CVE-2012-4880

CVE-2012-4880 affects DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156, due to multiple untrusted search path vulnerabilities. An attacker-local privilege escalation is possible when a malicious enc_mp2v.200 or CFHDDecoder.dll is placed in the current working directory, as d...

CVE-2012-4880

Multiple untrusted search path vulnerabilities in DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156 allow local users to gain privileges via a Trojan horse 1 encmp2v.200 or 2 CFHDDecoder.dll file in the current working directory, as demonstrated by a directory that contains a...

MIT Students Use LED Lights, Hack Building to Play Tetris

Students at MIT took to the university’s Cecil and Ida Green Building over the weekend to transform the 21-story research building into an oversized, playable game of Tetris. Emulating the classic ’80s video game with the help of a console and 153 color-changing LED lights, students were able to...

Data Dynamics ActiveBar ActiveX Controls Code Execution

One or more of the Data Dynamics ActiveBar ActiveX controls installed on the remote Windows host is affected by a code execution vulnerability due to unspecified issues in the 'Save', 'SaveLayoutChanges', 'SaveMenuUsageData', and 'SetLayoutData' methods. Note that Data Dynamics ActiveBar is bundl...

CVE-2011-1207

The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a...

Information disclosure

The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a...

CVE-2011-1207

The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a...

CVE-2011-1207

The CVE-2011-1207 issue affects the Data Dynamics ActiveBar ActiveX control (ActBar.ocx 1.0.6.5) bundled with IBM Rational System Architect 11.4.0.2/11.4.0.1 and earlier. The SetLayoutData method is not properly restricted, enabling arbitrary code execution via a crafted Data argument. Affected p...

PT-2011-2949 · Data Dynamics +1 · Data Dynamics Activebar +1

Name of the Vulnerable Software and Affected Versions: Data Dynamics ActiveBar ActiveX controls version 1.0.6.5 IBM Rational System Architect versions 11.4.0.2, 11.4.0.1, and earlier Description: The issue is related to the ActiveBar1 ActiveX control, which does not properly restrict the...

Sybase Advantage Data Architect Heap Overflow

Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap Oveflow RCE Date: 2010-10-16 Author: d0lc3 @rmallof - http://elotrolad0.blogspot.com/ Software Link: http://www.sybase.com/products/databasemanagement/advantagedatabaseserver/data-architect-utility Version: 10.0 Tested on: Windows ...

Sybase Advantage Data Architect "*.SQL" Format Heap Oveflow

Exploit for windows platform in category dos / poc =========================================================== Sybase Advantage Data Architect ".SQL" Format Heap Oveflow =========================================================== Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap...

Sybase Advantage Data Architect - '.SQL' Format Heap Overflow

Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap Oveflow RCE Date: 2010-10-16 Author: d0lc3 @rmallof - http://elotrolad0.blogspot.com/ Software Link: http://www.sybase.com/products/databasemanagement/advantagedatabaseserver/data-architect-utility Version: 10.0 Tested on: Windows ...

Sybase Advantage Data Architect - .SQL Format Heap Overflow

Sybase Advantage Data Architect - .SQL Format Heap Overflow Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap Oveflow RCE Date: 2010-10-16 Author: d0lc3 @rmallof - http://elotrolad0.blogspot.com/ Software Link:...

windows Mobile 6.5 TR Phone Call Shellcode

Exploit for win32 platform in category shellcode ========================================== windows Mobile 6.5 TR Phone Call Shellcode ========================================== / Device: HTC Touch2 System: Windows Mobile 6.5 TR WinCE 5.0.2 Coded by Celil ‹n¸ver from SecurityArchitect Contact:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 th...

CVE-2009-4052

Multiple cross-site scripting XSS vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 th...

CVE-2009-4052

Multiple cross-site scripting XSS vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 th...

CVE-2009-4052

IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 contain multiple XSS vulnerabilities in the JSF Widget Library Runtime. The issues allow remote attackers to inject arbitrary web script or HTML via vectors involving the JSF ...

CVE-2007-6187

Multiple directory traversal vulnerabilities in PHP Content Architect aka NoAh 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the filepath parameter to 1 cssfile.php, 2 jsfile.php, or 3 xmlfile.php in noah/modules/nosystem/templates/...

Directory traversal

Multiple directory traversal vulnerabilities in PHP Content Architect aka NoAh 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the filepath parameter to 1 cssfile.php, 2 jsfile.php, or 3 xmlfile.php in noah/modules/nosystem/templates/...