Novell eDirectory 9.0 - DHost Remote Buffer Overflow

Novell eDirectory 9.0 - DHost Remote Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...

Microsoft Internet Explorer OBJECT标签内存破坏漏洞（MS06-021）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在处理某些异常情况时存在内存破坏漏洞。如果用户受骗访问了恶意的站点的话，IE就会允许对象注册可能无法正确处理某些情况的异常处理器，通过特别序列的嵌套“object” HTML标签触发内存破坏，导致执行任意代码。 这个漏洞是CVE-2006-1992漏洞的一个变种。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0 SP4 临时解决方法：...

Microsoft Internet Explorer嵌套OBJECT标签内存破坏漏洞

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer处理某些嵌套OBJECT标签组合的方式存在漏洞，攻击者可能利用此漏洞导致浏览器拒绝服务。 通过以下方式生成的HTML： perl -e 'print "STYLE/STYLE\nOBJECT\nBork\n"x32' test.html 会在mshtml.dll中导致空指针引用和固定的偏移（eax+0x28），从已分配的但清零的内存区域读取指针。...

Microsoft Internet Explorer嵌入图象URI欺骗漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer在处理部分URI连接时存在问题，远程攻击者可以利用这个漏洞隐藏URI连接中的真实内容，诱骗用户访问恶意站点。 图象包含在正确格式的HREF标记中时，可隐藏URI连接中的真实内容，这个漏洞可诱骗用户访问一个非法连接而不被怀疑。 攻击者可以通过提供恶意图象使的显示的URI连接指向合法信任的站点，如果没有任何怀疑的用户把鼠标移到相关的链接，可能导致他们认为链接的是信任正确的站点而被欺骗。 Microsoft Internet Explorer 6.0SP1...

CJ Tag Board PHP远程代码注入漏洞

CJ Tag Board是一款简单易用的网站管理脚本。 CJ Tag Board中存在两个输入验证错误，可能允许恶意攻击者完全入侵有漏洞的系统： 1 在存储前没有正确过滤对tag.php中User-Agent HTTP头的输入，允许注入任意PHP代码。当用户请求all.php脚本时就会执行这些代码。 2 在存储前没有正确过滤对adminindex.php中banned参数的输入，允许注入任意PHP代码。但利用这个漏洞需要管理用户权限。 CJ Website Design CJ Tag Board 3.0...

MS Internet Explorer Object Tag Exploit (MS03-020)

No description provided by source. !/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype dynamic call oferflow url://$shellcode'/'x48jmp %ptrsh the flaw actually exists in URLMON.DLL when converting backslashes to wide char, this can be seen on stack dump near...

Jaws 0.5.2 - '/include/JawsDB.php' Remote File Inclusion

ToXiC Jaws 0.5.2: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: jaws 0.5.2 Sorce Code: http://forge.novell.com/modules/xfcontent/private.php/jaws/jaws-0.5.2/jaws-0.5.2.tar.gz Page: JawsDB.php Problem: GLOBALS"path" not Declare Dir :...

CVE-2006-4819

Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag long link address...

Kmail 1.9.1 - IMG SRC Remote Denial of Service

Kmail 1.9.1 - IMG SRC Remote Denial of Service nnp at silenthack.co.uk http://silenthack.co.uk Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into your local...

CVE-2006-3868

Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag...

CVE-2006-3868

Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag...

CVE-2006-3868

CVE-2006-3868 covers a remote code execution vulnerability in Microsoft Office XP/2003 (Office Smart Tag parsing). A specially crafted Office file with a malformed Smart Tag could allow an attacker to execute arbitrary code when opened by a user. The CERT/MS security notes corroborate this as a r...

CVE-2006-5219

SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter...

CVE-2006-5219

SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter...

SQL injection - moodle

// http://www.w4cking.com Product: moodle 1.6.2 http://www.moodle.org Vulnerability: SQL injection Notes: - SQL injection can be used to obtain password hash - the moodle blog "module" must be enabled - guest access to the blog must be enabled POC:...

Internet Explorer VML rect fill buffer overflow

Added: 09/20/2006 CVE: CVE-2006-4868 BID: 20096 OSVDB: 28946 Background Vector Markup Language VML is an XML-based format for vector graphics. Problem A buffer overflow in Internet Explorer when processing VML code allows remote command execution using a long fill parameter within a rect tag...

CVE-2006-4797

Cross-site scripting XSS vulnerability in tag.php in CloudNine Interactive CJ Tag Board 3.0 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter...

CVE-2006-4797

CVE-2006-4797 describes a cross-site scripting (XSS) vulnerability in CloudNine Interactive CJ Tag Board 3.0 . The flaw occurs in the tag.php handler, where an attacker can inject arbitrary web script or HTML by abusing a JavaScript event in a url BBcode tag within the cjmsg parameter. This is a ...

CVE-2006-4789

Buffer overflow in Open Movie Editor 0.0.20060901 allows local users to cause a denial of service system crash or execute arbitrary code via a long project name in an openmovieeditorproject XML tag...

[eVuln] CJ Tag Board XSS Vulnerability

New eVuln Advisory: CJ Tag Board XSS Vulnerability http://evuln.com/vulns/137/summary.html --------------------Summary---------------- eVuln ID: EV0137 Vendor: CloudNine Interactive Vendor's Web Site: http://www.cloudnineinteractive.co.uk/ Software: Tag Board Sowtware's Web Site:...