Gentoo Security Advisory GLSA 200805-04 (egroupware)

The remote host is missing updates announced in advisory GLSA 200805-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Sina DLoader Class - ActiveX Control DonwloadAndInstall Method Arbitrary File Download

Sina DLoader Class - ActiveX Control DonwloadAndInstall Method Arbitrary File Download source: https://www.securityfocus.com/bid/30223/info Sina DLoader is prone to a vulnerability that can cause malicious files to be downloaded and saved to arbitrary locations on an affected computer. Attackers...

Sina DLoader Class - ActiveX Control 'DonwloadAndInstall' Method Arbitrary File Download

source: https://www.securityfocus.com/bid/30223/info Sina DLoader is prone to a vulnerability that can cause malicious files to be downloaded and saved to arbitrary locations on an affected computer. Attackers may exploit this issue to overwrite sensitive files with malicious data that will...

ContentNow 1.4.1 (Upload/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= ContentNow 1.4.1 Upload/XSS Multiple Remote Vulnerabilities ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

PHPmotion 2.0 - update_profile.php Arbitrary File Upload

PHPmotion 2.0 - updateprofile.php Arbitrary File Upload = $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at t...

benjacms-uploadxss.txt

============================================================== Benja CMS 0.1 Upload/XSS Multiple Remote Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

SiteXS CMS 0.1.1 - Arbitrary File Upload / Cross-Site Scripting

=========================================================== SiteXS CMS Upload/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Microsoft Word 20002002 - Bulleted List Handling Remote Memory Corruption

Microsoft Word 20002002 - Bulleted List Handling Remote Memory Corruption source: https://www.securityfocus.com/bid/29769/info Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word...

Microsoft Word 2000/2002 - Bulleted List Handling Remote Memory Corruption

source: https://www.securityfocus.com/bid/29769/info Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word files. Successfully exploiting this issue will corrupt memory and crash the...

CDNetworks Nefficient Download ActiveX控件多个安全漏洞

BUGTRAQ ID: 28666 CDNetworks是亚洲最大的CDN服务供应商，提供各种在线游戏和视频服务。 CDNetworks所提供的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Neffycient...

Microsoft Works File Converter Field Length Remote Code Execution Vulnerability

Description Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a malicious '.wps' file. Successfully exploiting this issue would allow the...

Open redirect

The Custom Button Installer dialog in Google Toolbar 4 and 5 beta presents certain domain names in the 1 "Downloaded from" and 2 "Privacy considerations" sections without verifying domain names, which makes it easier for remote attackers to spoof domain names and trick users into installing...

CVE-2007-6536

The CVE-2007-6536 issue affects Google Toolbar 4 and 5 beta where the Custom Button Installer dialog may display domain names in the “Downloaded from” and “Privacy considerations” fields without validating them. The root cause is lack of domain verification, enabling remote attackers to spoof dom...

CVE-2007-6536

The Custom Button Installer dialog in Google Toolbar 4 and 5 beta presents certain domain names in the 1 "Downloaded from" and 2 "Privacy considerations" sections without verifying domain names, which makes it easier for remote attackers to spoof domain names and trick users into installing...

Microsoft DirectX SAMI File Parsing Stack Buffer Overflow Vulnerability

Description DirectX is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data An attacker could exploit this issue to execute arbitrary code within the privileges of the currently logged-in user. Failed exploit...

Microsoft Word工作区内存破坏远程代码执行漏洞（MS07-060）

BUGTRAQ ID: 25906 CVECAN ID: CVE-2007-3899 Word是Office办公套件中的文字处理软件。 Word处理特制Word文件的方式中存在一个远程执行代码漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 如果用户打开带有畸形字符串的特制Word文件，该漏洞就可能允许远程执行指令。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2004 for Mac Microsoft Word 2002 SP3 Microsoft Word 2000 SP3 临时解决方法：...

Unreal Commander畸形压缩文档多个远程漏洞

BUGTRAQ ID: 25419 Unreal Commander是一款免费的Windows平台文件管理器。 Unreal Commander在解压文件时存在多个安全漏洞，攻击者可能通过诱使用户处理恶意文件控制用户系统。 如果用户使用Unreal Commander解压了文件名包含有类似于以下目录遍历序列的ZIP或RAR文档的话： Something/../../../../../../Program Files/Something/ws232.dll 就会导致在指定目录中创建ws232.dll文件。 ZIP文档中包含有两处写入文件名的位置：Local文件头和Central...

CVE-2007-0740

Alias Manager in Apple Mac OS X 10.3.9 and 10.4.9 does not display files with the same name in mounted disk images that have the same name, which might allow user-assisted attackers to trick a user into executing malicious files...

CVE-2007-0740

Alias Manager in Apple Mac OS X 10.3.9 and 10.4.9 does not display files with the same name in mounted disk images that have the same name, which might allow user-assisted attackers to trick a user into executing malicious files...

CVE-2007-0740

CVE-2007-0740 affects Apple Mac OS X 10.3.9 and 10.4.9. The issue lies in the Alias Manager, which fails to display files with the same name when mounted in disk images that share that name, potentially allowing a user-assisted attacker to trick the user into launching a malicious file. The avail...