Stack overflow

Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control ImageViewer2.ocx in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter...

CVE-2010-5193

CVE-2010-5193 : A stack-based buffer overflow exists in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) used by Viscom Image Viewer CP Pro 8.0 and Gold 6.0. The vulnerability occurs in TIFMergeMultiFiles and allows remote code execution via a long strDelimit parameter. It is a netw...

CVE-2010-5193

Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control ImageViewer2.ocx in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter...

Cyclope Employee Surveillance Solution Local File Inclusion Vulnerability

This host is running Cyclope Employee Surveillance Solution and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbcyclopeemployeesurveillancelfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Cyclope Employee Surveillance Solution Local File Inclusion Vulnerability...

Debian DSA-2530-1 : rssh - shell command injection

Henrik Erkkonen discovered that rssh, a restricted shell for SSH, does not properly restrict shell access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2530. The text itself is copyrigh...

Cyclope Employee Surveillance Solution 6.x - 6.0.2 LFI Vulnerability - Active Check

Cyclope Employee Surveillance Solution is prone to local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-060: Description of the security update for Visual Basic 6.0 Service Pack 6: August 14, 2012

Resolves a vulnerability that exists in Windows common controls that could allow remote code execution if a user visits a website that contains specially crafted content that is designed to exploit the vulnerability.View products that this article applies to.IntroductionMicrosoft has released the...

Citrix Provisioning Services SoapServer Buffer Overflow Vulnerability

This host is installed with Citrix Provisioning Services and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbcitrixprovisioningservicessoapserverbofvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ Citrix Provisioning Services SoapServer Buffer Overflow Vulnerability...

Distimo Monitor - Multiple Cross-Site Scripting Vulnerabilities

Distimo Monitor - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/54757/info Distimo Monitor is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...

Distimo Monitor 6.0 Cross Site Scripting

Title: ====== Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities Date: ===== 2012-07-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=631 VL-ID: ===== 631 Common Vulnerability Scoring System: ==================================== 2 Introduction: =============...

Apple Safari Multiple Vulnerabilities - July 2012 (Mac OS X)

This host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjul12macosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Apple Safari Multiple Vulnerabilities - July 2012 Mac OS X Authors: Madhuri D Copyright: Copyrigh...

Apple Safari < 6.0 跨站脚本执行漏洞(CVE-2012-0678)

BUGTRAQ ID: 54683 CVE ID: CVE-2012-0678 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Apple Safari 6.0之前版本在实现存在XSS漏洞，攻击者可利用此漏洞通过feed:// URL注入任意Web脚本或HTML。 0 Apple Safari 6.0 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

Memory corruption

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1...

PHP 6.0 - openssl_verify() Local Buffer Overflow (PoC)

PHP 6.0 - opensslverify Local Buffer Overflow PoC // // ================================================================================== // // REGISTERS: // EAX 000003D0, ECX 00BBDB28, EDX 00BBDAD8 // EBX 00BBC940, ESP 0012FB5C UNICODE "AAA...." // ESI 00BBC940, EDI 00831D00, EBP 0012FBF0 UNICO...

PHP 6.0 openssl_verify() Buffer Overflow

// // ================================================================================== // // REGISTERS: // EAX 000003D0, ECX 00BBDB28, EDX 00BBDAD8 // EBX 00BBC940, ESP 0012FB5C UNICODE "AAA...." // ESI 00BBC940, EDI 00831D00, EBP 0012FBF0 UNICODE "AAA...." // EIP 00410041 // //...

PHP 6.0 openssl_verify() Local Buffer Overflow PoC

Exploit for windows platform in category dos / poc // // ================================================================================== // // REGISTERS: // EAX 000003D0, ECX 00BBDB28, EDX 00BBDAD8 // EBX 00BBC940, ESP 0012FB5C UNICODE "AAA...." // ESI 00BBC940, EDI 00831D00, EBP 0012FBF0...

PHP 6.0 - 'openssl_verify()' Local Buffer Overflow (PoC)

// // ================================================================================== // // REGISTERS: // EAX 000003D0, ECX 00BBDB28, EDX 00BBDAD8 // EBX 00BBC940, ESP 0012FB5C UNICODE "AAA...." // ESI 00BBC940, EDI 00831D00, EBP 0012FBF0 UNICODE "AAA...." // EIP 00410041 // //...

Debian DSA-2509-1 : pidgin - remote code execution

Ulf Harnhammar found a buffer overflow in Pidgin, a multi protocol instant messaging client. The vulnerability can be exploited by an incoming message in the MXit protocol plugin. A remote attacker may cause a crash, and in some circumstances can lead to remote code execution. %NASLMINLEVEL 70300...

Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities

Document Title: =============== Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=631 Release Date: ============= 2012-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 6...

Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities

Document Title: =============== Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=631 Release Date: ============= 2012-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 6...