HP Digital Imaging hpqxml.dll 2.0.0.133 - Arbitrary Data Write

HP Digital Imaging hpqxml.dll 2.0.0.133 - Arbitrary Data Write :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: GoodFellas Security Research Team Technical Detail saveXMLAsFile method receives a filename as an argument, with this format "c:\path\file". Proof of...

avaxswf-write.txt

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write ============================================================================ Internal ID: VULWAR200706264. Introduction ------------...

Microsoft Internet Explorer Javascript Cross Domain Information Disclosure Vulne

MS07-034 The browser is prone to a cross-domain information-disclosure vulnerability because scripts may persist across navigations. This vulnerability may let a malicious site interact with a site in an arbitrary external domain. Attackers could exploit this to gain access to sensitive informati...

Internet Download Accelerator ActiveX ActiveX控件缓冲区溢出漏洞

Internet Download Accelerator是一款网络下载工具。 Internet Download Accelerator包含的idaiehlp.dll ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 idaiehlp.dll包含的ActiveX控件处理参数存在缓冲区溢出，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 WestByte Internet Download Accelerator 5.2 目前没有解决方案提供： http://www.westbyte.com/...

CVE-2007-3225

Unspecified vulnerability in Sun Java System Directory Server slapd 6.0, and 5.2 with Patch 3 or 4, allows remote attackers to modify certain data via unknown vectors...

CVE-2007-0067

Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service daemon crash via requests for URLs that reference certain files...

Code injection

Microsoft Internet Information Services IIS 6.0 allows remote attackers to cause a denial of service server instability or device hang, and possibly obtain sensitive information device communication traffic; and might allow attackers with physical access to execute arbitrary code after connecting...

CVE-2007-2897

Microsoft Internet Information Services IIS 6.0 allows remote attackers to cause a denial of service server instability or device hang, and possibly obtain sensitive information device communication traffic; and might allow attackers with physical access to execute arbitrary code after connecting...

CVE-2007-2897

Microsoft Internet Information Services IIS 6.0 allows remote attackers to cause a denial of service server instability or device hang, and possibly obtain sensitive information device communication traffic; and might allow attackers with physical access to execute arbitrary code after connecting...

Microsoft Visual Basic 6.0 Project (Description) Stack overflow PoC

Exploit for unknown platform in category dos / poc =================================================================== Microsoft Visual Basic 6.0 Project Description Stack overflow PoC =================================================================== !/usr/local/bin/perl Discovered By UmZ Umair...

iis-dos.txt

When sending multiple parallel GET requests to a IIS 6.0 server requesting /AUX/.aspx the server gets instable and non responsive. This happens only to servers which respond a runtime error System.Web.HttpException and take two or more seconds to respond to the /AUX/.aspx GET request. signed,...

[Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS???

Hello List, Recently I saw a small bug in IIS 6.0 when requesting a special path. When I request /AUX/.aspx the server takes a bit longer to respond as Normally. So I did write an automated script to see what happens if I request this file several times at once. The result is that some servers On...

Microsoft IIS 6.0 (/AUX/.aspx) Remote Denial of Service Exploit

No description provided by source. When sending multiple parallel GET requests to a IIS 6.0 server requesting /AUX/.aspx the server gets instable and non responsive. This happens only to servers which respond a runtime error System.Web.HttpException...

Microsoft IIS 6.0 - AUX .aspx Remote Denial of Service

Microsoft IIS 6.0 - AUX .aspx Remote Denial of Service When sending multiple parallel GET requests to a IIS 6.0 server requesting /AUX/.aspx the server gets instable and non responsive. This happens only to servers which respond a runtime error System.Web.HttpException and take two or more second...

Microsoft IIS 6.0 - '/AUX / '.aspx' Remote Denial of Service

When sending multiple parallel GET requests to a IIS 6.0 server requesting /AUX/.aspx the server gets instable and non responsive. This happens only to servers which respond a runtime error System.Web.HttpException and take two or more seconds to respond to the /AUX/.aspx GET request. signed,...

CVE-2007-2593

The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop...

Design/Logic Flaw

The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop...

RDP TLS downgrade

For those using TLS with Microsoft's Terminal server. With Terminal server installed on Windows 2003 Server with current service packs and patches it is possible to bypass the server side setting that requires SSL with a self-signed cert. You will automatically be downgraded to not using TLS and...

CVE-2007-2558

CVE-2007-2558 concerns a PHP remote file inclusion in the web app pfa CMS (phpFullAnnu CMS) version 6.0, specifically in index.php via the repinc parameter. The vulnerability is described as enabling remote PHP code execution through a URL if repinc is used to include code. However, the CVE notes...

Cisco Security Advisory: Default Passwords in NetFlow Collection Engine

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Default Passwords in NetFlow Collection Engine Advisory ID: cisco-sa-20070425-nfc http://www.cisco.com/warp/public/707/cisco-sa-20070425-nfc.shtml Revision 1.0 For Public Release 2007 April 25 1600 UTC GMT -...