CVE-2009-3737

CVE-2009-3737 concerns Oracle Siebel Option Pack for IE ActiveX control. The vulnerability stems from improper memory initialization in the NewBusObj method, enabling remote code execution via a crafted HTML document. CERT and Red Hat entries corroborate remote execution potential and provide mit...

CVE-2010-2557

CVE-2010-2557 is an Internet Explorer 6 memory-corruption vulnerability (Uninitialized Memory Corruption) where an object that is not properly initialized or is deleted can be exploited by a crafted web page to execute arbitrary code remotely. The issue is part of a family of IE flaws disclosed i...

Microsoft Internet Explorer multiple security vulnerabilities

Multiple memory corruptions, crossite access...

Oracle Siebel Option Pack for IE ActiveX控件内存初始化漏洞

CVE ID: CVE-2009-3737 Siebel Option Pack for IE是Oracle Siebel CRM软件所提供的ActiveX控件。 Siebel Option Pack for IE ActiveX控件没有正确地初始化由NewBusObj方式所使用的内存，用户受骗访问了恶意网页并用特制参数调用该方式就可能导致执行任意代码。 Oracle Siebel Option Pack for IE 7.x 临时解决方法： 将以下文本保存为.REG文件并导入： Windows Registry Editor Version 5.00...

Oracle Siebel Option Pack for IE ActiveX control memory initialization vulnerability

Overview The Oracle Siebel Option Pack for IE ActiveX control fails to properly initialize memory, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Siebel Option Pack for IE is an ActiveX control that is provided by Oracle Siebel...

微软IE本地文件探测漏洞

微软ie在处理对本地文件请求时存在一些问题，可以用来探测本地文件是否存在 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 厂商补丁： Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/windows/ie/default.asp script window.onerror=function alert'文件存在'...

Internet Explorer 7.0 Denial Of Service

IE 7.0 - DoS Microsoft Clip Organizer Multiple Insecure ActiveX Control Date: 19th july 2010 Author: Dinesh Arora & Beenu Arora Affected / Tested Version of IE : 7.0 / WinXP SP3 / MS Office 2007 contact: [email protected], [email protected] Greetz to :b0nd, Fbih2s,r45c4l,Charles...

Code injection

IOS 12.252SE and 12.252SE1 on Cisco Industrial Ethernet IE 3000 series switches has 1 a community name of public for RO access and 2 a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SN...

CVE-2010-1574

CVE-2010-1574 affects Cisco Industrial Ethernet 3000 Series switches running IOS 12.2(52)SE or 12.2(52)SE1, where hard-coded SNMP read/write community strings (public for RO and private for RW) can let remote attackers modify configurations or gain sensitive info via SNMP. Cisco’s advisory (CSCtf...

Vulnerability: be wary of“help and Support Center”uninvited-vulnerability warning-the black bar safety net

Microsoft has just released 6 months patch, Windows XP it also exposed a new HCP Protocol vulnerabilities. After 3 6 0 Security Center to verify, when the Windows XP users use IE series browsers open hung it to the web, or playing“the infected”of the music file, the PC will automatically...

Yahoo! Mail Cross Site Scripting

Title: Yahoo mail Dom Based Cross Site Scripting Author: Pratul Agrawal Date: 13/06/2010 Indian Hacker Service: Webmail Vendor: Yahoo mail, and possibly others Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: High Tested on: Microsoft IE 7.0 Details: Yahoo mail filte...

Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability (980195)

This host is missing a critical security update according to Microsoft Bulletin MS10-034. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability (980195)

This host is missing a critical security update according to Microsoft Bulletin MS10-034. OpenVAS Vulnerability Test $Id: secpodms10-034.nasl 5361 2017-02-20 11:57:13Z cfi $ Description: Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability 980195 Authors: Veerendra GG...

IP2location.dll 1.0.0.1 Initialize() Buffer Overflow

IP2Location.dll v1.0.0.1 Initialize Buffer Overflow by sinn3r / IP2Location.dll v1.0.0.1 Initialize Buffer Overflow Vulnerable version : v1.0.0.1 checksum: d86933ab58720c384bdc081d33684f7d patched version : v1.0.0.1 checksum: bf66e2ef8be3c301b381cfb424ad0afc, v3.0.1.0 Found and coded by sinn3r...

Worldweaver DX Studio Player 3.0.29 - 'shell.execute()' Command Execution (Metasploit)

$Id: dxstudioplayerexec.rb 9375 2010-05-26 22:39:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Rumba FTP Client 4.2.0.0 Buffer Overflow

Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow by sinn3r / Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflo Vulnerable version download: http://download.cnet.com/Rumba-FTP/3000-21604-10587778.html Found and coded by sinn3r Greets: Corelan Security Team &...

Rumba FTP Client 'FTPSFtp.dll' 4.2.0.0 - 'OpenSession()' Local Buffer Overflow

Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow by sinn3r / Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow Vulnerable version download: http://download.cnet.com/Rumba-FTP/3000-21604-10587778.html Found and coded by sinn3r Greets: Corelan Security Team &...

All Browsers - Long Unicode DoS PoC

Exploit for multiple platform in category dos / poc =================================== All Browsers - Long Unicode DoS PoC =================================== DrIDE - All Browsers - Long Unicode DoS PoC function boom //The number of strings increases the amount of memory consumed, quicker crash...

All Browsers - Long Unicode Denial of Service (PoC)

All Browsers - Long Unicode Denial of Service PoC DrIDE - All Browsers - Long Unicode DoS PoC function boom //The number of strings increases the amount of memory consumed, quicker crash where applicable. var longunistring1 = unescape"%u4141%u4141"; var longunistring2 = unescape"%u4242%u4242"; va...

EDraw Flowchart ActiveX Control 2.3 (EDImage.ocx) DoS Exploit (IE)

Exploit for windows platform in category dos / poc ========================================================================= EDraw Flowchart ActiveX Control 2.3 EDImage.ocx Remote DoS Exploit IE ========================================================================= EDraw Flowchart ActiveX...