
Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors...
CVE-2008-0222
CVE-2008-0222 affects the WordPress plugin WP-FileManager 1.2, where the file ajaxfilemanager.php allows unrestricted file upload and remote code execution via unspecified vectors. The issue is caused by insecure handling of uploads, enabling attackers to upload arbitrary PHP code. Affected produ...
CVE-2007-0293
Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to 1 Oracle Agent EM03 and 2 EM04 and 3 EM05 in Enterprise Manager Console. NOTE: EM05 might be related to CVE-2007-0222...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to 1 Oracle Agent EM03 and 2 EM04 and 3 EM05 in Enterprise Manager Console. NOTE: EM05 might be related to CVE-2007-0222...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aka 1 EM01 and 2 EM02. NOTE: EM05 might be related to CVE-2007-0222...
CVE-2007-0222
CVE-2007-0222 is a directory traversal vulnerability in Oracle Application Server 10g (10.1.3.0.0) specifically in the EmChartBean server-side component. It allows remote, unauthenticated attackers to read arbitrary files outside the application root (likely via “..” in requests to the beanId par...
CVE-2006-0222
The CVE-2006-0222 entry concerns an XSS vulnerability in AlstraSoft Template Seller Pro, affecting the fullview.php script where the tempid parameter can be exploited to inject arbitrary web script/HTML. Affected product: AlstraSoft Template Seller Pro; vulnerable component: fullview.php; entry d...
