Visagesoft eXPert PDF EditorX - 'VSPDFEditorX.ocx' Insecure Method

VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom...

CVE-2008-4919

Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...

Security feature bypass

Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...

CVE-2008-4919

Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...

CVE-2008-4919

Product affected: Visagesoft eXPert PDF Viewer ActiveX Control (VSPDFViewerX.ocx) 3.0.990.0. Vulnerability: ActiveX Control based file overwrite vulnerability that allows a remote attacker to overwrite arbitrary files by supplying a full pathname to the savePageAsBitmap method. Root cause / vecto...

CVE-2008-4919: Improper Input Validation

Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...

Visagesoft eXPert PDF ViewerX (VSPDFViewerX.ocx) File Overwrite

Exploit for unknown platform in category remote exploits =============================================================== Visagesoft eXPert PDF ViewerX VSPDFViewerX.ocx File Overwrite =============================================================== VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx...

Instant Expert Analysis ActiveX控件任意代码下载和执行漏洞

BUGTRAQ ID: 31752 CVECAN ID: CVE-2008-4385 Instant Expert Analysis允许站点通过单击方式快速分析用户的软硬件。 Instant Expert Analysis对Firefox或Netscape浏览器使用签名的Java Applet（SRLApplet.class，由sysreqlab2.jar或sysreqlab.jar提供），对Internet Explorer使用签名的ActiveX控件（sysreqlab.dll、sysreqlabsli.dll或sysreqlab2.dll）。...

CVE-2008-4385: Improper Control of Generation of Code

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in 1 a certain ActiveX control sysreqlab2.cab, sysreqlab.dll,...

[SECURITY] Fedora 7 Update: tetex-3.0-40.3.fc7

TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a typesetter-independent .dvi DeVice Independent file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or...

Expert Advisior (index.php id) Remote SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Expert Advisior SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

CVE-2007-3882

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3882

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3882

The CVE-2007-3882 entry affects the Expert Advisor software, with a SQL injection in index.php via the id parameter that enables remote execution of arbitrary SQL commands. The vulnerability is described plainly as SQL injection; no exploit details, affected versions, or concrete remediation step...

CVE-2007-3882: Undefined Security Weakness

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

Expert Advisior - 'index.php?id' SQL Injection

--==+================================================================================+==-- --==+ Expert Advisior SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: intitle:"Answer...

Expert Advisior (index.php id) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ================================================================ Expert Advisior index.php id Remote SQL Injection Vulnerbility ================================================================...

Article suggestion: "wannabe security group members" doing harm to software developers

NLST, Security Advisory, ITSecurity.com, ISS, CVE, OSVDB and NetSecurity.. I'm kindly asking you to remove the mention about security flaw in software product developed by me, as that information is incorrect. Related links are listed near the end of this message. --- Hello, I'd like to suggest y...

CVE-2005-4786: Undefined Security Weakness

Buffer overflow in the archive decompression library vrAZMain.dll 5.8.22.137, as used in HAURI anti-virus products including 1 ViRobot Expert 4.0, 2 ViRobot Advanced Server, and 3 HAURI LiveCall, allows user-assisted attackers to execute arbitrary code via an ALZ archive containing a file with a...