Unfixed XSS vulnerability at 111.com

Security researcher St@rExT, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting 111.com, which at the time of submission ranked 386059 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2007. It is currently...

Unfixed XSS vulnerability at cvsweb.stop1984.com

Security researcher MaXWeL, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting cvsweb.stop1984.com, which at the time of submission ranked 753041 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2007. It is...

LeadTools JPEG 2000 - COM Object Remote Stack Overflow

2007/05/18 ----------------------------------------------------------------------------------------------- LeadTools JPEG 2000 COM Objejct LTJ2K14.ocx v. 14.5.0.35 Remote Stack-Based Buffer Overflow url: http://www.leadtools.com/ peice: eheheh, take a look at thier site : author: shinnai mail:...

Unfixed XSS vulnerability at www.arama10.com

Security researcher THE-SH0CK-B0Y, has submitted on 18/05/2007 a cross-site-scripting XSS vulnerability affecting www.arama10.com, which at the time of submission ranked 425757 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...

Unfixed XSS vulnerability at pirana0.com

Security researcher Hotpockets, has submitted on 17/05/2007 a cross-site-scripting XSS vulnerability affecting pirana0.com, which at the time of submission ranked 1320411 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/05/2007. It is current...

Unfixed XSS vulnerability at www.cubed3.com

Security researcher Sid, has submitted on 17/05/2007 a cross-site-scripting XSS vulnerability affecting www.cubed3.com, which at the time of submission ranked 45312 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/05/2007. It is currently...

Code injection

Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service device hang and read data from a COM or LPT device via a DOS device name with an arbitrary extension...

CVE-2007-2439

Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service device hang and read data from a COM or LPT device via a DOS device name with an arbitrary extension...

CVE-2007-2439

Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service device hang and read data from a COM or LPT device via a DOS device name with an arbitrary extension...

Windows Vista: Non-privileged code can redirect shortcuts to intercept privilege elevation requests

Tested on x86 and x64 editions of Windows Vista Ultimate, though this exploit should function correctly on all x86 and x64 editions of Windows Vista. This exploit requires an attack vector such as a Trojan horse. However, in light of the enormous success of such types of attacks in the past, and...

W1L3D4 Philboard 0.2 (W1L3D4_bolum.asp forumid) SQL Injection Vuln

No description provided by source. Discovered by: gsy & kerem125 Website: www.kerem125.com script download:http://www.aspindir.com/indir2.asp?id=4891&sIslem=%DDndir exploit:/W1L3D4bolum.asp?forumid=-99+union+all+select+0,1,2,3,4,5,6,7,8,9,password,username,12,13,14,15,16,17,18,19,20+from+users...

Unfixed XSS vulnerability at www.belgiantop50.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.belgiantop50.com, which at the time of submission ranked 319049 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is...

iDefense Security Advisory 05.08.07: McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability

McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND McAfee Security Center is a centralized configuration GUI utilized to control and monitor McAfee...

Unfixed XSS vulnerability at 45345.com-domainiac.com

Security researcher chiders, has submitted on 05/10/2007 a cross-site-scripting XSS vulnerability affecting 45345.com-domainiac.com, which at the time of submission ranked 153470 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is...

Microsoft Internet Explorer multiple security vulnerabilities

Multiple memory corruption on COM objects and HTML parsing, files rewrite...

Unfixed XSS vulnerability at www.cos109.com

Security researcher kusomiso.com, has submitted on 05/09/2007 a cross-site-scripting XSS vulnerability affecting www.cos109.com, which at the time of submission ranked 8952167 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...

Internet Explorer Multiple COM Objects Memory Corruption (MS07-027; CVE-2007-0942; CVE-2007-0944; CVE-2007-0945; CVE-2007-2221)

Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...

Code injection

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute...

Arbitrary file deletion

Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote attackers to...

CVE-2007-0942

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute...