Remote code execution

The GdPicture 1 Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control gdpicture4s.ocx 4.7.0.1 and 2 Pro Imaging SDK 5.7.1 GdPicturePro5S.Imaging ActiveX control gdpicturepro5s.ocx 5.7.0.1 allows remote attackers to create, overwrite, and modify arbitrary files via the SaveAsPDF method...

vista-access.txt

// ////////////////////////////////////////////////////////////// // Windows Vista BSoD Access violation from limited account. // // Tested on Home Premium & Ultimate @ October 05 2008 // ///////////////////////////////////////////////////////////////// include include WCHAR szClass = L"BSODClass...

MS Windows Vista Access Violation from Limited Account Exploit (BSoD)

No description provided by source. // ////////////////////////////////////////////////////////////// // Windows Vista BSoD Access violation from limited account. // // Tested on Home Premium & Ultimate @ October 05 2008 // ///////////////////////////////////////////////////////////////// include...

Microsoft Windows Vista - Access Violation from Limited Account (Blue Screen of Death)

Microsoft Windows Vista - Access Violation from Limited Account Blue Screen of Death // ////////////////////////////////////////////////////////////// // Windows Vista BSoD Access violation from limited account. // // Tested on Home Premium & Ultimate @ October 05 2008 //...

MS Windows Vista Access Violation from Limited Account Exploit (BSoD)

Exploit for unknown platform in category dos / poc ===================================================================== MS Windows Vista Access Violation from Limited Account Exploit BSoD ===================================================================== //...

Microsoft Windows Vista - Access Violation from Limited Account (Blue Screen of Death)

// ////////////////////////////////////////////////////////////// // Windows Vista BSoD Access violation from limited account. // // Tested on Home Premium & Ultimate @ October 05 2008 // ///////////////////////////////////////////////////////////////// include include WCHAR szClass = L"BSODClass...

Remote code execution

The Chilkat XML ChilkatUtil.CkData.1 ActiveX control ChilkatUtil.dll 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the 1 SaveToFile, 2 SaveToTempFile, or 3 AppendBinary method. NOTE: this issue might only be exploitable in...

Gentoo Security Advisory GLSA 200511-16 (GNUMP3d)

The remote host is missing updates announced in advisory GLSA 200511-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

myPHPNuke 1.8.8_8rc2 - Cross-Site Scripting SQL Injection

myPHPNuke 1.8.88rc2 - Cross-Site Scripting SQL Injection Cross-Site Scripting and SQL Injection vulnerabilities in myPHPNuke By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2391/ Description: There are Cross-Site Scripting and SQL Injection vulnerabilities in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the installer in Serendipity S9Y 1.3 allow remote attackers to inject arbitrary web script or HTML via 1 unspecified path fields or 2 the database host field. NOTE: the timing window for exploitation of this issue might be limited...

Vulnerabilities in Timbuktu Pro 8.6.5

Luigi Auriemma Application: Timbuktu Pro Remote Control Software http://www.netopia.com/software/products/tb2/ Versions: = 8.6.5 RC 229 Platforms: Windows Mac OS X has not been tested Bugs: A Denial of Service B limited upload directory traversal Exploitation: remote Date: 10 Mar 2008 Author: Lui...

Debian Security Advisory DSA 596-1 (sudo)

The remote host is missing an update to sudo announced via advisory DSA 596-1. OpenVAS Vulnerability Test $Id: deb5961.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 596-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 870-1 (sudo)

The remote host is missing an update to sudo announced via advisory DSA 870-1. Tavis Ormandy noticed that sudo, a program that provides limited super user privileges to specific users, does not clean the environment sufficiently. The SHELLOPTS and PS4 variables are dangerous and are still passed...

Design/Logic Flaw

PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backupphpwebquest.php, which leaks the credentials in an error message if a call to /usr/bin/mysqldump fails. NOTE: this might only be an issue in limited environments...

CVE-2007-6211

Send ICMP Nasty Garbage sing on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L output log file option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to overrid...

Spoofing

Send ICMP Nasty Garbage sing on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L output log file option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to overrid...

CVE-2007-6211

Send ICMP Nasty Garbage sing on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L output log file option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to overrid...

CVE-2007-6211

The CVE-2007-6211 issue affects Debian GNU/Linux’s sing utility. It allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. The vulnerability is noted as limited in scope because sing is not installed setuid by default, so exploitation requires ove...

CVE-2007-6211

Send ICMP Nasty Garbage sing on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L output log file option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to overrid...

Common UNIX Printing System IPP Tags Memory Corruption Vulnerability

The Common UNIX Printing System CUPS versions 1.3.3 and prior contain a vulnerability that can allow an unauthenticated, remote attacker to create a denial of service DoS condition or execute arbitrary code with the privileges of the user. The vulnerability exists in the ippReadIO function when...