5637 matches found
Microsoft Windows fails to disable autorun
None of documented methods to disable autorun does it completely. This way of distribution is actively used by malware. CERT advises to add next record into registry @ means default value for key. HKEYLOCALMACHINESOFTWAREMicrosoftWindows NTCurrentVersionIniFileMappingAutorun.inf...
Symantec AppStream ActiveX Unauthorized Access
SUMMARY Vulnerabilities were reported in an ActiveX control that Symantecs AppStream 5.2.x Client installs. Exploitation of this issue could possibly lead to unauthorized information disclosure, system information corruption or potentially allow arbitrary code execution in the context of the user...
Symantec AppStream LaunchObj ActiveX control vulnerable to arbitrary code download and execution
Overview The Symantec AppStream LaunchObj ActiveX control contains methods that can be used to download and execute arbitrary code. Description Symantec AppStream is an application deployment framework for Microsoft Windows. One of the components of the AppStream Windows Client is an ActiveX...
Internet Explorer XML data binding memory corruption
Added: 12/12/2008 CVE: CVE-2008-4844 BID: 32721 OSVDB: 50622 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A data binding error allows command execution when a user loads specially crafted XML code containing nested SPAN tags,...
Internet Explorer XML data binding memory corruption
Added: 12/12/2008 CVE: CVE-2008-4844 BID: 32721 OSVDB: 50622 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A data binding error allows command execution when a user loads specially crafted XML code containing nested SPAN tags,...
Immunity Canvas: MSSQL_REPLWRITETOVARBIN
Name| mssqlreplwritetovarbin ---|--- CVE| CVE-2008-5416 Exploit Pack| CANVAS Description| replwritetovarbin stored procedure overflow. Notes| CVE Name: CVE-2008-5416 VENDOR: Microsoft Notes: Exploit only works against non-DEP enabled targets. Repeatability: One-shot MSADV: MS09-004 References:...
US-CERT Technical Cyber Security Alert TA08-340A -- Sun Java Updates for Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-340A Sun Java Updates for Multiple Vulnerabilities Original release date: December 05, 2008 Last revised: -- Source: US-CERT Systems Affected Sun Java Runtime Environment versions JDK and...
SysV /bin/login buffer overflow (telnet)
The remote /bin/login seems to crash when it receives too many environment variables. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
overflow.cgi detection
/cgi-bin/.cobalt/overflow/overflow.cgi was detected. Some versions of this CGI allow remote users to execute arbitrary commands with the privileges of the web server. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
MS08-067: Microsoft Windows Server Service Crafted RPC Request Handling Unspecified Remote Code Execution (958644) (ECLIPSEDWING)
The remote Windows host is affected by a remote code execution vulnerability in the 'Server' service due to improper handling of RPC requests. An unauthenticated, remote attacker can exploit this, via a specially crafted RPC request, to execute arbitrary code with 'System' privileges. ECLIPSEDWIN...
CVE-2008-4583
Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...
Husdawg, LLC. System Requirements Lab ActiveX Unsafe Method
This module allows attackers to execute code via an unsafe method in Husdawg, LLC. System Requirements Lab ActiveX Control sysreqlab2.dll 2.30.0.0 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...
iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in LPViewer ActiveX control LPControll.dll 3.2.0.2. When sending an overly long string to the URL property an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...
SoftArtisans XFile FileManager ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in SoftArtisans XFile FileManager ActiveX control SAFmgPwd.dll 2.0.5.3. When sending an overly long string to the GetDriveName method an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...
XSS in pagetree plugin
The pagetree plugin is vulnerable for XSS injecting the code in the treeId field. Example below:...
XSS in pagetree plugin
The pagetree plugin is vulnerable for XSS injecting the code in the treeId field. Example below:...
XSS in RSS feed creation
URL http://localhost:8080/dashboard/doconfigurerssfeed.action The RSS feed creation process is vulnerable to XSS attacks. It is possible to inject javascript code into the page by changing the types field to: types="alertdocument.cookie complete example from the testenvironment:...
XSS in RSS feed creation
URL http://localhost:8080/dashboard/doconfigurerssfeed.action The RSS feed creation process is vulnerable to XSS attacks. It is possible to inject javascript code into the page by changing the types field to: types="alertdocument.cookie complete example from the testenvironment:...
XSS in bookmarks plugin
The bookmarking code under the url http://localhost:8080/plugins/socialbookmarking/updatebookmark.action is vulnerable to XSS attacks using the spaceKey parameter: submitting the following code will execute javascript: spaceKey=%22%3E%3Cscript%3Ealertdocument.cookie%3C/script%3E%22%3E IMPORTANT:...
XSS in bookmarks plugin
The bookmarking code under the url http://localhost:8080/plugins/socialbookmarking/updatebookmark.action is vulnerable to XSS attacks using the spaceKey parameter: submitting the following code will execute javascript: spaceKey=%22%3E%3Cscript%3Ealertdocument.cookie%3C/script%3E%22%3E IMPORTANT:...