CVE-2007-5252

CVE-2007-5252 is a buffer overflow in NetSupport Manager (NSM) Client 10.00/10.20 and NetSupport School Student (NSS) 9.00. The flaw allows an unauthenticated, remote attacker to cause a denial of service or possibly execute arbitrary code through crafted data in the configuration exchange phase ...

CVE-2007-5256

CVE-2007-5256 involves multiple stack-based buffer overflows in affected software: FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier. The vulnerabilities allow remote code execution via a long HELP command on TCP port 3010 targeting sysuser::exechelp in sysuser.cc, and via long command...

CVE-2007-5245

CVE-2007-5245 affects Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910. The issue comprises multiple stack-based buffer overflows in the SVC_attach path (TCP port 3050) and in vectors involving INET_connect, enabling remote code execution. Evidence across sources (NVD/OpenV...

CVE-2007-5244

CVE-2007-5244 is a stack-based buffer overflow in Borland InterBase LI (Linux, 8.0.0.53–8.1.0.253; possibly Solaris) triggered by a long attach request to TCP port 3050, via the open_marker_file function. Publicly observed references include Metasploit module ib_open_marker_file.rb (Exploitation ...

CVE-2007-5242

HP OpenVMS 8.3 and earlier contain an unspecified vulnerability in SYS$EI1000.EXE and SYS$EI1000_MON.EXE that allows remote attackers to cause a denial of service (machine crash) via an oversize packet. The issue arises because the oversize packet is not properly discarded when the device has no ...

CVE-2007-5241

CVE-2007-5241 affects HP OpenVMS 8.3 and earlier. A buffer overflow in NET$CSMACD.EXE is triggered by the command “MCR MCL SHOW CSMA-CD Port * All,” allowing local users to cause a denial of service (machine crash) by overwriting a Non-Paged Pool Packet. The description confirms the vulnerable co...

CVE-2007-5240

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner...

CVE-2007-5239

The CVE-2007-5239 issue affects Sun Java Web Start / JRE components. Affected products include JDK/JRE 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, J2SE 1.4.2_15 and earlier, and J2SE 1.3.1_20 and earlier. The root cause is that Java Web Start/applets do not properly enforce access ...

CVE-2007-5240

CVE-2007-5240: Visual truncation vulnerability in Sun JDK/JRE (Java Runtime Environment) affecting JRE/JDK 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, SDK/JRE 1.4.2_15 and earlier, and SDK/JRE 1.3.1_20 and earlier. An attacker could bypass the display of the untrusted-code warning ...

CVE-2007-5235

The CVE-2007-5235 entry describes a Cross-site Scripting (XSS) vulnerability in Uebimiau, specifically in index.php for versions 2.7.2 through 2.7.10. The issue allows remote attackers to inject arbitrary web script or HTML via the f_email parameter. The provided documents do not include explicit...

CVE-2007-5239

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...

CVE-2007-5236

CVE-2007-5236 affects Sun Java Web Start/JRE/JDK on Windows. The issue is improper enforcement of access restrictions for untrusted applications, enabling a user‑assisted remote attacker to read local files via an untrusted application. Affected products include Sun JDK/JRE 5.0 Update 12 and earl...

Unfixed XSS vulnerability at www.finlandun.org

Security researcher By Encore, has submitted on 10/06/2007 a cross-site-scripting XSS vulnerability affecting www.finlandun.org, which at the time of submission ranked 7649963 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is...

Yahoo! Messenger ActiveX Control YVerInfo.dll Buffer Overflow (CVE-2007-4515)

Yahoo! Messenger is a popular advertisement-supported instant messaging client. A buffer overflow vulnerability exists in Yahoo! Messenger. The vulnerability is due to a boundary error within the Yahoo! Messenger YVerInfo.dll ActiveX control when handling certain methods. To trigger this issue, a...

CVE-2007-5238

CVE-2007-5238 affects Sun JDK/JRE: Java Web Start in Sun JDK/JRE 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, and SDK/JRE 1.4.2_15 and earlier. The vulnerability does not properly enforce access restrictions for untrusted applications, allowing a user‑assisted remote attacker to obt...

MultiCart 1.0 Remote Blind SQL Injection Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokas...

CVE-2007-5237

CVE-2007-5237 affects Sun Java Web Start in JDK/JRE 6 Update 2 and earlier. The issue arises from insufficient access restriction enforcement for untrusted applications, enabling user-assisted remote attackers to read and modify local files via an untrusted application. In the provided documents,...

CVE-2007-5231

Unrestricted file upload vulnerability in admin/uploadfiles.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230...

CVE-2007-5230

admin/uploadfiles.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request. NOTE: this can be leveraged for code execution by exploiting CVE-2007-5231...

Immunity Canvas: OSSIGENO_INCLUDE

Name| ossigenoinclude ---|--- CVE| CVE-2007-5234 Exploit Pack| CANVAS Description| Ossigeno CMS remote file include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Ossigeno CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5234 CVE Name: CVE-2007-5234...