BP Blog Database Disclosure

BP Blog V6.0 & V7.0 & V8.0 & V9.0 Database Disclosure Vulnerability I BP Blog V6.0 & V7.0 & V8.0 & V9.0 I Script Website : http://blog.betaparticle.com/ I Found by : Dxil I Contact : [email protected] D "powered by BP Blog 7.0" or "powered by BP Blog 8.0" E www.site.com/path/Blog.mdb E V6.0 --...

Memory corruption

The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code v...

Immunity Canvas: MSSQL_REPLWRITETOVARBIN

Name| mssqlreplwritetovarbin ---|--- CVE| CVE-2008-5416 Exploit Pack| CANVAS Description| replwritetovarbin stored procedure overflow. Notes| CVE Name: CVE-2008-5416 VENDOR: Microsoft Notes: Exploit only works against non-DEP enabled targets. Repeatability: One-shot MSADV: MS09-004 References:...

Memory corruption

The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted...

Adobe Acrobat 9 PDF Document Encryption Weakness Vulnerability (Windows)

This host has Adobe Acrobat installed and is prone to encryption weakness vulnerability. OpenVAS Vulnerability Test $Id: gbadobeacrobatpdfvulnwin.nasl 5370 2017-02-20 15:24:26Z cfi $ Adobe Acrobat 9 PDF Document Encryption Weakness Vulnerability Windows Authors: Chandan S Copyright: Copyright c...

Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) Could Allow Remote Code Execution (932349)

Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files ActiveX Controls Could Allow Remote Code Execution 932349 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves five privately reported...

Adobe Acrobat 9 PDF Document Encryption Weakness Vulnerability - Windows

Adobe Acrobat is prone to an encryption weakness vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Media Player MIDI文件MThd头解析拒绝服务漏洞

BUGTRAQ ID: 32077 CNCAN ID：CNCAN-2008110405 Microsoft Windows Media Player是一款流行的媒体播放程序。 Microsoft Windows Media Player解析畸形MIDI文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 在解析MIDI文件的MThd头字段时存在问题，构建恶意文件，诱使用户访问，可导致应用程序崩溃。 Microsoft Windows Media Player 9.0 + Microsoft Windows Server 2003 Datacenter Edition +...

Immunity Canvas: GOODTECH_SSH

Name| goodtechssh ---|--- CVE| CVE-2008-4726 Exploit Pack| CANVAS Description| Goodtech SSH overflow Notes| CVE Name: CVE-2008-4726 VENDOR: Goodtech Notes: Buffer overflows exist in the following GoodTech SSH server commands:...

Immunity Canvas: MS08_062

Name| ms08062 ---|--- CVE| CVE-2008-1446 Exploit Pack| CANVAS Description| Windows Internet Printing Service Overflow Notes| CVE Name: CVE-2008-1446 VENDOR: Microsoft Notes: This exploit will try and listen for connection on port 445/TCP. Thus it needs to be run as root under Linux, or as...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne EP 8.9 and EP 9.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2008-4001

Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne EP 8.9 and EP 9.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Immunity Canvas: MS08_049

Name| ms08049 ---|--- CVE| CVE-2008-1457 Exploit Pack| CANVAS Description| EventSystem Service Overflow Notes| CVE Name: CVE-2008-1457 VENDOR: Microsoft Notes: Due to the fact that the svchost.exe instance where the EventSystem service is running is DEP protected, and that all loaded DLLs have GS...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 8.1 / 9.0 / 9.1 / current : fetchmail (SSA:2008-210-01)

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory...

From ACDSee vulnerability see Trojan intrusion of new ideas-vulnerability warning-the black bar safety net

For ACDSee name, surely you are no stranger. However, recent ACDSee the use of the IDX. apl and IDEACDStd. apl, IDPSP. ap and AMLHA. apl plug-ins in the processing of XBM/XPM/PSP/LHA file buffer overflow vulnerability if a user opens with a long string of XBM/XPM/PSP/LHA file, then it is possible...

WinZIP <= 8.1 Command Line Local Buffer Overflow Exploit

No description provided by source. / WinZip Command Line Local Buffer Overflow http://securitytracker.com/alerts/2004/Sep/1011132.html http://www.winzip.com/wz90sr1.htm Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan / / Tested with...

SuSE linux 9.0 YaST config Skribt Local Exploit

No description provided by source. include stdio.h include unistd.h include string.h define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define END 33000 int mainint argc, char argv int i; char buf150; printf"\tSuSE 9.0 YaST script SuSEconfig.gnome-filesystem exploit\n";...

VulnCheck KEV: CVE-2006-5820

The LinkSBIcons method in the SuperBuddy ActiveX control Sb.SuperBuddy.1 in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page...

Cross site scripting

Cross-site scripting XSS vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehive NetUI framework with...