Microsoft IE Tabular Data Control ActiveX控件远程代码执行漏洞（MS10-018）

BUGTRAQ ID: 39025 CVE ID: CVE-2010-0805 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer的Tabular Data Control ActiveX模块（tdc.ocx）中存在栈破坏漏洞。如果向CTDCCtl::SecurityCHeckDataURL函数传送了超长的DataURL参数，就可以触发这个漏洞，导致向任意内存位置写入单个NULL字节。...

Microsoft Windows Vista Windows Mail File Execution (MS07-034; CVE-2007-1658)

Microsoft Windows Mail product is an implementation of an email and newsgroup client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and formats. It is the successor to Outlook Express and is included in recent versions of Microsoft Windows...

CVE-2007-6734

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...

CVE-2007-6734

The vulnerability CVE-2007-6734 affects NWFTPD.nlm before 5.08.07 in the NetWare 6.5 SP7 FTP server. The issue is improper implementation of the FTPREST.TXT NOREMOTE restriction, potentially allowing remote authenticated users to access directories outside the home server via unspecified vectors....

CVE-2007-6735

CVE-2007-6735 affects NWFTPD.nlm prior to 5.08.06 on Novell NetWare. The FTP server’s handling of container name matches in FTPREST.TXT is flawed, allowing remote attackers to bypass access restrictions during an FTP session. The issue is rooted in improper partial matching of container names, en...

IBM WebSphere Application Server 6.0 < 6.0.2.19 HTTP Response Splitting

IBM WebSphere Application Server 6.0.x before Fix Pack 19 appears to be running on the remote host. Such versions are reportedly affected by an HTTP response splitting vulnerability because the application fails to properly sanitize user-supplied data to an unspecified parameter and script. C...

CVE-2007-2446

creationtimestamp| type| source ---|---|--- 2010-04-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16875 2010-04-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16329 2010-07-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16859 2018-05-29...

Samba 3.0.10 (OSX) - 'lsa_io_trans_names' Heap Overflow (Metasploit)

$Id: lsatransnamesheap.rb 9021 2010-04-05 23:34:10Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Huron CMS 8 11 2007 - Authentication Bypass

Huron CMS 8 11 2007 - Authentication Bypass \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Huron CMS 8 11 2007 Auth Bypass SQL Injection Vulnerability Script: http://huroncms.googlecode.com/files/Huron28112007.zip Author: mat Mail: [email protected]...

Design/Logic Flaw

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large integer in the numcolors attribute of a recolorinfo element in a VML file, possibly a related issue to CVE-2007-0024...

UltraISO CUE File Parsing Buffer Overflow

This module exploits a stack-based buffer overflow in EZB Systems, Inc's UltraISO. When processing .CUE files, data is read from file into a fixed-size stack buffer. Since no bounds checking is done, a buffer overflow can occur. Attackers can execute arbitrary code by convincing their victim to...

CVE-2007-5235

creationtimestamp| type| source ---|---|--- 2010-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11906...

Cross site scripting

Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting XSS attacks, by using the addEventListener and setTimeo...

XSS using addEventListener and setTimeout on a wrapped object — Mozilla

Mozilla security researcher mozbugra4 reports that by using an appropriately wrapped object it was possible to bypass the fix for MFSA 2007-19. Prior to Firefox 3.6 this gives an attacker the ability to perform cross-site scripting attacks against arbitrary sites as in the original MFSA 2007-19...

Apple QuickTime for Java toQTPointer Function Memory Corruption (CVE-2007-2175)

Apple QuickTime is a multi-platform, industry-standard, multimedia software architecture. It is used by software developers, hardware manufacturers, and content creators to author and publish multiple media documents. Java is an object-oriented language that includes a set of libraries that...

RedHat Update for tar RHSA-2010:0141-01

Check for the Version of tar OpenVAS Vulnerability Test RedHat Update for tar RHSA-2010:0141-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CentOS Update for tar CESA-2010:0141 centos4 i386

Check for the Version of tar OpenVAS Vulnerability Test CentOS Update for tar CESA-2010:0141 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Linux Kernel nfs_lock函数本地拒绝服务漏洞

CVECAN ID: CVE-2007-6733 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的fs/nfs/file.c文件中的nfslock函数没有正确的删除对setgid未设置group-execute权限文件的 POSIX锁定，这允许本地用户通过在NSF文件系统上锁定文件然后再更改该文件的权限导致系统崩溃。 Linux kernel 2.6.9 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://lkml.org/lkml/2005/12/21/334...

Mozilla Firefox XBL Event Handler Tags Removal Memory Corruption (CVE-2007-5339)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, Javascript, various graphics formats, and so on. The browser runs on...

Microsoft Virtual PC Hypervisor Virtual Machine Bypass Vulnerability

Exploit for windows platform in category local exploits ===================================================================================== Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability...