CSRF, XSS and Redirector vulnerabilities in IBM Lotus Notes Traveler

Hello 3APA3A! These are Cross-Site Request Forgery, Cross-Site Scripting and Redirector vulnerabilities in IBM Lotus Notes Traveler. They are similar to CSRF, XSS and Redirector vulnerabilities in IBM Lotus Domino http://securityvulns.ru/docs29060.html, which I announced at 19.05.2012 and disclos...

[security bulletin] HPSBGN02942 rev.1 - HP Service Manager and ServiceCenter, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04026812 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04026812 Version: 1 HPSBGN02942 rev....

CVE-2013-4844

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-4844

HP Service Manager (versions 7.11, 9.21, 9.30, 9.31, 9.32) and HP ServiceCenter 6.2.8 are affected by a remote code execution vulnerability (CVE-2013-4844). The HP security bulletin HPSBGN02942 rev.1 indicates the issue could be exploited remotely to execute arbitrary code via unknown vectors, wi...

CVE-2010-4844

creationtimestamp| type| source ---|---|--- 2010-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15755...

CVE-2009-4844

The CVE-2009-4844 entry concerns ToutVirtual VirtualIQ Pro 3.2 build 7882. The vulnerability arises because access to the /status URI on port 9080 is not restricted, enabling remote attackers to obtain sensitive Tomcat information via a direct request. This constitutes an exposure in the manageme...

Microsoft Internet Explorer Data Binding Memory Corruption

$Id: ms08078xmlcorruption.rb 8445 2010-02-10 20:41:07Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Cisco Ciso Aironet 1100 Series Rev. 01 Default Password (deprecated)

Binary data 4844.prm...

Internet Explorer XML data binding memory corruption

Added: 12/12/2008 CVE: CVE-2008-4844 BID: 32721 OSVDB: 50622 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A data binding error allows command execution when a user loads specially crafted XML code containing nested SPAN tags,...

Internet Explorer XML data binding memory corruption

Added: 12/12/2008 CVE: CVE-2008-4844 BID: 32721 OSVDB: 50622 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A data binding error allows command execution when a user loads specially crafted XML code containing nested SPAN tags,...

Internet Explorer XML data binding memory corruption

Added: 12/12/2008 CVE: CVE-2008-4844 BID: 32721 OSVDB: 50622 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A data binding error allows command execution when a user loads specially crafted XML code containing nested SPAN tags,...

Immunity Canvas: MS08_078

Name| ms08078 ---|--- CVE| CVE-2008-4844 Exploit Pack| CANVAS Description| MS Internet Explorer XML Parsing Vulnerability Notes| CVE Name: CVE-2008-4844 VENDOR: Microsoft MSADV: MS08-078 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS08-078.mspx Note: After the...

CVE-2008-4844

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving 1 an XML Island, 2 XML DSOs, or 3 Tabular Data Control TDC in a craft...

CVE-2008-4844

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving 1 an XML Island, 2 XML DSOs, or 3 Tabular Data Control TDC in a craft...

CVE-2008-4844

CVE-2008-4844 is a use-after-free vulnerability in the MSHTML component (CRecordInstance::TransferToDestination) of mshtml.dll that affects Internet Explorer 5.01/6/6 SP1/7. Exploitation enables remote code execution via crafted HTML/XML containing DSO bindings (XML Island, XML DSOs, or Tabular D...

Internet Explorer XML Processing Memory Corruption (MS08-078; CVE-2008-4844)

Microsoft Internet Explorer is the most widely used Internet browser. The vulnerability is due to the way Internet Explorer handles data bindings. To trigger this issue, an attacker may create a malicious web page that will exploit this vulnerability. Successful exploitation of this vulnerability...

CVE-2008-4844

creationtimestamp| type| source ---|---|--- 2008-12-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7403 2008-12-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7410 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16583 2018-05-29...

CVE-2005-4844

The CLSIDApprenticeICW control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

CVE-2005-4844

The CVE-2005-4844 entry concerns the CLSID_ApprenticeICW control enabling a denial-of-service on Internet Explorer by creating a COM object associated with the control’s CLSID, which is not intended for use in IE. Affected context is Internet Explorer with the vulnerable CLSID/COM object interact...

CVE-2006-4844

PHP remote file inclusion vulnerability in inc/claroinitlocal.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSourcenewUser parameter...