7610 matches found
Microsoft Internet Explorer IMJPCKSI COM Object Instantiation Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability when instantiating certain COM objects. Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the affected application. This facilitates the remote...
Microsoft Internet Explorer COM Object Instantiation Variant Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability when instantiating certain COM objects. Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the affected application. This facilitates the remote...
Tagit! Tagit2b 2.1.B Build 2 - CONFIGerrmsg.inc.php?configpath Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - CONFIGerrmsg.inc.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...
Unfixed XSS vulnerability at 44346.com-domainiac.com
Security researcher fox91, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting 44346.com-domainiac.com, which at the time of submission ranked 185660 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at www.finalsolution88.com
Security researcher kaksii, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.finalsolution88.com, which at the time of submission ranked 660004 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at www.tavla06.com
Security researcher St@rExT, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.tavla06.com, which at the time of submission ranked 3069547 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is...
CVE-2007-0435
T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value...
Authentication flaw
T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value...
CVE-2007-0435
The CVE-2007-0435 entry concerns T-Com Speedport 500V routers with firmware 1.31, where remote authentication can be bypassed via a LOGINKEY=TECOM cookie, allowing an attacker to reconfigure the device. The root cause is a cookie-based authentication bypass that permits unauthorized access to dev...
CVE-2007-0435
T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value...
How To Find QQ's Bugs-bug warning-the black bar safety net
How To Find QQ' Bugs. For the QQ installation file scan to the next, almost no encryption program file, but the specific analysis is more wordy. But I think so much of a mess of things in a large heap, bufferflow is certainly might exist. But lazy of going to get. In the QQ directory below have a...
CVE-2007-0435: Improper Authentication
T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value...
Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass
-------------------------------------------------------------------- Virginity Security Advisory 2007-001 - - - -------------------------------------------------------------------- DATE : 2007-01-19 15:32 GMT TYPE : remote VERSIONS AFFECTED : T-Com Speedport 500V Firmware 1.31 AUTHOR :...
T-Com Speedport ADSL router unauthorized access
Constant Cookie value is set for Web access verification...
Magic Photo Storage Website - includeconfig.php?_config[site_path] Remote File Inclusion
Magic Photo Storage Website - includeconfig.php?configsitepath Remote File Inclusion source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting...
CVE-2006-6908: Undefined Security Weakness
Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth implementation in Windo...
Kolayindir Download (Yenionline) (tr) SqL Injection Vuln.
BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Kolayindir Download Yenionline tr Script Download : http://www.aspindir.com/indir.asp?id=4630 Risk : High Found By : ShaFuck31 Vulnerable file : down.asp Vulnerable : http://www.victim.com/ScriptPath/down.asp?id=SqL Contact: ShaFuq31 at HoTMaiL d...
Unfixed XSS vulnerability at www.promos-2007.com
Security researcher THE-SH0CK-B0Y, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting www.promos-2007.com, which at the time of submission ranked 3373877 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It...
Unfixed Redirect vulnerability at zirve100.com
Security researcher THE-SH0CK-B0Y, has submitted on 01/06/2007 a Redirect vulnerability affecting zirve100.com, which at the time of submission ranked 37453 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently unfixed. If...
Azucar CMS Index_sitios.PHP远程文件包含漏洞
Azucar CMS是一款基于PHP的WEB应用程序。 Azucar CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Indexsitios.PHP'脚本对用户提交的'VIEW'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Azucar CMS Azucar CMS 1.3 目前没有详细解决方案提供： http://azucarcms.sourceforge.net/...