Microsoft Excel Lotus 1-2-3 Workbook Parsing Remote Heap Buffer Overflow Vulnerability

Description Microsoft Excel is prone to a remote heap-buffer-overflow vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Lotus '1-2-3' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user...

Joomla Component com_read SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Joomla Component comread SQL Injection vulnerability ===================================================== + Exploit Title : Joomla Component read SQL injection vulnerability + Author :...

PHP Classifieds ADS - sid Blind SQL Injection

PHP Classifieds ADS - sid Blind SQL Injection Title: PHP CLASSIFIEDS ADS Price: $49 Link : http://www.sellatsite.com/sellatsite/phpclass.asp Author: BorN To K!LL - h4ck3r 3xploit: /detail.php?sid=Blind-Injection 3xample: http://www.example.com/classi/detail.php?sid=80 and 1=1-- // True ,,...

Aqua Real 1.02.0 - Local Crash (PoC)

Aqua Real 1.02.0 - Local Crash PoC ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Exploit Title: Local Crash PoC Author: R3d-D3V!L Vendor: http://aquarealscreensaver.com/ vuln-Version: Aqua Real 1 & 2 Tested on: winxp-sp3 - author: R3d-D3v!L ? TEAM: ArAB!AN...

Microsoft Office Excel Multiple Vulnerabilities (972652)

This host is missing a critical security update according to Microsoft Bulletin MS09-067. OpenVAS Vulnerability Test $Id: secpodms09-067.nasl 6533 2017-07-05 08:41:34Z santu $ Microsoft Office Excel Multiple Vulnerabilities 972652 Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

ActiveVotes 2.2 (AccountID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:VoteHistory.asp AccountID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: ActiveVotes v 2.2 author: я3d D3v!L Date: 28.11.2008...

GnuTLS < 2.2.4 vulnerability (Windows)

The remote host is probably affected by the vulnerabilities described in CVE-2008-1948, CVE-2008-1949, CVE-2008-1950 GnuTLS 2.2.4 vulnerability Impact CVE-2008-1948 The gnutlsservernamerecvparams function in lib/extservername.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly...

GnuTLS < 2.2.4 Vulnerability - Windows

The remote host is probably affected by the vulnerabilities described in CVE-2008-1948, CVE-2008-1949, CVE-2008-1950 SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Stack overflow

Multiple stack-based buffer overflows in l123sr.dll in Autonomy formerly Verity KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to execute arbitrary code via the 1 Length and 2 Value fields for certain Types in a Lotus 1-2-3 .123 file in the Worksheet...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Lotus Notes buffer overflow in the Lotus WorkSheet file processor Advisory Information Title: Lotus Notes buffer overflow in the Lotus WorkSheet file processor Advisor...

Lotus Notes buffer overflow in the Lotus WorkSheet file processor

Advisory ID Internal CORE-2007-0821 Advisory Information Title: Lotus Notes buffer overflow in the Lotus WorkSheet file processor Advisory ID: CORE-2007-0821 Date published: 2007-11-27 Date of last update: 2007-11-27 Vendors contacted: IBM Corp. Release mode: COORDINATED RELEASE Vulnerability...

Autonomy KeyView Lotus 1-2-3 - File Multiple Buffer Overflow Vulnerabilities

Autonomy KeyView Lotus 1-2-3 - File Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26604/info Autonomy KeyView is prone to multiple buffer-overflow vulnerabilities. Successfully exploiting these issues could allow an attacker to execute arbitrary code in the...

Easybe 1-2-3 Music Store Process.PHP SQL注入漏洞

Easybe 1-2-3 Music Store是一款基于PHP的WEB应用程序。 Easybe 1-2-3 Music Store不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Process.php'脚本对用户提交的'CategoryID'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 Easybe 1-2-3 Music Store 1.0 目前没有解决方案提供： http://easybe.com/...

Sql injection

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

CVE-2007-3520

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

CVE-2007-3520

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

CVE-2007-3520

CVE-2007-3520 describes a SQL injection in the Easybe 1-2-3 Music Store, via the parameter CategoryID in process.php, allowing remote attackers to execute arbitrary SQL commands. The root cause is unsafely handling the CategoryID input, enabling injected SQL through the web interface. Documented ...