CVE-2007-2448

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information revision properties via svn 1 propget, 2 proplist, or 3 propedit...

CVE-2005-4842

The System Monitor Source Properties control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

CVE-2005-4842

The CVE-2005-4842 entry describes a vulnerability in the System Monitor Source Properties control that can cause a denial-of-service (Internet Explorer crash) when a remote attacker creates a COM object of the control’s CLSID, which IE does not intend to use. Multiple sources (NVD, CVE list, Red ...

Code injection

Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls. NOTE: this issue can be leveraged for phishing and other attacks...

E-Book Systems FlipViewer ActiveX control stack buffer overflows

Overview The E-Book Systems FlipViewer ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description E-Book Systems FlipViewer is software for viewing "FlipBooks." FlipViewer includes an...

Fixed in Apache Tomcat 5.5.22, 5.0.SVN

Important: Directory traversal CVE-2007-0450 The fix for this issue was insufficient. A fix was also required in the JK connector module for httpd. See CVE-2007-1860 for further information. Tomcat permits '', '%2F' and '%5C' as path delimiters. When Tomcat is used behind a proxy including, but...

Apple QuickTime多个远程缓冲区溢出漏洞

Apple QuickTime是一款流行的多媒体播放器，支持多种媒体格式。 QuickTime在处理各种媒体格式时存在多个缓冲区溢出漏洞，远程攻击者可能利用这些漏洞通过诱使用户打开处理畸形媒体文件控制用户机器。 具体条目如下： QuickTime处理3GP视频文件时存在整数溢出。如果用户受骗打开了恶意的电影的话，就会触发这个溢出，导致拒绝服务或执行任意代码。（CVE-2007-0711） QuickTime处理MIDI文件时存在堆溢出。如果用户受骗打开了恶意的MIDI文件的话，就会触发这个溢出，导致拒绝服务或执行任意代码。（CVE-2007-0712）...

MS Windows (.doc File) Malformed Pointers Denial of Service Exploit

No description provided by source. / Microsoft Windows .doc File Malformed Pointers DoS &...

MS Windows (.doc File) Malformed Pointers Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================================== MS Windows .doc File Malformed Pointers Denial of Service Exploit =================================================================== /\ Microsoft Windows .doc File Malformed...

CVE-2007-0208

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code...

Telestream Flip4Mac format string vulnerabilities

Momory corruption on malformed WMV file ASFFilePropertiesObject size field...

Default credentials

BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password...

Include file vulnerability details-vulnerability warning-the black bar safety net

Author: IceskYsl@1st Source: Joystiq1. S. Thttp://www.1steam.cn/ Affirmed: the original, welcome to reprint, please indicate the source rambled1. S. Thttp://www.1steam.cn/ ============= First, let's discuss the include file vulnerability,the first thing to ask is,what is"remote file inclusion...

XSS 0DAY-vulnerability warning-the black bar safety net

See dream light out! I also do not hide! 1 0 On 7, When I sent the logs,prompting everyone! Here was the last issued byXSS WORM beginning to try to continue it. Actually very simple,is two times the transfer code. DIV STYLE="background-image: urljavascript:var XmlHttp=new ActiveXObject"Microsoft...

Hacker attack and Defense also talk about cross-site scripting attacks and Defense-vulnerability warning-the black bar safety net

On the network there was about cross-site scripting attacks and Defense articles, but as the attack technology advances, previously about a cross site scripting attack the views and theories can not meet now the attack and Defense of the need, and because of this for cross-site scripting cognitiv...

Free online movie crack(latest technologies)-vulnerability warning-the black bar safety net

Actually slightly understand a little web of friends all know to hack movies online is the best way to put pages saved, and then use the page editing software will save the page to open, and then figure out where the url links can be This is obviously a very good way, but also there is no matter...

We do not pay much attention to the super command! - Vulnerability warning-the black bar safety net

View the system uptime: In the CMD the following input: systeminfo CMD interface to modify In the CMD the following input: prompt hack Defense Run the Add/Remove Programs In the CMD the following to enter: appwiz. cpl Run the INternet properties: In the CMD the following to enter: inetcpl. cpl 当然...

CVE-2006-5041

Unspecified vulnerability in Hot Properties possibly comhotproperties 0.97 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5041

Technical details, affected versions, impact, and remediation are not provided in the supplied documents. Monitor for updates from NVD/Red Hat/CVE listings for any concrete information.

CVE-2006-5041

Unspecified vulnerability in Hot Properties possibly comhotproperties 0.97 and earlier for Joomla! has unspecified impact and attack vectors...