Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Creative Software AutoUpdate Engine. When sending an overly long string to the cachefolder property of CTSUEng.ocx an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/creative/softwarecachefolder msf...

Creative Software AutoUpdate Engine ActiveX (CTSUEng.ocx) Unspecified Overflow

The remote host contains the Creative Software AutoUpdate Engine ActiveX control, which is used to automatically update Creative Labs software. The version of this control installed on the remote host reportedly contains an unspecified stack-based buffer overflow. If an attacker can trick a user ...

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

Creative Software AutoUpdate Engine - ActiveX Stack Overflow +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @...

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...

Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit ==================================================================...

Unfixed XSS vulnerability at www.creativelearningpress.com

Security researcher skathgh420, has submitted on 02/07/2008 a cross-site-scripting XSS vulnerability affecting www.creativelearningpress.com, which at the time of submission ranked 10704379 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Joomla! Component NeoReferences 1.3.1 - catid SQL Injection

Joomla! Component NeoReferences 1.3.1 - catid SQL Injection joomla SQL Injectioncomneoreferences AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comneoreferences" EXPLOIT :...

Joomla! Component NeoReferences 1.3.1 - 'catid' SQL Injection

joomla SQL Injectioncomneoreferences AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comneoreferences" EXPLOIT : index.php?option=comneoreferences&Itemid=27&catid=99887766//union//select//concatusername,0x3a,password//from//josusers/%20where%20userid=1=1/ S@BUN...

Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 - Local Privilege Escalation

Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 - Local Privilege Escalation source: https://www.securityfocus.com/bid/27179/info Creative Ensoniq PCI ES1371 WDM drivers are prone to a local privilege-escalation vulnerability. Successful exploits allow local users to execute arbitrary machine cod...

Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/27179/info Creative Ensoniq PCI ES1371 WDM drivers are prone to a local privilege-escalation vulnerability. Successful exploits allow local users to execute arbitrary machine code with kernel-level privileges, facilitating the complete compromise of...

CVE-2007-5649

Cross-site scripting XSS vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the lostid parameter...

CVE-2007-5649

Cross-site scripting XSS vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the lostid parameter...

Sql injection

SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2007-1556

SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2007-1556

SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2007-1556

CVE-2007-1556 describes an SQL injection in Creative Files 1.2, via kommentare.php the dlid parameter. The root cause is lack of input validation, allowing remote attackers to execute arbitrary SQL. Impact per records: partial confidentiality/integrity/availability with a CVSS v2 base score of 7....

CVE-2007-1556: Undefined Security Weakness

SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

Creative Files 1.2 (kommentare.php) Remote SQL Injection Vulnerability

No description provided by source. ======================X=O=R=O=N===================== + + Creative Files 1.2 kommentare.php Remote SQL Injection Vulnerabilities + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz +...

Creative Files 1.2 (kommentare.php) Remote SQL Injection Vulnerabilities

======================X=O=R=O=N===================== + + Creative Files 1.2 kommentare.php Remote SQL Injection Vulnerabilities + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz + ======================X=O=R=O=N===================== + + SQL INJ: + +...

Creative Guestbook 1.0 Multiple Remote Vulnerabilities

.-""""""""-. / Dj7xpl | | |, .-. .-. ,| | o/ o | |/ / | @ ^^ |IIIIII|/ @8@8|-IIIIII/-| / / @ +Iranian Are The Best In World+ Portal : Creative Guestbook 1.0 Download : http://www.thecreativeheads.de/CreativeFiles/downloads.php Author : Dj7xpl | Dj7xpl@yahoo...