Microsoft Windows Kodak Image Viewer Remote Code Execution Vulnerability

Description Microsoft Windows Kodak Image Viewer is prone to a remote code-execution vulnerability because it fails to properly bounds-check user-supplied data. Remote attackers can exploit this issue to execute arbitrary machine code in the context of a user running the application. Successful...

That one with Sam the FV key value to the hidden clone account method-vulnerability warning-the black bar safety net

| The principle is very simple Ah sam FV key value. focus on how to avoid detection Generally the detection of clone accounts is the detection of the sam inside there not the same FV. use this feature to bypass the detection. huh --- Step 1.net user allyesno freexploit /add&net localgroup...

Microsoft Windows - URI Handler Command Execution

Microsoft Windows - URI Handler Command Execution source: https://www.securityfocus.com/bid/25945/info Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows...

Microsoft Windows - URI Handler Command Execution

source: https://www.securityfocus.com/bid/25945/info Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in...

HP-UX Security Patch : PHSS_29516

OV DM6.00 Consolidated Patch August 2003 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26674; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2003-1340

CVE-2003-1340 refers to multiple SQL injection vulnerabilities in PHP-Nuke 5.6 and 6.5. The flaws allow remote authenticated users to inject SQL via a uid cookie to modules.php and via an aid cookie to the Web_Links module using actions such as viewlink, MostPopular, or NewLinksDate. The cited so...

CVE-2003-1339

CVE-2003-1339 describes a stack-based buffer overflow in eZnet.exe used by eZ products (eZphotoshare, eZmeeting, eZnetwork, eZshare). The vulnerability allows remote attackers to crash or execute arbitrary code, demonstrated via long GET requests and long parameters to SwEzModule.dll. Affected sc...

CVE-2003-1338

The CVE-2003-1338 entry documents a CRLF injection vulnerability in Aprelium Abyss Web Server

CVE-2003-1336

CVE-2003-1336 describes a stack-buffer overflow in mIRC triggered by a long irc:// URL, allowing remote code execution in versions before 6.11. Public exploit modules exist (e.g., Metasploit, Exploit-DB) demonstrating exploitability. Remediation: upgrade to mIRC 6.11 or later.

CVE-2003-1337

CVE-2003-1337 affects Aprelium Abyss Web Server 1.1.2 and earlier, with a heap-based buffer overflow triggered by a long HTTP GET request that could allow remote code execution. Affected versions are supported by sources noting vulnerabilities in versions earlier than 1.1.6; remediation is upgrad...

Microsoft Windows Services for UNIX本地权限提升漏洞（MS07-053）

BUGTRAQ ID: 25620 CVECAN ID: CVE-2007-3036 Microsoft Windows是微软发布的非常流行的操作系统。 Windows操作系统所安装的Windows Services for UNIX和基于UNIX的应用程序子系统组件没有正确的处理setuid二进制程序，本地攻击者可以登录到系统并运行特制的setuid二进制程序获得权限提升。 Microsoft Windows Services for UNIX 3.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003 SP2 -...

Team SHATTER Advisory: IBM DB2 Buffer overflow in sysproc.auth_list_groups_for_authid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory IBM DB2 Buffer overflow in sysproc.authlistgroupsforauthid August 31st 2007 Risk Level: High Affected versions: DB2 9.1 Fixpack 2 Enterprise server edition Remote exploitable: Yes Credits: This vulnerability wa...

Microsoft Security Bulletin MS07-053 - Important Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)

Microsoft Security Bulletin MS07-053 - Important Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege 939778 Published: September 11, 2007 | Updated: September 11, 2007 Version: 1.0 General Information Executive Summary This important security update resolves one publicly...

Microsoft Security Bulletin MS07-051 - Critical Vulnerability in Microsoft Agent Could Allow Remote Code Execution (938827)

Microsoft Security Bulletin MS07-051 - Critical Vulnerability in Microsoft Agent Could Allow Remote Code Execution 938827 Published: September 11, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves a privately reported vulnerability. A remote code...

Unauthenticated DCOM SystemActivation/RemoteActivation traffic (CVE-2003-0352; CVE-2003-0605; CVE-2003-0715)

There are several known and widely exploited vulnerabilities through the use of DCOM over MS-RPC. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMT...

CVE-2003-1334

CVE-2003-1334 affects Kai Blankenhorn’s Bitfolge (snif) index file before 1.2.7. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the issue but do not provide concret...

CVE-2003-1335

CVE-2003-1335 is a directory traversal vulnerability affecting Kai Blankenhorn Bitfolge (snif) prior to version 1.2.5. The issue allows remote attackers to download files outside the snif directory. This conclusion is supported by multiple sources (NVD, Red Hat CVE, CVE List) with the same descri...

Microsoft XML Core Services SubstringData堆溢出漏洞（MS07-042）

BUGTRAQ ID: 25301 CVECAN ID: CVE-2007-2223 Microsoft Windows是微软发布的非常流行的操作系统。 Windows XML Core程序库在处理畸形畸形的调用时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 XML Core Services（也被称为MSXML）是Windows操作系统中所安装的用于处理XML文件的函数库。在使用该函数库时没有对XMLDOM对象substringData方式的长度参数执行正确的检查，如果提供了超长的长度值的话，就可能将数据拷贝到不充分的缓冲区，触发堆溢出，导致执行任意指令。 Microso...

CVE-2007-4372

Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A...