CVE-2012-4700

CVE-2012-4700: A buffer overflow in the PE3DO32A.ocx ActiveX control of IntegraXor SCADA Server (version 4.00 build 4250.0 and earlier) allows remote code execution via a crafted HTML page. The vulnerability originates in buffer overflows within the ActiveX component, with CVSS v2 base score 9.3 ...

Hex Workshop 4.235.16.0 - .hex Universal Local Buffer Overflow (SEH)

Hex Workshop 4.235.16.0 - .hex Universal Local Buffer Overflow SEH !/usr/bin/perl by hack4love [email protected] Hex Workshop v3//4//5//6 .hex Universal Local Buffer ExploitS SEH Found By: DATASNIPER http://www.bpsoft.com/downloads/ info:: i write 3 exploits for the 3 v...

HP Data Protector 4.00-sp1 43064 Denial Of Service

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP Data Protector...

HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP Data Protector...

Microsoft SQL Server Xp_sprintf 缓冲区溢出

Microsoft SQL Server 6.5Service Pack 5以前的版本中有一个存储过程xpsprintf存在一个 缓冲区溢出问题。攻击者可以使用这个存储过程使服务器崩溃，并可能在运行SQL server的系统 中获得管理员控制权限。 Microsoft SQL Server 6.5 Microsoft SQL Server 6.0 - Microsoft Windows NT 4.00 更新到更高版本的SQL Server6.5...

DSA-1486-1 gnatsweb - cross-site scripting

Bulletin has no description...

CVE-2007-2808

Cross-site scripting XSS vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter...

CVE-2007-2808

CVE-2007-2808 affects gnatsweb/gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99, where inadequate sanitization of the database parameter in the main CGI script allows remote XSS via arbitrary HTML/script. Debian's DSA-1486-1 notes the fix in gnatsweb 4.00-1etch1, indicating remediation by upgrading ...

Buffer overflow

Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted .IFF file...

CVE-2007-2363

CVE-2007-2363 concerns a buffer overflow in IrfanView up to version 4.00, triggered by parsing a crafted .IFF file. The vulnerability is documented as user-assisted remote code execution via image file parsing, with the root cause described as a buffer overflow in the IFF handling component. Affe...

Design/Logic Flaw

Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message...

CVE-2007-0596

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

Double free

common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences URL encoded double quotes and other potentially dangerous manipulations by sending a cookie, which bypasses the blacklist matching against the GET and PUT superglobal arrays...

Remote file inclusion

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

CVE-2007-0596

CVE-2007-0596 affects Aztek Forum 4.00. The vulnerability is a PHP remote file inclusion in index/main.php, exploitable via a URL in the PF[top_url] parameter. It can allow remote authenticated administrators to execute arbitrary PHP code. The connected documents provide no explicit remediation o...

CVE-2007-0598

The CVE-2007-0598 issue affects Aztek Forum 4.00, specifically the forum/load.php component. The vulnerability arises from improper handling of the fid cookie by forum.php, enabling remote attackers to inject and execute arbitrary SQL commands via the cookie value. The NVD entry notes a high seve...

gb400-xss.txt

Hello Vulnerable : Guestbook By 212cafe.com Version: v.4.00 beta Web : http://www.212cafe.com Exploit : http://www.example.com/guestbookv4.0/show.php?user=XSS Example : http://www.example.com/guestbookv4.0/show.php?user='alertdocument.cookie; ----- Discoverey By LinuxDrox www.LeZr.Com/vb Best...

XSS in Guestbook ( v.4.00 beta )

Hello Vulnerable : Guestbook By 212cafe.com Version: v.4.00 beta Web : http://www.212cafe.com Exploit : http://www.example.com/guestbookv4.0/show.php?user=XSS Example : http://www.example.com/guestbookv4.0/show.php?user='scriptalertdocument.cookie;/script ----- Discoverey By LinuxDrox...

TWiki 4.0.x - 'Viewfile' Directory Traversal

source: https://www.securityfocus.com/bid/19907/info Twiki is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...

ShopXS v4.0 XSS vuln.

ShopXS v4.0 XSS vuln. Vuln. discovered by : r0t Date: 10 april 2006 vendor:MK Internet-Service GmbH vendorlink:http://www.shopxs.de/ affected versions:ShopXS-Version 4.00 and previous orginal advisory:http://pridels.blogspot.com/2006/04/shopxs-v40-xss-vuln10.html Vuln. Description: Input passed t...