Joomla! Component yt_color YOOOtheme - Cross-Site Scripting Cookie Stealing

Joomla! Component ytcolor YOOOtheme - Cross-Site Scripting Cookie Stealing andresg888 Exploit Title : Joomla ytcolor YOOOtheme xss, cookie stealing Date : 2009-12-04 Author : andresg888 Software Link : http://www.yootheme.com/ Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.net &...

2009 You! Hostit! XSS

No description provided by source. andresg888 Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.nethttp://www.ilegalintrusion.net & www.bl4ck-p0rtal.orghttp://www.bl4ck-p0rtal.org Dork : No DoRk f0R ScRipT KiDDieS Example:...

MS Internet Explorer 'Style' Object Remote Code Execution Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS09-072. OpenVAS Vulnerability Test $Id: gbmsiestyleobjectremotecodeexecvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Description: MS Internet Explorer 'Style' Object Remote Code Execution Vulnerability Authors: Suj...

Joomla yt_color YOOOtheme XSS and Cookie Stealing

No description provided by source. andresg888 Exploit Title : Joomla ytcolor YOOOtheme xss, cookie stealing Date : 2009-12-04 Author : andresg888 Software Link : http://www.yootheme.com/ Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.net & www.bl4ck-p0rtal.org Dork : No DoRk f0R...

Joomla! Component yt_color YOOOtheme - Cross-Site Scripting / Cookie Stealing

andresg888 Exploit Title : Joomla ytcolor YOOOtheme xss, cookie stealing Date : 2009-12-04 Author : andresg888 Software Link : http://www.yootheme.com/ Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.net & www.bl4ck-p0rtal.org Dork : No DoRk f0R ScRipT KiDDieS The GET variable ytcolo...

Microsoft Internet Explorer 'Style' Object RCE Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS09-072. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-1567

Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the 1 LogURL, 2 ConnectURL, 3 SkinURL, 4 AlbumCreateURL, 5 ErrorURL, or 6 httpsinglehost property val...

CVE-2009-1567

The CVE-2009-1567 issue affects Lateral Arts Photobox Uploader ActiveX Control (2.x and 1.x up to 1.3). It is a stack-based buffer overflow triggered by overly long values assigned to URL-related properties (LogURL, ConnectURL, SkinURL, AlbumCreateURL, ErrorURL, httpsinglehost), allowing remote c...

CVE-2009-1567

Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the 1 LogURL, 2 ConnectURL, 3 SkinURL, 4 AlbumCreateURL, 5 ErrorURL, or 6 httpsinglehost property val...

Joomla Component TP Whois <= 1.5.x XSS

Exploit for unknown platform in category web applications ====================================== Joomla Component TP Whois Example3: Example4: Example4: Example5: Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable application to fool a user in order to gathe...

Huawei MT882 Modem/Router - Multiple Vulnerabilities

Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Greets to my bests friends: DeepLook, R00T, systemfailure, Ciber34, ANDSQLiTor, LaPeke Greets to friend: Scuarplex, Crl, KiKoArg, ZeRO, DNSX, PunkiD DecodeX01atgmaildotcom Target device ip 10.0.0.2:80 default ip:port Server information...

Null pointer dereference

An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service NULL pointer dereference and application crash by calling the RegisterMe method with a long argument...

CVE-2009-4171

Vulnerability: Yahoo! Messenger’s YahooBridgeLib.dll ActiveX control (9.0.x) is affected by a denial-of-service via a NULL pointer dereference when the RegisterMe method is called with a long argument. Root cause: improper handling in the ActiveX method leading to crash (partial availability impa...

CVE-2009-4171

An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service NULL pointer dereference and application crash by calling the RegisterMe method with a long argument...

Secunia Research: Lateral Arts Photobox uploader ActiveX Control Buffer Overflow

====================================================================== Secunia Research 02/12/2009 - Lateral Arts uploader ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

Lateral Arts Photobox ActiveX buffer overflows

Buffer overflows in different object's properties...

Altiris ConsoleUtilities ActiveX RunCmd Method Overflow

A vulnerable version of the Altiris ConsoleUtilities ActiveX control is installed on the remote host. This control comes with Altiris Deployment Solution, Altiris Notification Server, and Symantec Management Platform. There is a stack-based buffer overflow in the 'RunCmd' function. A remote...

HaiHaiSoft Universal Player Buffer Overflow

Haihaisoft Universal Player is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to execute arbitrary code in the context of the application using the ActiveX...

海海软件全能播放器MyActiveX.ocx ActiveX控件栈溢出漏洞

BUGTRAQ ID: 37151 海海软件全能播放器是一款支持多种媒体格式的万能播放器。 海海软件全能播放器所安装的MyActiveX.ocx ActiveX控件没有正确地验证用户传送给URL属性的参数字符串，用户受骗访问了恶意网页并向该属性传送了超长参数就可以触发栈溢出，导致执行任意代码。 Haihaisoft Universal Player 1.4.8.0 临时解决方法： 为clsid 1A01FF01-EA62-4702-B837-1E07158145FA设置kill-bit。 厂商补丁： Haihaisoft ----------...

Symantec Norton AntiVirus 2004 ActiveX Denial of Service (CVE-2004-0487)

Symantec Norton Anti-Virus 2004 is an anti-virus solution for both the Enterprise and the Desktop. There exists a vulnerability within Symantec Norton Anti-virus 2004 that allows a remote attacker to cause a denial of service condition on a target system through a malicious call to a certain meth...