2847 matches found
Microsoft Windows WMI服务隔离本地权限提升漏洞（MS09-012）
BUGTRAQ ID: 34442 CVECAN ID: CVE-2009-0078 Microsoft Windows是微软发布的非常流行的操作系统。 Windows管理规范（WMI）提供程序没有正确地隔离NetworkService或LocalService帐号下运行的进程，同一帐号下运行的两个独立进程可以完全访问对方的文件句柄、注册表项等资源。WMI提供程序主机进程在某些情况下会持有SYSTEM令牌，如果攻击者可以以...
Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in Microsoft Whale Intelligent Application Gateway Whale Client. When sending an overly long string to CheckForUpdates method of WhlMgr.dll 3.1.502.64 an attacker may be able to execute arbitrary code. This module requires Metasploit:...
Microsoft Security Bulletin MS09-010 - Critical Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
Microsoft Security Bulletin MS09-010 - Critical Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution 960477 Published: April 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves two publicly disclosed vulnerabilities and two...
CVE-2008-4420
Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to...
CVE-2003-1571
CVE-2003-1571 affects Web Wiz Guestbook 6.0 (and later 8.21 per note) where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to download the database via a direct request to database/WWGguestbook.mdb. The underlying issue is inadequate access...
Sun Java System Calendar Server多个模块跨站脚本漏洞
BUGTRAQ ID: 34152,34153 CVECAN ID: CVE-2009-1218 Sun Java System Calendar Server是Sun Java System通信套件中的日程服务器组件。 Calendar Server中的login.wcap组件没有正确地验证用户所提交的fmt-out参数，command.shtml组件没有正确地验证date参数。远程攻击者可以通过向服务器提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意代码。 Sun Java System Calendar Server 6.3 Sun Java System Calend...
Analysis of the iis6. 0 design flaws-vulnerability warning-the black bar safety net
Author:Ice-the origin0. s. t&L. S. T Description:articles have been published in hackers manual 0 8 0 5,reproduced please specify! Should be long time ago?, Oh, we should also remember that action-that is not filtered. And the asp of the drain sub. In 2 0 0 3 systems of iis6. 0 with our little...
Qbik WinGate HTTP Proxy Server Access Controls Bypass Vulnerability
This host is running WinGate HTTP Proxy Server and is prone to access controls bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodwingatehttpproxyservaclbypassvuln.nasl 5390 2017-02-21 18:39:27Z mime $ Qbik WinGate HTTP Proxy Server Access Controls Bypass Vulnerability Authors: Sharath S...
Orbit Downloader Connecting Log Creation Buffer Overflow
This module exploits a stack buffer overflow in Orbit Downloader 2.8.4. When an attacker serves up a malicious web site, arbitrary code may be executed. The PAYLOAD windows/shellbindtcp works best. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2009-0537
Integer overflow in the ftsbuild function in fts.c in libc in 1 OpenBSD 4.4 and earlier and 2 Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service application crash via a deep directory tree, related to the ftslevel structure member, as...
CVE-2009-0537
CVE-2009-0537 involves an integer overflow in libc’s fts_build() within the fts.c implementation. The root cause is a signed short (fts_level) overflow when traversing very deep directory trees, which can crash an affected program (e.g., du, rm, chmod, chgrp on OpenBSD; SearchIndexer.exe on Windo...
CVE-2009-0537
Integer overflow in the ftsbuild function in fts.c in libc in 1 OpenBSD 4.4 and earlier and 2 Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service application crash via a deep directory tree, related to the ftslevel structure member, as...
CVE-2009-0537
Integer overflow in the ftsbuild function in fts.c in libc in 1 OpenBSD 4.4 and earlier and 2 Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service application crash via a deep directory tree, related to the ftslevel structure member, as...
Design/Logic Flaw
sql/itemxmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service crash via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue or UpdateXML," which triggers an assertion failure...
Zabbix 1.6.2 Frontend - Multiple Vulnerabilities
Zabbix 1.6.2 Frontend Multiple Vulnerabilities Name Multiple Vulnerabilities in Zabbix Frontend Systems Affected Zabbix 1.6.2 and possibly earlier versions Severity High Impact CVSSv2 High 9.7/10, vector: AV:N/AC:L/Au:N/C:P/I:C/A:C Vendor http://www.zabbix.com/ Advisory...
Zabbix 1.6.2 Frontend Multiple Vulnerabilities
Exploit for unknown platform in category web applications ============================================== Zabbix 1.6.2 Frontend Multiple Vulnerabilities ============================================== Zabbix 1.6.2 Frontend Multiple Vulnerabilities Name Multiple Vulnerabilities in Zabbix Frontend...
FlipViewer FViewerLoading ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in E-BOOK Systems FlipViewer 4.0. The vulnerability is caused due to a boundary error in the FViewerLoading FlipViewerX.dll ActiveX control when handling the "LoadOpf" method. This module requires Metasploit: https://metasploit.com/download Current...
CVE-2009-0703
SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...