CVE-2003-1566

Microsoft Internet Information Services IIS 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection...

CVE-2003-1567: Exposure of Sensitive Information to an Unauthorized Actor

The undocumented TRACK method in Microsoft Internet Information Services IIS 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by usi...

CVE-2003-1566: Undefined Security Weakness

Microsoft Internet Information Services IIS 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection...

phpstore Wholesale (track.php?id) SQL Injection Vulnerability

No description provided by source. | | | Wholesale track.php id Remote SQL Injection Vulnerability | | | | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: [email protected] | | | | script : http://www.phpstore.info/productinfo.php?cPath=3653&productsid=162 | | DorK :...

Stack overflow

Stack-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a QuickTime Virtual Reality QTVR movie file with crafted 1 maxTilt, 2 minFieldOfView, and 3 maxFieldOfView elements in panorama track PD...

CVE-2008-3625: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a QuickTime Virtual Reality QTVR movie file with crafted 1 maxTilt, 2 minFieldOfView, and 3 maxFieldOfView elements in panorama track PD...

Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the handling of...

Acoustica Mixcraft <= 4.2 Build 98 (mx4 file) Local BOF Exploit

Exploit for unknown platform in category local exploits =============================================================== Acoustica Mixcraft = 4.2 Build 98 mx4 file Local BOF Exploit =============================================================== !/usr/bin/perl Acoustica Mixcraft mx4 file Local...

CVE-2008-1016

Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption...

Buffer overflow

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...

ultra-noob.txt

/ Date : May 28th 2007. UltraISO executes calc.Don't forget you need to have the bin and cue file in the same Directory special thanks to Thomas Pollet also. / include include //Calc shellcode unsigned char shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

Cross site scripting

Cross-site scripting XSS vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter...

CVE-2007-2819

Cross-site scripting XSS vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter...

CVE-2007-2819

Cross-site scripting XSS vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter...

CVE-2007-2819

CVE-2007-2819 is a cross-site scripting (XSS) vulnerability in Track+ versions up to 3.3.2, exploitable via the projId parameter in reportItem.do. The affected software is Track+, and the root cause is the injection of arbitrary web script or HTML. The connected documents confirm the vulnerabilit...

CVE-2007-2819: Undefined Security Weakness

Cross-site scripting XSS vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter...

Track+ XSS vuln.

Vuln. discovered by : r0t Date: 19 May 2007 vendor:http://www.trackplus.com/ affected versions: 3.3.2 and prior Track+ contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the "projId" parameter in "reportItem.do" isn't properly sanitised before being returned to the...

CVE-2007-2568: Undefined Security Weakness

Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via a long 1 tag or 2 track type in a CUE file...

Cross site scripting

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

CVE-2007-0059

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...