CPA Lead Script SQL Injection

In The Name Of Allah The Mercifull Tybe: SQL Injection Vulnerabilities Vendor: www.v-eva.com + Software: CPA Lead Script + author: R3d-D3v!L + TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ----4.!.5 ? contact: Xathotmail.co.jp - ? Date: 14.Jan.2010 ? T!ME: 05:15 am GMT ? Home: © Offensive Security ?...

SuSE Update for acroread SUSE-SA:2010:022

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2010:022 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

JQL not respecting Issue Security Level "Project Lead"

While writing TestIssueSecurityLevel I found the following problem: fred is not a Project Lead HSP-3 has Issue Security Level of "Project Lead" only. empty JQL to show all visible issues doesn't show HSP-3. make fred the Project Lead same query: still no HSP-3 however: fred can browse to HSP-3 an...

JQL not respecting Issue Security Level "Project Lead"

While writing TestIssueSecurityLevel I found the following problem: fred is not a Project Lead HSP-3 has Issue Security Level of "Project Lead" only. empty JQL to show all visible issues doesn't show HSP-3. make fred the Project Lead same query: still no HSP-3 however: fred can browse to HSP-3 an...

JQL not respecting Issue Security Level "Project Lead"

While writing TestIssueSecurityLevel I found the following problem: fred is not a Project Lead HSP-3 has Issue Security Level of "Project Lead" only. empty JQL to show all visible issues doesn't show HSP-3. make fred the Project Lead same query: still no HSP-3 however: fred can browse to HSP-3 an...

Unfixed XSS vulnerability at www.giorgiotave.it

Security researcher kript0, has submitted on 07/01/2008 a cross-site-scripting XSS vulnerability affecting www.giorgiotave.it, which at the time of submission ranked 7522 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is current...

PPStream 2.1.16.1003 overflow-vulnerability warning-the black bar safety net

/ PPStream PowerList. ocx 2.1.6.2916 Description: SetBkImage heap and stack overflows, or before the old problems. The previous patch is a PowerPlayer. dll Here the use of the heap overflow and stack overflow, using CFindFile for parameter checking is not strict, resulting in a heap overflow. In...

Buffer overflow

Buffer overflow in a certain ActiveX control in LEAD Technologies LEADTOOLS Raster OCR Document Object Library ltrdc14e.dll 14.5.0.44 allows remote attackers to execute arbitrary code via a long DictionaryFileName property...

CVE-2007-2981

Buffer overflow in a certain ActiveX control in LEAD Technologies LEADTOOLS Raster OCR Document Object Library ltrdc14e.dll 14.5.0.44 allows remote attackers to execute arbitrary code via a long DictionaryFileName property...

CVE-2007-2981

Buffer overflow in a certain ActiveX control in LEAD Technologies LEADTOOLS Raster OCR Document Object Library ltrdc14e.dll 14.5.0.44 allows remote attackers to execute arbitrary code via a long DictionaryFileName property...

CVE-2007-2981

CVE-2007-2981 concerns LEAD Technologies LEADTOOLS Raster OCR Document Object Library (ltrdc14e.dll, version 14.5.0.44). The vulnerability is a buffer overflow in a specific ActiveX control triggered by a long DictionaryFileName property, enabling remote code execution according to the NVD/NVD-de...

CVE-2007-2980: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object LTRIS14e.DLL 14.5.0.44 allows remote attackers to cause a denial of service Internet Explorer crash or execute arbitrary code via a long DriverName property, a different ActiveX control than CVE-2007-2827...

Heap overflow

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control ltisi14E.ocx 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property...

CVE-2007-2827

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control ltisi14E.ocx 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property...

CVE-2007-2827

The CVE-2007-2827 issue affects LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) up to version 14.5.0.44. It is a heap-based buffer overflow in the DriverName property that allows a remote attacker to execute arbitrary code. Exploitation details are not provided in the connected do...

CVE-2007-2827

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control ltisi14E.ocx 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property...

CVE-2007-2771

Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control LTJ2K14.ocx 14.5.0.35 allows remote attackers to execute arbitrary code via a long BitmapDataPath property...

CVE-2007-2771

The CVE-2007-2771 entry concerns the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.ocx) version 14.5.0.35, where a stack-based buffer overflow via a long BitmapDataPath property allows remote code execution. Affected component: LTJ2K14.ocx in LeadTools JPEG 20...

LEAD Technologies JPEG 2000 ActiveX control buffer overflow

Overview The LEAD Technologies JPEG 2000 ActiveX control contains a buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description LEAD Technologies provides imaging software for Windows. The LEAD JPEG 2000 ActiveX control, which ...

CVE-2000-1090: Undefined Security Weakness

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character...