Oracle Siebel Option Pack for IE ActiveX控件内存初始化漏洞

CVE ID: CVE-2009-3737 Siebel Option Pack for IE是Oracle Siebel CRM软件所提供的ActiveX控件。 Siebel Option Pack for IE ActiveX控件没有正确地初始化由NewBusObj方式所使用的内存，用户受骗访问了恶意网页并用特制参数调用该方式就可能导致执行任意代码。 Oracle Siebel Option Pack for IE 7.x 临时解决方法： 将以下文本保存为.REG文件并导入： Windows Registry Editor Version 5.00...

ffdshow Video Codec - Denial of Service

ffdshow Video Codec - Denial of Service !/usr/bin/perl Exploit Title: Malformed MP4 Local DoS for ffdshow Video Codec tryouts rev. 3467 20100713 x86 Date: 08/08/2010 Author: Nishant Das Patnaik Web: http://nishantdaspatnaik.yolasite.com Software Link:...

ffdshow Video Codec Denial of Service

Exploit for windows platform in category dos / poc ===================================== ffdshow Video Codec Denial of Service ===================================== !/usr/bin/perl Exploit Title: Malformed MP4 Local DoS for ffdshow Video Codec tryouts rev. 3467 20100713 x86 Date: 08/08/2010 Author...

PEEL CMS (rubID?) XXS/SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= PEEL CMS rubID? XXS/SQL Injection Vulnerability ================================================= \ / / CODE \ / / alert"XXS bug Found"; http://www.site.com/index.php?RubID=SQL Injection...

Oracle Siebel Option Pack for IE ActiveX control memory initialization vulnerability

Overview The Oracle Siebel Option Pack for IE ActiveX control fails to properly initialize memory, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Siebel Option Pack for IE is an ActiveX control that is provided by Oracle Siebel...

Ballettin Forum SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Ballettin Forum SQL Injection Vulnerability =========================================== ==================================================================== Exploit Title: Ballettin Forum Multiple SQ...

Ballettin Forum - SQL Injection

==================================================================== Exploit Title: Ballettin Forum Multiple SQL Injection Vulnerability Date: 25/07/2010 Author: 3v0 aka evolution Software Link: http://www.ballettin.com Tested on: Windows Xp Pack 3...

Immunity Canvas: WINDOWS_SHELL_LNK

Name| windowsshelllnk ---|--- CVE| CVE-2010-2568 Exploit Pack| CANVAS Description| windowsshelllnk Notes| CVE Name: CVE-2010-2568 VENDOR: Microsoft Notes: VersionsAffected: Windows XP, Windows 2003, Windows Vista, Windows 2008, Windows 7 Repeatability: Infinite References:...

IBM Solid Database < 6.5 Service Pack 2 Handshake Request Username Field Remote Code Execution

Binary data 5599.prm...

Outlook Web Access 2007 - Cross-Site Request Forgery

Outlook Web Access 2007 - Cross-Site Request Forgery Source: http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails Demo: http://www.youtube.com/watch?v=Bx-zfu0uXYg After Nduja Connection worm and the Memova issue, it's now time to shed a light on vulnerabilities affecting corporat...

Nuance OmniPage 16 Professional installs multiple vulnerable Microsoft runtime libraries

Nuance Communications, Inc. offer on their german web page http://www.nuance.de/kostenlose-ocr-software-test/download.asp a trial version of OmniPage 16 Professional for download. The installer OPPro16TD.exe a self-extracting RAR archive was published "Tue, 30 Jun 2009 14:38:28 GMT" according to...

PHP pack()函数中断处理信息泄露漏洞

CVE ID: CVE-2010-2191 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的pack函数中存在信息泄露漏洞： PHPFUNCTIONunpack char format, input, formatarg, inputarg; int formatlen, formatarglen, inputarglen; int inputpos, inputlen, i; if zendparseparametersZENDNUMARGS TSRMLSCC, "ss", &formatarg, &formatarglen, &inputarg...

Microsoft Help Files (.CHM): 'Locked File' Feature Bypass

No description provided by source. Changes made with Windows XP introduced additional origin validation for files downloaded from the Internet when saved to an NTFS volume. This 'feature' is present in Windows XP, Vista and 7. When a user downloads a .CHM file using Internet Explorer or another...

win32/xp sp3 (SPA) URLDownloadToFileA + CreateProcessA + ExitProcess

Exploit for win32 platform in category shellcode ==================================================================== win32/xp sp3 SPA URLDownloadToFileA + CreateProcessA + ExitProcess ==================================================================== !/usr/bin/perl c0d3d by r0i aka d0lc3 Explo...

DSquare Exploit Pack: D2SEC_AXIS

Name| d2secaxis ---|--- CVE| CVE-2010-1632 Exploit Pack| D2ExploitPack Description| Apache Axis2 Remote File Access Notes|...

Batch Audio Converter Lite Edition 1.0.0.0 Buffer Overflow

Exploit Title: Batch Audio Converter Lite Edition = v1.0.0.0 Stack Buffer Overflow SEH Date: 06/17/2010 Author: modpr0be Software Link: http://www.freesoftwaretoolbox.com/files/batchaudiosetup.exe Version: =1.0.0.0 0.4.0.0 tested and worked Tested on: Windows XP SP2 Type of Vuln: SEH CVE : N/A Co...

Immunity Canvas: EVOCAM

Name| evocam ---|--- CVE| CVE-2010-2309 Exploit Pack| CANVAS Description| EVOCAM Notes| CVSS: 7.5 Repeatability: One shot VENDOR: Evologic CVE Url: https://vulners.com/cve/CVE-2010-2309 CVE Name: CVE-2010-2309...

SA-CONTRIB-2010-063 - Studio theme pack - Cross Site Scripting

Studio theme pack is a set of themes for use as a base in creating a new theme. The Canvas-theme, part of Studio theme pack and used as base theme for the Workspace and Paint themes, also included in Studio theme pack, does not sanitize some of the user-supplied data before displaying it, leading...

Unreal IRCD 3.2.8.1 Remote Backdoor

It seems as if our backdoor was found so we figured we cant sell this in the ac1db1tch3z CANVAS pack PhosphoricAc1d Exploit pack. P.S. Since it took months and months for the community to find the system exploit, we still have a more complicated zerday unrealircd hack module. Please inquire when...

CVE-2010-1253

Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file wi...