DSquare Exploit Pack: D2SEC_DSADMIN

Name| d2secdsadmin ---|--- CVE| CVE-2008-0892 Exploit Pack| D2ExploitPack Description| RedHat Administration Server Exploit Notes|...

CVE-2007-5664

DB2 DB2 Administration Server (DAS) component db2dasrrm is vulnerable to a local, symlink-based file-overwrite during initialization. Affected versions are IBM DB2 Universal Database: 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16. The underlying issue allows a local user t...

Important: Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 5 security update

An updated redhat-ds package that addresses a security issue is now available as Red Hat Directory Server 7.1, Service Pack 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant directory server. A...

[NEWS] Websphere MQ Security Exit Authentication Bypass Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Immunity Canvas: FLASH_DUKE

Name| flashduke ---|--- CVE| CVE-2007-0071 Exploit Pack| CANVAS Description| Adobe Flash Player DefineSceneAndFrameLabelData Tag Overflow Notes| CVE Name: CVE-2007-0071 VENDOR: Adobe VersionsAffected: Adobe Flash Player 9.0.115.0 and below Repeatability: References:...

DSquare Exploit Pack: D2SEC_HPOVAS

Name| d2sechpovas ---|--- CVE| CVE-2008-1697 Exploit Pack| D2ExploitPack Description| HP OpenView Network Node Manager 7.5.3 Stack Overflow Notes|...

PT-2008-1509 · Macrovision · Installshield Installscript One-Click Install (Oci) Activex Control

Name of the Vulnerable Software and Affected Versions: Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control version 12.0 before SP2 Description: The issue concerns the failure of the Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control to validate...

MS Windows Explorer Unspecified . DOC File Denial of Service Exploit-vulnerability warning-the black bar safety net

MS Windows Explorer Unspecified . DOC File Denial of Service Exploit Download the file anywhere excluding on the desktop and try to browse it with the Windows explorer and you'll see how it crashes ! - Tested on Windows XP Service Pack 1 and Service Pack 2. Hope the latest Microsoft fixes will fi...

MS Windows Explorer Unspecified .DOC File Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================================== MS Windows Explorer Unspecified .DOC File Denial of Service Exploit =================================================================== MS Windows Explorer Unspecified .DOC File...

Microsoft Windows Explorer - '.doc' File Denial of Service

MS Windows Explorer Unspecified .DOC File Denial of Service Exploit Download the file anywhere excluding on desktop and try to browse it with the Windows explorer and you'll see how it crashes ! - Tested on Windows XP Service Pack 1 and Service Pack 2. Hope the latest Microsoft fixes will fix tha...

DSquare Exploit Pack: D2SEC_MOODLE_REXEC

Name| d2secmoodlerexec ---|--- CVE| CVE-2008-1502 Exploit Pack| D2ExploitPack Description| d2secmoodlerexec Notes|...

DSquare Exploit Pack: D2SEC_CALISTCTRL

Name| d2seccalistctrl ---|--- CVE| CVE-2008-1472 Exploit Pack| D2ExploitPack Description| CA BrightStor ListCtrl ActiveX Stack Overflow Notes|...

Immunity Canvas: FUZZYLIME_INCLUDE

Name| fuzzylimeinclude ---|--- CVE| CVE-2008-1405 Exploit Pack| CANVAS Description| fuzzylime cms = 3.01 Remote File include Notes| CVE Name: CVE-2008-1405 VENDOR: FuzzyLime Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1405...

DSquare Exploit Pack: D2SEC_CISCOIPM

Name| d2secciscoipm ---|--- CVE| CVE-2008-1157 Exploit Pack| D2ExploitPack Description| Cisco CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability Notes|...

DSquare Exploit Pack: D2SEC_CISCOUCP

Name| d2secciscoucp ---|--- CVE| CVE-2008-0533 Exploit Pack| D2ExploitPack Description| Cisco User-Changeable Password UCP Stack Overflow Notes|...

Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029)

Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 949029 Published: March 11, 2008 Version: 1.0 General Information Executive Summary This security update resolves several privately reported and publicly reported vulnerabilities i...

Input validation

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."...

Security Update for the 2007 Microsoft Office System (KB947801)

A security vulnerability exists in the Compatibility Pack for the 2007 Office System that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...

DSquare Exploit Pack: D2SEC_JAVAWS

Name| d2secjavaws ---|--- CVE| CVE-2008-1190 Exploit Pack| D2ExploitPack Description| Sun Java Web Start Untrusted Application Vulnerability Notes|...

Vulnerability in Invision Power Board

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости причём persistent XSS в Invision Power Board. Из-за отсутствия защиты от исполнения JavaScript кода из flash, при включенной поддержке флеша в сообщениях, атакующий может внедрить ссылку на специальный флеш-файл в...