3985 matches found
CVE-2007-0468
Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ MSVC in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file...
CVE-2007-0468
Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ MSVC in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file...
mssploit.txt
Advisory: //////////// Microsoft Visual C++ 6.0 is prone to stack based memory corruption vulnerability during processing .RC resource files, caused by the lack of input data boundary check. Vulnerable software: //////////////////// Microsoft Visual Studio 6.0 SP6 Impact: /////// Remote code...
Microsoft Visual C++ (.RC) resource files buffer overflow vulnerability
Advisory: //////////// Microsoft Visual C++ 6.0 is prone to stack based memory corruption vulnerability during processing .RC resource files, caused by the lack of input data boundary check. Vulnerable software: //////////////////// Microsoft Visual Studio 6.0 SP6 Impact: /////// Remote code...
Microsoft Visual C++ (.RC)资源文件远程栈溢出漏洞
Microsoft Visual C++是基于Windows平台的C++编译器。 Microsoft Visual C++资源编译器RCDLL.DLL模块的MSDEV.EXE进程在处理.rc资源文件时存在栈溢出漏洞，远程攻击者可能利用此漏洞通过诱骗用户打开恶意资源文件来控制用户机器。 在处理类似于以下的文件名字段时： 1 TYPELIB MOVEABLE PURE "FilePath01"...
MXBB Meeting Module Module_Root_Path远程文件包含漏洞
mxBB Meeting Module是一款基于PHP的WEB应用程序。 mxBB Meeting Module不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'meetingconstants.php'脚本对用户提交的'modulerootpath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码 mxBB Meeting Module 1.1.2 目前没有详细解决方案提供： http://www.mx-system.com/index.php?page=4&action=file&fileid=1...
MXBB Charts Module Module_Root_Path远程文件包含漏洞
mxBB Charts Module是一款基于PHP的WEB应用程序。 mxBB Charts Module不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'chartsconstants.php'脚本对用户提交的'modulerootpath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 mxBB Charts Module 1.0 目前没有详细解决方案提供： http://www.mx-system.com/...
BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow
/ ======================================================================== 0-day BlazeVideo HDTV Player 30 days of Media Player Exploits by Greg Linares Discovered and Reported By: Greg Linares [email protected] Reported Exploit Date: 12/1/2006 / include include include int mainint argc, ch...
CVE-2006-5617
Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote attackers to read or download arbitrary files via a base64-encoded file path containing a .. dot dot sequence in the file parameter...
CVE-2006-5617: Undefined Security Weakness
Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote attackers to read or download arbitrary files via a base64-encoded file path containing a .. dot dot sequence in the file parameter...
UeberProject <= 1.0 (login/secure.php) Remote File Include Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Uber Project Document Management System secure.php Remote File Include Vulnerability...
OpenDock FullCore 4.4 - Remote File Inclusion
OpenDock FullCore 4.4 - Remote File Inclusion --------------------------------------------------------------------------------- OpenDock FullCore = v4.4 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact ...
CVE-2006-5178
Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the openbasedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the openbasedir check and before the file is opened by the underlying system, as...
VideoDB 2.2.1 - pdf.php Remote File Inclusion
VideoDB 2.2.1 - pdf.php Remote File Inclusion ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:...
puma10.txt
+-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpRFI.htm + +-------------------------------------------------------------------- + +...
Mambo Component User Home Pages 0.5 - Remote File Inclusion
Mambo Component User Home Pages 0.5 - Remote File Inclusion Kurdish Security Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : User Home Pges Site : www.ravensportal.co.uk Thanx :...
CVE-2006-3532
PHP file inclusion vulnerability in includes/editnew.php in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Pathsextensionspath parameter...
CentOS 3 : perl (CESA-2005:881)
Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilitie...
Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion
Script: Redaxo CMS Vendor: http://www.redaxo.de Discovered: beford Redaxo 3.2 - 3.1 - 3.0 ./redaxo/include/addons/imageresize/pages/index.inc.php?REXINCLUDEPATH=attacker Redaxo 3.0 ./redaxo30demospatched/redaxo/include/addons/imageresize/pages/index.inc.php?subpage=relations&REXINCLUDEPATH=attack...
