Microsoft Windows HTML Help ActiveX code execution

It's possible to access unsafe functions from web page. Vulnerability can be used for hidden malware installation...

Microsoft Visual Studio 64-bit time functions DoS

Invalid use of assert-style macro causes application termination for timet values behind MAXTIME64T January, 1 3000...

security flaw

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service daemon crash via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."...

Sql injection

SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to the id parameter...

CVE-2007-0789

SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to the id parameter...

Design/Logic Flaw

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall before 2.4.16.174 does not validate arguments that originate in user mode for the 1 NtConnectPort and 2 NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service system crash and possibly gain...

Format string

Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling certain Apple AppKit functions...

CVE-2007-0644

Format string vulnerability in Apple Safari 2.0.4 419.3 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in filenames that are not properly handled when calling the 1 NSLog and 2 NSBeginAlertSheet Apple AppKit functions...

CVE-2007-0645

Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling certain Apple AppKit functions...

CVE-2007-0645

Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling certain Apple AppKit functions...

Phpbb Tweaked <= 3 (phpbb_root_path) Remote Inclusion Vulnerability

No description provided by source. ----------------------------------------------- Phpbb Tweaked phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: includeonce...

Omegaboard <= 1.0beta4 (functions.php) Remote File Include Vuln

Exploit for unknown platform in category web applications =============================================================== Omegaboard = 1.0beta4 functions.php Remote File Include Vuln =============================================================== -----------------------------------------------...

CVE-2007-0444

CVE-2007-0444 affects Citrix Presentation Server 4.0, Citrix MetaFrame Presentation Server 3.0, and Citrix MetaFrame XP 1.0. It is a stack-based/buffer overflow in the print provider library (cpprov.dll) that occurs when long arguments are passed to EnumPrintersW or OpenPrinter, allowing executio...

Bradabra 2.0.5 - includeincludes.php Remote File Inclusion

Bradabra 2.0.5 - includeincludes.php Remote File Inclusion ====================================================================== Bradabra == v2.0.5 Remote File Include Vulnerability ====================================================================== Downlaoad Script...

Bradabra &lt;= 2.0.5 (include/includes.php) Remote Inclusion Vulnerability

No description provided by source. ====================================================================== Bradabra == v2.0.5 Remote File Include Vulnerability ====================================================================== Downlaoad Script :ftp://ftp1.comscripts.com/PHP/773bradabra-205.gz...

Include file vulnerability details-vulnerability warning-the black bar safety net

Author: IceskYsl@1st Source: Joystiq1. S. Thttp://www.1steam.cn/ Affirmed: the original, welcome to reprint, please indicate the source rambled1. S. Thttp://www.1steam.cn/ ============= First, let's discuss the include file vulnerability,the first thing to ask is,what is"remote file inclusion...

Liens_Dynamiques 2.1 - AdminLien.php Security Restriction Bypass

LiensDynamiques 2.1 - AdminLien.php Security Restriction Bypass source: https://www.securityfocus.com/bid/22068/info The 'liensdynamiques' program is prone to a vulnerability that lets attackers bypass security restrictions. An attacker can exploit this issue to gain unauthorized access to the...

Sql injection

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via 1 the cat parameter to albmgr.php, and possibly 2 the gid parameter to usermgr.php; 3 the start parameter to dbecard.php; and the...

CVE-2006-6834

Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to 1 "unneeded legacy functions" and 2 "Several low level security fixes."...

CVE-2006-6834

CVE-2006-6834 describes multiple vulnerabilities in Joomla! before 1.0.12. Connected records confirm a cross-site scripting issue in Joomla! (per JVNDB-2006-000852) and note multiple remote vulnerabilities with unspecified impact in older Joomla! releases. The OpenVAS and VuXML entries reiterate ...