IMAGE CONQUEST DICOM SERVER 命令注入漏洞

IMAGE CONQUEST DICOM SERVER is IMAGE an open source application. It can store, validate, query and retrieve through programmable SQL database tables. A security vulnerability exists in CONQUEST DICOM SERVER before 1.5.0, which can be exploited by attackers to execute malicious code...

HP Digital Imaging (hpqvwocx.dll 2.1.0.556) - SaveToFile() Exploit

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol------------------------------------------------------------------------------- bHP Digital Imaging hpqvwocx.dll v. 2.1.0.556 SaveToFile Insecure Method/b url: http://www.hp.com/ author: shinnai...

HP Digital Imaging (hpodio08.dll) Insecure Method Exploit

No description provided by source. Exploit Title: HP Digital Imaging hpodio08.dll Insecure Method Exploit Author: ThE g0bL!N Version: All vesion Tested on: Windows xp pack 2 Code : titleExploited By : ThE g0bL!N /title BODY object id=dz classid=clsid:697F5209-0494-11D6-A2B0-0060B0FBD872/object...

HP Digital Imaging - hpodio08.dll Insecure Method

HP Digital Imaging - hpodio08.dll Insecure Method Exploit Title: HP Digital Imaging hpodio08.dll Insecure Method Exploit Author: ThE g0bL!N Version: All vesion Tested on: Windows xp pack 2 Code : Exploited By : ThE g0bL!N function Doit File = "dz.exe" dz.SaveFile HP Digital Imaging hpodio08.dll...

HP Digital Imaging (hpodio08.dll) Insecure Method Exploit

Exploit for windows platform in category remote exploits ========================================================= HP Digital Imaging hpodio08.dll Insecure Method Exploit ========================================================= Exploit Title: HP Digital Imaging hpodio08.dll Insecure Method Explo...

HP Digital Imaging Insecure Method

Exploit Title: HP Digital Imaging hpodio08.dll Insecure Method Exploit Date: 24-04-2010 Author: ThE g0bL!N Version: All vesion Tested on: Windows xp pack 2 Code : Exploited By : ThE g0bL!N HP Digital Imaging hpodio08.dll Insecure Method Exploit Note: Dz.exe Will be created In C:\WINDOWS\ : 011100...

HP Digital Imaging - 'hpodio08.dll' Insecure Method

Exploit Title: HP Digital Imaging hpodio08.dll Insecure Method Exploit Author: ThE g0bL!N Version: All vesion Tested on: Windows xp pack 2 Code : Exploited By : ThE g0bL!N function Doit File = "dz.exe" dz.SaveFile HP Digital Imaging hpodio08.dll Insecure Method Exploit Note: Dz.exe Will be create...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-3649

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-3649

The CVE-2007-3649 issue affects HP Digital Imaging’s hpqvwocx.dll 2.1.0.556 (ActiveX control). The vulnerability is an absolute path traversal in the SaveToFile method’s second argument, allowing remote attackers to create or overwrite arbitrary files. The provided sources confirm the affected co...

HP Digital Imaging (hpqvwocx.dll v. 2.1.0.556) SaveToFile() Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------- bHP Digital Imaging hpqvwocx.dll v. 2.1.0.556 "SaveToFile" Insecure Method/b url: http://www.hp.com/ author:...

hpdig-savetofile.txt

------------------------------------------------------------------------------- HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 "SaveToFile" Insecure Method url: http://www.hp.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

HP Digital Imaging (hpqvwocx.dll v. 2.1.0.556) SaveToFile() Exploit

Exploit for unknown platform in category remote exploits =================================================================== HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 SaveToFile Exploit ===================================================================...

HP Digital Imaging hpqvwocx.dll 2.1.0.556 - SaveToFile() File Write

HP Digital Imaging hpqvwocx.dll 2.1.0.556 - SaveToFile File Write ------------------------------------------------------------------------------- HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 "SaveToFile" Insecure Method url: http://www.hp.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

HP Digital Imaging 'hpqvwocx.dll 2.1.0.556' - 'SaveToFile()' File Write

------------------------------------------------------------------------------- HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 "SaveToFile" Insecure Method url: http://www.hp.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

CVE-2007-3487

Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard HP Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method...

CVE-2007-3487

CVE-2007-3487 describes an absolute path traversal in HP Photo Digital Imaging’s hpqxml.dll (version 2.0.0.133) ActiveX control. The vulnerability allows remote attackers to create or overwrite arbitrary files by supplying bytes to the saveXMLAsFile method. The impact is partial confidentiality a...

CVE-2007-3487

Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard HP Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method...

HP Photo Digital Imaging HPQXML.DLL任意文件覆盖漏洞

HP Photo Digital Imaging是一款图象处理软件。 HP Photo Digital Imaging HPQXML.DLL ActiveX控件不正确调用方法，远程攻击者可以利用漏洞覆盖系统任意文件，造成拒绝服务或任意代码执行。 问题存在于HPQXML.DLL中的ActiveX控件，由于不安全调用"saveXMLAsFile"方法，构建恶意的WEB页，诱使用户访问可导致覆盖系统任意文件，造成拒绝服务或任意代码执行。 HP HP Photo Digital Imaging hpqxml.dll 2.0.0.133 目前没有解决方案提供：...

hpdi-write.txt

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: GoodFellas Security Research Team Technical Detail saveXMLAsFile method receives a filename as an argument, with this format "c:\path\file". Proof of C...