Microsoft Windows Speech组件语音识别远程命令执行漏洞（MS08-032）

BUGTRAQ ID: 22359 CVECAN ID: CVE-2007-0675 Microsoft Windows是微软发布的非常流行的操作系统。 如果Windows中启用了语音识别功能的话，则Speech组件sapi.dll中存在远程执行代码漏洞。攻击者可以通过构造嵌入了声音对象的特制网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft...

Directory traversal

Multiple directory traversal vulnerabilities in Galatolo WebManager GWM 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in 1 the plugin parameter to admin/plugins.php or 2 the com parameter to index.php...

CVE-2008-2699

Multiple directory traversal vulnerabilities in Galatolo WebManager GWM 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in 1 the plugin parameter to admin/plugins.php or 2 the com parameter to index.php...

Unfixed XSS vulnerability at www.cda-paris12.com

Security researcher Mystick, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.cda-paris12.com, which at the time of submission ranked 1977503 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/03/2009. It is...

Unfixed XSS vulnerability at www.gamecheatsforps2.com

Security researcher Mystick, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.gamecheatsforps2.com, which at the time of submission ranked 1573992 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2008. It ...

Unfixed XSS vulnerability at grtcustom3.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting grtcustom3.com, which at the time of submission ranked 11615066 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

Unfixed XSS vulnerability at www.favorite10.com

Security researcher xylitol, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.favorite10.com, which at the time of submission ranked 1945749 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. It is...

Unfixed XSS vulnerability at grtupgrade1.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting grtupgrade1.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

Unfixed XSS vulnerability at www.grtcustom6.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.grtcustom6.com, which at the time of submission ranked 13893763 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It is...

Unfixed XSS vulnerability at www.grtcustom4.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.grtcustom4.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It is currently...

Unfixed XSS vulnerability at grtcustom1.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting grtcustom1.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently unfixe...

Unfixed XSS vulnerability at grtmlsv2.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting grtmlsv2.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently unfixed...

Telephone Directory 2008 Arbitrary Delete Contact Exploit

Exploit for unknown platform in category web applications ========================================================= Telephone Directory 2008 Arbitrary Delete Contact Exploit ========================================================= !/usr/bin/perl -w Telephone Directory 2008 see down Greetz :...

AIX 530007 : U817657

The remote host is missing AIX PTF U817657 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530007 : U816555

The remote host is missing AIX PTF U816555 which is related to the security of the package devices.pci.df1000f7.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530007 : U817629

The remote host is missing AIX PTF U817629 which is related to the security of the package devices.pci.00105000.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610000 : U813292

The remote host is missing AIX PTF U813292 which is related to the security of the package devices.pci.00105000.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530006 : U816730

The remote host is missing AIX PTF U816730 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610000 : U812687

The remote host is missing AIX PTF U812687 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Unfixed XSS vulnerability at av1.av49.com

Security researcher PD, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting av1.av49.com, which at the time of submission ranked 85963 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently unfixe...