Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)

This host is missing a critical security update according to Microsoft Bulletin MS10-104 OpenVAS Vulnerability Test $Id: secpodms10-104.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft SharePoint Could Allow Remote Code Execution Vulnerability 2455005 Authors: Madhuri D Copyright: Copyright c 2010...

Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)

This host is missing a critical security update according to Microsoft Bulletin MS10-104 SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Unrestricted file upload

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka...

CVE-2010-3964

CVE-2010-3964 is an unrestricted file upload vulnerability in the Document Conversions Launcher Service of Microsoft Office SharePoint Server 2007 SP2, exploitable when the Document Conversions Load Balancer Service is enabled. A crafted SOAP request to TCP 8082 can lead to remote code execution ...

CVE-2010-3964

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka...

Microsoft Sharepoint code execution

Document Conversions Launcher Service code execution on SOAP request processing...

Microsoft SharePoint Malformed Request Remote Code Execution (MS10-104; CVE-2010-3964)

Document Conversions Launcher Service schedules and initiates the document conversions on a server. When Microsoft Office SharePoint Server 2007 passes the service a document conversion request, the Document Conversions Launcher Service calls the appropriate document converter. A remote code...

Penetration Tester XSSer v1.0 - New Version Download

All of you web application penetration testers, check out this release of XSSer version 1.0! From this release, the author plans to rename XSSer to "The Mosquito". Our first post regarding XSSer can be found here. "XSSer is an open source penetration testing tool that automates the process of...

CVE-2010-0397

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpcdecoderequest function, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash and possibly have unspecified oth...

Active Business Directory 2 - 'searchadvance.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41995/info Active Business Directory is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Installshield 2009 File Overwrite

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...

JRE applet launcher vulnerability

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.221 and earlier; allows remote attackers to create or modify arbitrary files via vecto...

Serial port shell binding, busybox Launching shellcode

Exploit for linux/x86 platform in category shellcode ====================================================== Serial port shell binding, busybox Launching shellcode ====================================================== / General: Serial port shell binding, busybox launching shellcode.. yey!...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...

openSUSE 10 Security Update : xfce4-panel (xfce4-panel-4888)

A buffer overflow in xfce4-panel's launcher tooltips has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xfce4-panel-4888. The text description of this plugin is C SUSE LLC...

CVE-2007-6531

Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...

DEBIAN-CVE-2007-6531

Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...

Stack overflow

Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...

CVE-2007-6531

Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...