33 matches found
Remote code execution
A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update...
Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files. To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded. The update...
Epignosis eFront CMS Arbitrary File Upload Vulnerability (CNVD-2017-26067)
Epignosis eFront CMS is an online learning system with an Ajax interface from Epignosis, USA. The system allows you to create and manage courses with tools such as a content editor, file manager, and digital library. An arbitrary file upload vulnerability exists in Epignosis eFront CMS versions...
Microsoft Windows .URL File Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. An attacker can craft a malicious file with a...
The vulnerability of the cURL library, which allows a hacker to perform authentication as another user
The vulnerability of the ConnectionExists function in the cURL library’s lib/url.c file is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass authentication by acting on behalf of another user through a request...
Microsoft Windows Explorer Invalid URL File Parsing Stack Overflow (CVE-2006-3351)
The Microsoft Windows series of operating systems is one of the most popular systems in use on workstations, home computers, and servers. All versions of the OS include a graphical shell interface, called Windows Explorer. There exists a stack exhaustion vulnerability in Microsoft Windows Explore...
ICQ 6.5 URL Search Hook (Windows Explorer) Remote BOF PoC
No description provided by source. ?php / ICQ 6.5 URL Search Hook/ICQToolBar.dll .URL file processing Windows Explorer remote buffer overflow poc by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ If the resulting file is placed on the desktop, against ex. xp sp3 process...
Microsoft Windows Explorer buffer overflow
Buffer overflow during right-click on .url file with oversized mhtml://mid: URL. Vulnerability can be used for hidden malware installation...
DBHcms 1.1.4 - 'code' Remote File Inclusion
!/usr/bin/perl DBHcms $shellurl = "http://localhost/s.txt"; print " DBHcms ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? "; chomp$code=; $code = s/|new; $ua-timeout10; $ua-envproxy; $response = $ua-post$target,...
CVE-2006-3351
CVE-2006-3351 is a Windows Explorer vulnerability (explorer.exe) affecting Windows XP/2003 where parsing of .url files with InternetShortcut tags can overflow the stack. A crafted .url file containing a long URL and many file: specifiers may trigger a denial of service and possibly arbitrary code...
CVE-2004-0848
Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after 1 "%00 null byte in .doc filenames or 2 "%0a" carriage return in .rtf filenames...
CVE-2004-0848
CVE-2004-0848 corresponds to a buffer overflow in Microsoft Office XP that can allow remote code execution via specially crafted HTML links referencing URL file locations. Connected advisories detail that the overflow occurs in the Office process handling URL file references, enabling arbitrary c...
