7664 matches found
CVE-2007-5892: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the pdg2.dll ActiveX control in SSReader 4.0 and earlier allow remote attackers to execute arbitrary code via a long argument to the Register method. NOTE: some details were obtained from third party sources...
Code injection
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php...
Buffer overflow
Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-5807: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-5822: Improper Control of Generation of Code
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php...
VulnCheck KEV: CVE-2007-5807
Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Scribe <= 0.2 Remote PHP Code Execution Vulnerability
No description provided by source. --------------------------------------------------------------- Scribe = 0.2 Remote PHP Code Execution Download: http://sourceforge.net/projects/scribe/ --------------------------------------------------------------- By KiNgOfThEwOrLd...
CVE-2007-5729
The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used...
DEBIAN-CVE-2007-5729
The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used...
CVE-2007-1321
Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...
CVE-2007-5729: Improper Restriction of Operations within the Bounds of a Memory Buffer
The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used...
PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability
No description provided by source. ---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO udplink.net &...
PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================= PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability ============================================================= ----------------------------------------------...
NuSEO PHP Enterprise 1.6 Remote File Inclusion Vulnerability
No description provided by source. Vulnerability Type: Remote File Inclusion Vulnerable file: /NuSEO PHP Enterprise.v1.6 Nulled by DGT/NuSEO.PHP.Enterprise.v1.6.PHP.NULL-DGT/nuseo/admin/nuseoadmind.php Exploit URL:...
NuSEO PHP Enterprise 1.6 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ NuSEO PHP Enterprise 1.6 Remote File Inclusion Vulnerability ============================================================ Vulnerability Type: Remote File Inclusion Vulnerable fil...
x86_64 syscall vulnerability
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x8664 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds...
Chupix CMS 0.2.3 (repertoire) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= Chupix CMS 0.2.3 repertoire Remote File Inclusion Vulnerability ================================================================= chupix 0.2.3 /admin/include/header.php RFI...
PT-2007-6213 · Frontaccounting · Frontaccounting
Name of the Vulnerable Software and Affected Versions: FrontAccounting version 1.13 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to root parameter to specific PHP files, such as "access/login.php" and "includes/lang/language.php", when registe...