Ultra Shareware Office Control - ActiveX HttpUpload Buffer Overflow (Metasploit)

$Id: ultraofficehttpupload.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Classified Ultra Remote Insecure Cookie Handling

Exploit for php platform in category web applications ================================================ Classified Ultra Remote Insecure Cookie Handling ================================================ Author : KnocKout Thankz.: DaiMon Contact: email protected Script Name : Classified Ultra...

Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow

This module exploits a stack-based buffer overflow in Ultra Shareware's Office Control. When processing the 'HttpUpload' method, the arguments are concatenated together to form a command line to run a bundled version of cURL. If the command fails to run, a stack-based buffer overflow occurs when...

CVE-2010-0275

Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58...

CVE-2010-0274

Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5...

CVE-2010-0275

CVE-2010-0275 affects IBM Lotus iNotes (Domino Web Access) prior to 229.241 on Domino 8.0.2 FP3, where the status-alerts URL script handling is faulty. The issue stems from improper handling of script commands, with unspecified impact and attack vectors per the description. The NVD entry lists a ...

CVE-2010-0274

Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5...

CVE-2010-0275

Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58...

Cross site scripting

Cross-site scripting XSS vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3540

The CVE corresponds to a cross-site scripting (XSS) vulnerability in listads.php of YourFreeWorld Ultra Classifieds Pro, exploitable via the cn parameter to inject arbitrary script/HTML. The description notes remote exploit with no confirmed proof-of-exploit elsewhere in the provided documents. N...

CVE-2009-3539

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...

CVE-2009-3540

Cross-site scripting XSS vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3539

CVE-2009-3539 describes multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) cname parameter to subclass.php and (2) sn parameter to listads.php. The associated NVD metrics i...

[SECURITY] Fedora 11 Update: planet-2.0-10.fc11

Planet is a flexible feed aggregator, this means that it downloads feeds and aggregates their content together into a single combined feed with the latest news first. It uses Mark Pilgrim's Ultra-liberal feed parser so can read from RDF, RSS and Atom feeds and Tomas Styblo's template library to...

Ultra Classifieds Pro Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

YourFreeWorld Ultra Classifieds - 'subclass.php?cname' Cross-Site Scripting

source: www.securityfocus.com/bid/43490/info Ultra Classifieds is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

YourFreeWorld Ultra Classifieds - subclass.php?cname Cross-Site Scripting

YourFreeWorld Ultra Classifieds - subclass.php?cname Cross-Site Scripting source: www.securityfocus.com/bid/43490/info Ultra Classifieds is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these...

YourFreeWorld Ultra Classifieds - listads.php Multiple Cross-Site Scripting Vulnerabilities

YourFreeWorld Ultra Classifieds - listads.php Multiple Cross-Site Scripting Vulnerabilities source: www.securityfocus.com/bid/43490/info Ultra Classifieds is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker...

YourFreeWorld Ultra Classifieds - 'listads.php' Multiple Cross-Site Scripting Vulnerabilities

source: www.securityfocus.com/bid/43490/info Ultra Classifieds is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Sun Solaris Ultra-SPARC T2加密提供设备驱动本地拒绝服务漏洞

Bugraq ID: 35438 Sun Solaris是一款商业性质的操作系统。 Solaris Ultra-SPARC T2加密提供设备驱动存在内存泄漏问题，本地或者远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris build snv...