CVE-2007-3384: XSS in Tomcat cookies example

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-3384: XSS in Tomcat cookies example Severity: Low Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: 3.3 to 3.3.2 Description: When reporting error messages, Tomcat does not filter user supplied data before display...

Mozilla Foundation Security Advisory 2007-27

Mozilla Foundation Security Advisory 2007-27 Title: Unescaped URIs passed to external programs Impact: Critical Announced: July 30, 2007 Reporter: Jesper Johansson Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.6 Thunderbird 2.0.0.6 Thunderbird 1.5.0.13 SeaMonkey 1.1.4...

CVE-2007-3383: XSS in Tomcat send mail example

CVE-2007-3383: XSS in Tomcat send mail example Severity: Low Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: 4.0.0 to 4.0.6 4.1.0 to 4.1.36 Description: When reporting error messages, the SendMailServlet does not filter user supplied data before display. This enable...

US-CERT Technical Cyber Security Alert TA07-199A -- Mozilla Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-199A Mozilla Updates for Multiple Vulnerabilities Original release date: July 18, 2007 Last revised: -- Source: US-CERT Systems Affected Mozilla Firefox Mozilla Thunderbird Other products...

Program Checker (sasatl.dll 1.5.0.531) DebugMsgLog Heap Spraying Exploit

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: sasatl.dll 1.5.0.531 Program Checker-Method DebugMsgLog Heap Spraying Exploit =============================================================================...

Program Checker (sasatl.dll 1.5.0.531) DebugMsgLog Heap Spraying Exploit

Exploit for unknown platform in category remote exploits ======================================================================== Program Checker sasatl.dll 1.5.0.531 DebugMsgLog Heap Spraying Exploit ======================================================================== :. GOODFELLAS Security...

MS07-039: Microsoft Windows Active Directory LDAP Service Remote Code Execution (926122)

The remote version of Active Directory contains a flaw in the LDAP request handler code that allows an attacker to execute code on the remote host. On Windows 2000 an anonymous attacker can exploit this flaw by sending a specially crafted LDAP packet. On Windows 2003 valid credentials are needed ...

Trend Micro ServerProtect CMON_ActiveUpdate buffer overflow

Added: 06/18/2007 CVE: CVE-2007-1070 BID: 22639 OSVDB: 33042 Background Trend Micro ServerProtect is a virus scanner for servers. Problem A buffer overflow vulnerability in the CMONActiveUpdate and CMONActiveRollback functions allows remote attackers to execute arbitrary commands by sending a...

ms-activex.txt

REM metasploit, add a user 'su' with pass 'tzu' scode =...

Microsoft Speech API ActiveX Control (Windows XP SP2) - Remote Buffer Overflow (MS07-033)

REM metasploit, add a user 'su' with pass 'tzu' scode =...

MS Windows DirectSpeechSynthesis Module Remote BoF Exploit win2k

No description provided by source. !-- 01/06/2007 23.19.50 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll remote buffer overflow exploit / 2k sp4 seh version both the dlls are located in %SystemRoot%\speech folder and they are vulnerable to...

Microsoft Speech API ActiveX Control (Windows 2000 SP4) - Remote Buffer Overflow (MS07-033)

Microsoft Speech API ActiveX Control Windows 2000 SP4 - Remote Buffer Overflow MS07-033 !-- 01/06/2007 23.19.50 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll remote buffer overflow exploit / 2k sp4 seh version both the dlls are located in...

MS07-031: Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution (935840)

The remote host is running a version of Windows that has a bug in the SSL/TLS server-key exchange handling routine that may allow an attacker to execute arbitrary code on the remote host by luring a user on the remote host into visiting a rogue website. On Windows 2000 and 2003 this vulnerability...

US-CERT Technical Cyber Security Alert TA07-151A -- Mozilla Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-151A Mozilla Updates for Multiple Vulnerabilities Original release date: May 31, 2007 Last revised: -- Source: US-CERT Systems Affected Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonk...

Zenturi ProgramChecker - ActiveX sasatl.dll Remote Buffer Overflow

Zenturi ProgramChecker - ActiveX sasatl.dll Remote Buffer Overflow ------------------------------------------------------------------------ Zenturi ProgramChecker ActiveX sasatl.dll Remote Buffer Overflow PoC url: http://www.programchecker.com/activeintro.aspx original advisory:...

Logitech VideoCall multiple ActiveX controls contain stack buffer overflows

Overview Logitech VideoCall ActiveX controls contain multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Logitech VideoCall is video conferencing software for Windows. Logitech VideoCall includes...

Media Technology Group CDPass ActiveX control stack buffer overflows

Overview The Media Technology Group CDPass ActiveX control contains several stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Media Technology Group CDPass is software that provides bonus content for music CDs...

CVE-2006-3894

The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of service via malformed ASN.1 objects...

CVE-2006-3894

The CVE-2006-3894 issue affects RSA BSAFE Crypto-C and Cert-C libraries (pre-6.3.1 and pre-2.8, respectively) used by Cisco and other products. The vulnerability stems from parsing malformed ASN.1 objects and can cause remote denial of service. Affected Cisco products include IOS, IOS XR, PIX/ASA...

CVE-2006-3894

The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of service via malformed ASN.1 objects...