Microsoft Internet Explorer COM对象实例化代码执行漏洞（MS06-013）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在试图将某些COM对象实例化为ActiveX控件时，COM对象可能会破坏系统状态。攻击者可以创建恶意的Web页面，如果用户访问了该页面的话就会导致内存破坏。成功利用这个漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 5.0 SP4 Microsoft Internet Explorer 6.0 - Microsoft Windows XP SP2...

Microsoft Internet Explorer COM对象实例化内存破坏漏洞（MS06-021）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在将Wmm2fxa.dll的一些不应在IE中实例化的COM对象实例化为ActiveX控件的时候存在内存破坏漏洞，如果用户受骗访问了恶意的页面的话就会导致执行任意代码。 受影响的ActiveX对象包括： DXImageTransform.Microsoft.MMSpecialEffect1Input DXImageTransform.Microsoft.MMSpecialEffect1Input.1 DXImageTransform.Microsoft.MMSpecialEffect2Input...

Microsoft IE COM对象实例化内存破坏漏洞（MS06-042）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer在处理COM控件初始化时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果没有正确地调用Nth方法的话，则DirectAnimation.DATuple ActiveX控件中存在内存破坏漏洞。攻击者可以提供正整数来控制数据引用计算，然后控制执行。这个漏洞的起因是在调用danim.dll中的TupleNthBvrImpl::GetTypeInfo时对索引缺少过滤检查。如果用户受骗访问了恶意站点的话就可能触发这个漏洞，导致执行任意代...

ask_rave 0.9 PR - end.php?footfile Remote File Inclusion

askrave 0.9 PR - end.php?footfile Remote File Inclusion ================================================================== askrave RFI ================================================================== Info:- Scripts: askrave Download: http://rave.jk-digital.com/site/scripts/files/ask09PR.zip...

Internet Explorer COM Object Heap Overflow Download Exec Exp

No description provided by source. / ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org :...

Internet Explorer VML Rect Fill Method Buffer Overflow (MS06-055; CVE-2006-4868)

Microsoft Internet Explorer is the most widely used Internet browser. Microsoft Internet Explorer fails to handle Vector Markup Language VML tags. VML is a set of XML tags for drawing vector graphics. A remote attacker may trigger this vulnerability to execute arbitrary code on the target system...

RamaCMS-adodb.txt

===================================================================== RamaCMS adodb.inc.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download Scrip...

Update Protection against Microsoft Internet Explorer Memory Corruption Vulnerabilities (MS06-042)

Microsoft Internet Explorer is prone to multiple memory corruption vulnerabilities. The application fails to properly handle un-initialized COM objects and chained Cascading Style Sheets CSS. This flaw allows attackers to cause denial of service and possibly to execute arbitrary code by convincin...

EasyBannerFree.txt

------------------------------- EasyBannerFree functions.php Remote File Include Exploit ------------------------------- find by : abu ahmed ------------------------------- Exploit : http://sitename.com/ path /functions.php?sphppath=shell ------------------------------- thanks for : xp10.com...

php_news-2.0.txt

phpnews = 2.0 Remote File Include Vulnerabilities Script.............. :phpnews Discovered By.... : Root3rH3ll Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.PersainFox.com We ArE : Root3rH3LL & Arash.Rj Spical TNX Irania Hackers : Aria-Security , Crouz ,...

webnews-v1.4.txt

============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v1.4...

US-CERT Technical Cyber Security Alert TA06-270A -- Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-270A Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability Original release date: September 27, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows...

magicnewspro.txt

==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.reamdaysoft.com...

Microsoft Internet Explorer - COM Object Remote Heap Overflow

/ ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org : http://www.xsec.org : Tested : Windows 20...

Microsoft Internet Explorer - COM Object Remote Heap Overflow

Microsoft Internet Explorer - COM Object Remote Heap Overflow / ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author :...

PhotoKorn Gallery 1.52 - dir_path Remote File Inclusion

PhotoKorn Gallery 1.52 - dirpath Remote File Inclusion ==================================================================== PhotoKorn Gallery = 1.52 dirpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackr...

CVE-2006-4495

Microsoft Internet Explorer allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including 1 ciodm.dll, 2 myinfo.dll, 3 msdxm.ocx, and 4 creator.dll...

CVE-2006-4494

Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including 1 tcprops.dll, 2 fp30wec.dll, 3 mdt2db.dll, 4 mdt2qd.dll, and 5...

CVE-2006-4495

Microsoft Internet Explorer allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including 1 ciodm.dll, 2 myinfo.dll, 3 msdxm.ocx, and 4 creator.dll...

CVE-2006-4494

Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including 1 tcprops.dll, 2 fp30wec.dll, 3 mdt2db.dll, 4 mdt2qd.dll, and 5...