Microsoft Windows Kodak Image Viewer Code Execution (MS07-055) - ver 2 (CVE-2007-2217)

A buffer overflow vulnerability has been reported in Microsoft Windows Kodak Image Viewer. The vulnerability is due to improper parsing of specially crafted image files, such as TIFF files. An attacker can exploit this vulnerability by constructing a specially crafted image and enticing a victim ...

CVE-2014-2815

Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability."...

CVE-2014-2815

CVE-2014-2815 affects Microsoft OneNote 2007 SP3. A crafted OneNote file can trigger execution of an arbitrary program by creating an executable in a startup folder, enabling remote code execution under the current user. CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base 8.8). Remediatio...

CVE-2007-6756

The CVE-2007-6756 entry affects ZOLL Defibrillator/Monitor M Series, E Series, and R Series. A default password used in System Configuration mode allows physically proximate attackers to modify device configuration, leading to a denial of service (with potential adverse health effects). The avail...

Web Servers Tosmo Mambo Remote File Inclusion (CVE-2007-2317)

A Remote File Inclusion vulnerability has been reported in Tosmo Mambo. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

Web Servers BurnCMS Remote File Inclusion (CVE-2007-2364)

A Remote File Inclusion vulnerability has been reported in BurnCMS. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was previously...

Web Servers Frequency Clock Remote File Inclusion (CVE-2007-2936)

A Remote File Inclusion vulnerability has been reported in Frequency Clock. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

Web Servers mxBB MX Smartor Remote File Inclusion (CVE-2007-2189)

A Remote File Inclusion vulnerability has been reported in mxBB MX Smartor. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

Web Servers WAnewsletter Remote File Inclusion (CVE-2007-2969)

A Remote File Inclusion vulnerability has been reported in WAnewsletter. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

July 8, 2014 update for Office Online (KB2883018)

None None...

Borland InterBase jrd8_create_database() Buffer Overflow

No description provided by source. $Id: ibjrd8createdatabase.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Borland InterBase INET_connect() Buffer Overflow

No description provided by source. $Id: ibinetconnect.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

SAP AG SAPgui EAI WebViewer3D Buffer Overflow

No description provided by source. $Id: sapguisaveviewtosessionfile.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing a...

Confixx Pro <= 3.3.1 - (saveserver.php) Remote File Inclusion Vulnerability

No description provided by source. Confixx = PRO 3.3.1 Remote File Inclusion Vulnerability ! Application homepage : http://www.swsoft.com/de/products/confixx/ ! Author : H4 / XPK ! Contact : http://xpkzxc.com/ ! Bug discovered : 2007-07-21 ! Bug published : 2007-07-24 ! Risk : Moderate Do not...

Firebird Relational Database SVC_attach() Buffer Overflow

No description provided by source. $Id: fbsvcattach.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Borland InterBase 2007 - PWD_db_aliased Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

VP-ASP Shopping Cart 6.50 ShopContent.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24033/info VP-ASP Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

DESlock+ <= 3.2.6 DLMFENC.sys Local Kernel ring0 link list zero PoC

No description provided by source. / deslock-list-zero.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel ring0 link list zero POC by mu-b - Fri 21 Dec 2007 - Tested on: DLMFENC.sys 1.0.0.26 - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ -- Digit-Labs...

Oracle 9i/10g Evil Views - Change Passwords Exploit

No description provided by source. -- -- bunkerview.sql -- -- Oracle 9i/10g - evil view exploit CVE-2007-3855 -- Uses evil view to perform unauthorized password update -- -- by Andrea bunker Purificato - http://rawlab.mindcreations.com -- 37F1 A7A1 BB94 89DB A920 3105 9F74 7349 AF4C BFA2 -- -- Th...

Borland InterBase open_marker_file() Buffer Overflow

No description provided by source. $Id: ibopenmarkerfile.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...