CVE-2008-0347

CVE-2008-0347 concerns an unspecified vulnerability in the Oracle Ultra Search component of Oracle Collaboration Suite 10.1.2, and in related Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and Application Server 9.0.4.3 and 10.1.2.0.2. The issue is described as having unknown impact and local attack vecto...

CVE-2008-0347: Undefined Security Weakness

Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01. NOTE: Oracle has not disputed a reliable claim that...

SA-2008-007 - Drupal core - Cross site scripting (register_globals)

When theme .tpl.php files are accessible via the web and the PHP setting registerglobals is set to enabled, anonymous users are able to execute cross site scripting attacks via specially crafted links. Drupals .htaccess attempts to set registerglobals to disabled and also prevents access to...

[Full-disclosure] 0day0day0day0day AURACMS XSS!! LATEST VERSION!!! 0day0day0day0day

0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day 0day0day0day0day 0day0day0day0day!!!!!!!!!!!!!!!!!!!!! BROUGHT 2 U BY UlTRa HAQRS 4 AL7 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 0day0day0day0dayTITle!!:::::::::::::AURA CMS 2.1...

Buffer overflow

Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-5807

Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-5807

Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-5807

A buffer overflow exists in the register function of the Ultra Star Reader ActiveX control within SSReader . This vulnerability allows remote attackers to execute arbitrary code via unspecified vectors. This vulnerability has been confirmed as exploited in the wild , with specific sightings docum...

CVE-2007-5807: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

VulnCheck KEV: CVE-2007-5807

Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

SSReader Ultra Star Reader ActiveX Control Register Method Buffer Overflow Vulnerability

Description SSReader Ultra Star Reader is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary code within the context of t...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method...

CVE-2007-4902

CVE-2007-4902 describes an absolute path traversal in an ActiveX control within CryptoX.dll (versions ≤ 2.0) and the Ultra Crypto Component. The flaw allows remote attackers to write to arbitrary files by supplying a full pathname to the SaveToFile method, enabling overwriting of files on the aff...

CVE-2007-4902: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method...

CVE-2007-4903: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via 1 a long string in the first argument to the AcquireContext method or 2 an unspecified vector to the DeleteContext method...

Ultra Crypto Component (CryptoX.dll <= 2.0) SaveToFile() Inscure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"------------------------------------------------------------------------------------- bUltra Crypto Component CryptoX.dll = 2.0 "SaveToFile" Inscure Method/b...

ultra-acquire.txt

----------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url: http://www.ultrashareware.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your ow...

Ultra Crypto Component (CryptoX.dll <= 2.0) SaveToFile() Inscure Method

Exploit for unknown platform in category remote exploits ======================================================================= Ultra Crypto Component CryptoX.dll ------------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url:...

Ultra Crypto Component (CryptoX.dll <= 2.0) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================== Ultra Crypto Component CryptoX.dll ----------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url:...

Ultra Crypto Component - CryptoX.dll 2.0 SaveToFile() Insecure Method

Ultra Crypto Component - CryptoX.dll 2.0 SaveToFile Insecure Method ------------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url: http://www.ultrashareware.com/ author: shinnai mail: shinnaiatautisticidotorg site:...