Mozilla Firefox / Thunderbird DLL Hijacking

Hi @ll despite better knowledge and MULTIPLE bug/vulnerability reports see , , , ... Mozilla continues to ship Firefox and Thunderbird for Windows with a vulnerable executable installer. Proof of concept/demonstration: 1. visit , download and save it as ShimEng.dll in your "Downloads" folder, the...

7-Zip DLL Hijack

Hi @ll, the executable installers ° of 7-Zip see and ALL self-extracting archives created with 7-Zip are vulnerable: 1. They load and execute a rogue/bogus/malicious UXTheme.dll ' eventually found in the directory they are started from the "application directory". For software downloaded with a w...

FuzeZip 1.0 SEH Buffer Overflow Vulnerability

FuzeZip version 1.0.0.131625 suffers from a SEH based overflow and stack based overflow which is protected by stack cookies. Title: SEH BUFFER OVERFLOW IN FUZEZIP V.1.0 Severity: High History: 16.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez , Miguel Angel de...

MiniWeb File Upload / Directory Traversal

============================================================================================ Vulnerable Software: MiniWeb build 300, built on Feb 28 2013 Official Site: http://miniweb.sourceforge.net/ Vulns: Remote arbitrary file upload,Directory traversal. Tested Software/version: MiniWeb build...

Fedora Update for p7zip FEDORA-2011-9853

Check for the Version of p7zip OpenVAS Vulnerability Test Fedora Update for p7zip FEDORA-2011-9853 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

[SECURITY] Fedora 15 Update: p7zip-9.20.1-2.fc15

p7zip is a port of 7za.exe for Unix. 7-Zip is a file archiver with a very h igh compression ratio. The original version can be found at http://www.7-zip.or g/...

Mantra: A Browser based Security Framework !

Mantra is a dream that came true for the author. It is a collection of free and open source tools integrated into a web browser – Firefox, which can become handy for students, penetration testers, web application developers, security professionals etc. It is portable, ready-to-run, compact and...

7-Zip ARJ Archive Handling Buffer Overflow (CVE-2005-3051)

The 7-Zip file archiver has the ability to compress and decompress files in numerous archive formats. One such supported archive format is the ARJ format. There exists a stack-based buffer overflow vulnerability in the 7-Zip file archiver. The affected program does not sufficiently verify the siz...

7zip Detection (Windows SMB Login)

Detects the installed version of 7zip on Windows. The script logs in via smb, searches for 7zip in the registry and gets the version from SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

7-Zip Unspecified Archive Handling Vulnerability (Linux)

This host is installed with 7zip and is prone to Unspecified vulnerability. OpenVAS Vulnerability Test $Id: gb7ziparchivehandlingvulnlin.nasl 4865 2016-12-28 16:16:43Z teissa $ 7-Zip Unspecified Archive Handling Vulnerability Linux Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone...

7-Zip Unspecified Archive Handling Vulnerability - Windows

7zip is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7-Zip Unspecified Archive Handling Vulnerability - Linux

7zip is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6536

Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats c10...

CVE-2008-6536

Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats c10...

CVE-2008-6536

Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats c10...

Command injection

Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats c10...

CVE-2008-6536

Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats c10...

CVE-2008-6536

Technical details about CVE-2008-6536 are not publicly available in the provided documents; the entries describe an unspecified vulnerability in 7-Zip with unknown impact. Monitor for updates.

CVE-2008-6536

Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats c10...

CVE-2008-6536: Undefined Security Weakness

Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats c10...