EnjoySAP ActiveX rfcguisink.rfcguisink.1 Remote Heap Overflow PoC

No description provided by source. !-- ======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Heap Overflow Release Date: 5 July 2007 Reference: NGS00482 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-290 Systems Affected: All ASCII Versions Risk: High...

CVE-2007-3605: Undefined Security Weakness

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

CVE-2007-3607: Undefined Security Weakness

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

CVE-2007-3608: Undefined Security Weakness

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

CVE-2007-3606: Undefined Security Weakness

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function...

EnjoySAP ActiveX kweditcontrol.kwedit.1 Remote Stack Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================= EnjoySAP ActiveX kweditcontrol.kwedit.1 Remote Stack Overflow PoC ================================================================= Vendor: SAP Vendor Reference: SECRES-289 Systems...

EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow (PoC)

EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow PoC Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 January 2007 Released: 19 January 2007 Approved: 29 January 2007 Reported: 11 January 2007...

EnjoySAP SAP GUI multiple ActiveX security vulnerabilities

Multiple DoS conditions, buffer overflows, file creation...

EnjoySAP ActiveX rfcguisink.rfcguisink.1 Remote Heap Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================= EnjoySAP ActiveX rfcguisink.rfcguisink.1 Remote Heap Overflow PoC ================================================================= Vendor: SAP Vendor Reference: SECRES-290 Systems...

EnjoySAP, SAP GUI for Windows - Stack Overflow

======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Stack Overflow Release Date: 5 July 2007 Reference: NGS00483 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Status: Fixed ======== TimeLine ========...

EnjoySAP SAP GUI ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in SAP KWEdit ActiveX Control kwedit.dll 6400.1.1.41 provided by EnjoySAP GUI. By sending an overly long string to the "PrepareToPostHTML" method, an attacker may be able to execute arbitrary code. Module Options msf use...

Cross site scripting

Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3546

Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3546

CVE-2007-3546 affects the Windows GUI of Nessus Vulnerability Scanner prior to version 3.0.6. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially affecting the user’s browser session. The vulnerability is a...

CVE-2007-3546

Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3546: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

DSA-1292-1 qt4-x11

Bulletin has no description...

aroundme-rfi.txt

AROUNDMe 077 Found by kezzap66345 Script Download:http://download.savannah.gnu.org/releases/aroundme/aroundme077.tar.gz ERROR1: File:\components\core\inc\coreprofile.header.php includeonce$languagepathcore . 'inc/mecommon.inc.php'; rfi coded RFI2:...

AROUNDMe 0.7.7 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. AROUNDMe 077 Found by kezzap66345 Script Download:http://download.savannah.gnu.org/releases/aroundme/aroundme077.tar.gz ERROR1: File:\components\core\inc\coreprofile.header.php includeonce$languagepathcore . 'inc/mecommon.inc.php'; rfi coded RFI1:...

USN-445-1: XMMS vulnerabilities

Sven Krewitt of Secunia Research discovered that XMMS did not correctly handle BMP images when loading GUI skins. If a user were tricked into loading a specially crafted skin, a remote attacker could execute arbitrary code with user privileges...