Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...

CorelDRAW X3 v13.0.0.576 (crlrib.dll) DLL Hijacking Exploit

Summary Graphic design software for striking visual communication. Description CorelDRAW X3 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extensions are .cmx and .csl thru crlrib.dll library. / CorelDRAW X3...

Location-Based Services Raise Privacy, Security Risks

The growing popularity of location-based services in the social networking world is a serious security and privacy risk that must be taken seriously. These services, which allow users to share their whereabouts with other people by disclosing their own location, is a very popular trend on social...

Corel PHOTO-PAINT X3 13.0.0.576 - 'crlrib.dll' DLL Hijacking

/ Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3 suffers from a dll hijacking...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 DLL Hijacking (dwmapi.dll)

Exploit for windows platform in category local exploits ===================================================================== Adobe ExtendedScript Toolkit CS5 v3.5.0.52 DLL Hijacking dwmapi.dll ===================================================================== / Adobe ExtendedScript Toolkit CS...

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking / Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc...

Media Player Classic 6.4.9.1 - iacenc.dll DLL Hijacking

Media Player Classic 6.4.9.1 - iacenc.dll DLL Hijacking / Media Player Classic 6.4.9.1 iacenc.dll DLL Hijacking Exploit Vendor: Gabest Product Web Page: http://sourceforge.net/projects/guliverkli Affected Version: 6.4.9.1 revision 73 Summary: Media Player Classic MPC is a compact media player for...

Adobe ExtendedScript Toolkit CS5 3.5.0.52 - 'dwmapi.dll' DLL Hijacking

/ Adobe ExtendedScript Toolkit CS5 v3.5.0.52 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v3.5.0.52 ExtendScript 4.1.23 ScriptUI 5.1.37 Summary: The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with...

Media Player Classic 6.4.9.1 - 'iacenc.dll' DLL Hijacking

/ Media Player Classic 6.4.9.1 iacenc.dll DLL Hijacking Exploit Vendor: Gabest Product Web Page: http://sourceforge.net/projects/guliverkli Affected Version: 6.4.9.1 revision 73 Summary: Media Player Classic MPC is a compact media player for 32-bit Microsoft Windows. The application mimics the lo...

Media Player Classic 6.4.9.1 DLL Hijacking Exploit (iacenc.dll)

Exploit for windows platform in category local exploits =============================================================== Media Player Classic 6.4.9.1 DLL Hijacking Exploit iacenc.dll =============================================================== / Media Player Classic 6.4.9.1 iacenc.dll DLL...

Corel PHOTO-PAINT X3 v13.0.0.576 DLL Hijacking Exploit (crlrib.dll)

Exploit for windows platform in category local exploits =================================================================== Corel PHOTO-PAINT X3 v13.0.0.576 DLL Hijacking Exploit crlrib.dll =================================================================== / Corel PHOTO-PAINT X3 v13.0.0.576...

Adobe ExtendedScript Toolkit CS5 3.5.0.52 - dwmapi.dll DLL Hijacking

Adobe ExtendedScript Toolkit CS5 3.5.0.52 - dwmapi.dll DLL Hijacking / Adobe ExtendedScript Toolkit CS5 v3.5.0.52 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v3.5.0.52 ExtendScript 4.1.23 ScriptUI 5.1.37 Summary: The...

CorelDRAW X3 13.0.0.576 - 'crlrib.dll' DLL Hijacking

/ CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3 suffers from a dll hijacking vulnerability that...

NullSoft Winamp 5.581 - 'wnaspi32.dll' DLL Hijacking

/ Nullsoft Winamp 5.581 wnaspi32.dll DLL Hijacking Exploit Vendor: Nullsoft. Product Web Page: http://www.winamp.com Affected Version: 5.581 x86 Summary: Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-forma...

Cross-site Request Forgery (CSRF) Vulnerabilities in Amiro.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amiro.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Amiro.CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

Sports Accelerator Suite 2.0 - news_id SQL Injection

Sports Accelerator Suite 2.0 - newsid SQL Injection Sports Accelerator Suite v2.0 newsid Remote SQL Injection Vulnerability Vendor: Athlete Web Services, Inc. / AWS Sports Product Web Page: http://www.athletewebservices.com Summary: Content Management System PHP+MySQL. Description: The CMS is...

SmartCode ServerX VNC Server 1.1.5.0 Denial Of Service

Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS Exploit Vendor: SmartCode Solutions Product Web Page: htt://www.s-code.com Version Tested: 1.1.5.0 Summary: SmartCode ServerX VNC Server control is a VNC server implemented as an ActiveX component, which makes it extremely easy...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS Exploit Vendor: SmartCode Solutions Product Web Page: htt://www.s-code.com Version Tested: 1.1.5.0 Summary: SmartCode ServerX VNC Server control is ...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS

Exploit for windows platform in category dos / poc ================================================================ SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS ================================================================ Vendor: SmartCode Solutions Product Web Page:...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - 'scvncsrvx.dll' Denial of Service

Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS Exploit Vendor: SmartCode Solutions Product Web Page: htt://www.s-code.com Version Tested: 1.1.5.0 Summary: SmartCode ServerX VNC Server control is a VNC server implemented as an ActiveX component, which makes it extremely easy...