7008 matches found
迅雷5 pplayer.dll 组件漏洞
出现严重0-Day漏洞，病毒作者可利用该漏洞编写恶意网页，当用于浏览这些网页的时候，就会感染病毒，进而该病毒可以盗窃用户的帐号和密码，从而使用户遭受到损失。 与上次的不同，这次有漏洞的程序出现在迅雷看看（Thunder KanKan）上，pplayer.dll 组件版本号：1.2.3.49，CLSID:F3E70CEA-956E-49CC-B444-73AFE593AD7F. 该组件内的一个函数FlvPlayerUrl上，存在边界检查不严格的问题，当向其传递过长参数时，会导致程序溢出。病毒作者可以利用这个缺陷，精心编写Shellcode，溢出，然后可以下载任意恶意病毒文件。 迅雷5...
Oracle 0-day to get SYSDBA access
Tanel Poder has found a way to get SYSDBA access to the Oracle database by utilising a user who has the BECOME USER system privilege, execute privileges on KUPP$PROC.CHANGEUSER and CREATE SESSION. he shows how a user with these privileges can become SYS but not SYSDBA and then use an immediate...
foxnews-xss.txt
Foxnews 0day XSS Shock Attack Demo link to send to a fish: http://www.foxnews.com/video2/launchPage.html?http://localhost/ With netcat listen on localhost : listening on any 80 ... connect to localhost 127.0.0.1 from localhost 127.0.0.1 1964 GET...
ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability
ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-061.html October 25, 2007 -- CVE ID: CVE-2007-2263 -- Affected Vendor: RealNetworks -- Affected Products: RealNetworks RealPlayer version 10.5 -- TippingPointT...
ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities
ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-07-059.html October 23, 2007 -- CVE ID: -- Affected Vendor: Verity -- Affected Products: KeyView SDK -- Vulnerability Details: Several vulnerabilities exist in the popular...
IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit
Exploit for unknown platform in category remote exploits ============================================================== IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit ============================================================== !/usr/bin/python IBM Tivoli Storage Manager Express...
Tivoli Storage Manager CAD Host header buffer overflow
Added: 10/26/2007 CVE: CVE-2007-4880 BID: 25743 OSVDB: 38161 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. It runs a Client Acceptor Daemon CAD on port 1581/TCP. Problem A buffer overflow vulnerability in Tivoli Storage...
litespeed-disclose.txt
| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos. Product: LiteSpeed/Discovered in ==3.2.3...
LiteSpeed Web Server <= 3.2.3 Remote Source Code Disclosure Vuln
Exploit for multiple platform in category remote exploits ================================================================ LiteSpeed Web Server = 3.2.3 Remote Source Code Disclosure Vuln ================================================================ | | |--.-----.| .-----.'...
ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability
ZDI-07-057: Firebird processpacket Remote Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-057.html October 10, 2007 -- CVE ID: CVE-2007-4992 -- Affected Vendor: Firebird -- Affected Products: Firebird SQL 2.0.2 -- TippingPointTM IPS Customer Protection: TippingPoin...
ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability
ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-055.html October 10, 2007 -- CVE ID: CVE-2007-2228 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 SP4 Windows XP SP2 Windows 2003 SP1 Windows...
DSquare Exploit Pack: D2SEC_XITAMI
Name| d2secxitami ---|--- CVE| CVE-2007-5067 Exploit Pack| D2ExploitPack Description| 0 Day Xitami Web Server 2.5c2 Stack Overflow Notes|...
ZDI-07-052: Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability
ZDI-07-052: Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-052.html September 12, 2007 -- CVE ID: CVE-2007-3999 -- Affected Vendor: MIT -- Affected Products: MIT Kerberos krb5-1.6.2 -- TippingPointTM IPS...
ZDI-07-050: Trend Micro ServerProtect RPCFN_SetComputerName() Stack Overflow Vulnerability
ZDI-07-050: Trend Micro ServerProtect RPCFNSetComputerName Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-050.html September 7, 2007 -- CVE ID: CVE-2007-4218 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer...
ZDI-07-051: Trend Micro ServerProtect TMregChange() Stack Overflow Vulnerability
ZDI-07-051: Trend Micro ServerProtect TMregChange Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-051.html September 7, 2007 -- CVE ID: CVE-2007-4731 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection...
Microsoft Visual FoxPro 6.0 (FPOLE.OCX v. 6.0.8450.0) Remote PoC
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-----------------------------------------------------------------------------------------------------------...
Microsoft Visual FoxPro 6.0 - FPOLE.OCX 6.0.8450.0 Remote (PoC)
Microsoft Visual FoxPro 6.0 - FPOLE.OCX 6.0.8450.0 Remote PoC ----------------------------------------------------------------------------------------------------------- 0-day: Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library FPOLE.OCX v. 6.0.8450.0 Remote Stack Overflow url:...
Microsoft Visual FoxPro 6.0 - FPOLE.OCX 6.0.8450.0 Remote (PoC)
----------------------------------------------------------------------------------------------------------- 0-day: Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library FPOLE.OCX v. 6.0.8450.0 Remote Stack Overflow url: http://www.microsoft.com author: shinnai mail: shinnaiatautisticidotorg site:...
Microsoft Visual Basic 6.0 VBP_Open OLE Local CodeExec Exploit
Exploit for unknown platform in category local exploits ============================================================== Microsoft Visual Basic 6.0 VBPOpen OLE Local CodeExec Exploit ============================================================== !/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code...
Immunity Canvas: NWSPOOL_B
Name| nwspoolb ---|--- CVE| CVE-2007-2954 Exploit Pack| CANVAS Description| Novell Netware Client for Windows Notes| CVE Name: CVE-2007-2954 VENDOR: Novell Notes: Platforms Tested: References: http://www.zerodayinitiative.com/advisories/ZDI-07-045.html CVE Url:...