Fixed XSS vulnerability at www.bill88.com

Security researcher SCRiPToRiuM, has submitted on 16/02/2007 a cross-site-scripting XSS vulnerability affecting www.bill88.com, which at the time of submission ranked 3202227 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2007. It is...

Internet Explorer IMJPCKSI COM对象实例化内存破坏漏洞（MS07-016）

Internet Explorer是微软发表的非常流行的WEB浏览器。 Internet Explorer使用某些Imjpcksid.dll的COM对象作为ActiveX控件。攻击者可能通过构建特制网页来利用此漏洞，如果用户查看了该网页，则可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4...

Unfixed XSS vulnerability at www.spor3.com

Security researcher Hacxer, has submitted on 14/02/2007 a cross-site-scripting XSS vulnerability affecting www.spor3.com, which at the time of submission ranked 20689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/02/2007. It is currently...

Microsoft Internet Explorer multiple security vulnerabilities

Memory corruptions on COM objects instantiation and FTP server response parsing can be used for hidden malware installation...

Internet Explorer COM Object Instantiation Memory Corruption (MS07-016; CVE-2007-0219; CVE-2007-4697)

Component Object Models COM Objects are used to enable data exchange between processes and the creation of dynamic object in different programming languages.Microsoft Internet Explorer is prone to multiple remote code execution vulnerabilities. The vulnerabilities are due to a memory corruption...

Microsoft Internet Explorer vulnerable to remote code execution

Overview A vulnerability in the way Microsoft Internet Explorer instantiates COM objects may lead to execution of arbitrary code. Description Component Object Model, or COM objects, are used to enable interprocess communication and dynamic object creation within Microsoft Windows. Microsoft...

Code injection

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...

Microsoft Internet Explorer IMJPCKSI COM Object Instantiation Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability when instantiating certain COM objects. Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the affected application. This facilitates the remote...

Microsoft Internet Explorer COM Object Instantiation Variant Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability when instantiating certain COM objects. Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the affected application. This facilitates the remote...

Microsoft Internet Explorer fails to properly instantiate COM objects

Overview A vulnerability in the way Microsoft Internet Explorer instantiates COM objects may lead to execution of arbitrary code. Description Component Object Model, or COM objects are used to enable interprocess communication and dynamic object creation within Microsoft Windows. Microsoft Intern...

Tagit! Tagit2b 2.1.B Build 2 - CONFIGerrmsg.inc.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - CONFIGerrmsg.inc.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

Unfixed XSS vulnerability at www.finalsolution88.com

Security researcher kaksii, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.finalsolution88.com, which at the time of submission ranked 660004 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at 44346.com-domainiac.com

Security researcher fox91, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting 44346.com-domainiac.com, which at the time of submission ranked 185660 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.tavla06.com

Security researcher St@rExT, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.tavla06.com, which at the time of submission ranked 3069547 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is...

Authentication flaw

T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value...

CVE-2007-0435

T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value...

CVE-2007-0435

The CVE-2007-0435 entry concerns T-Com Speedport 500V routers with firmware 1.31, where remote authentication can be bypassed via a LOGINKEY=TECOM cookie, allowing an attacker to reconfigure the device. The root cause is a cookie-based authentication bypass that permits unauthorized access to dev...

CVE-2007-0435

T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value...

How To Find QQ's Bugs-bug warning-the black bar safety net

How To Find QQ' Bugs. For the QQ installation file scan to the next, almost no encryption program file, but the specific analysis is more wordy. But I think so much of a mess of things in a large heap, bufferflow is certainly might exist. But lazy of going to get. In the QQ directory below have a...

CVE-2007-0435: Improper Authentication

T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value...