7006 matches found
[Full-disclosure] ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability
ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-041.html November 14, 2006 -- CVE ID: CVE-2006-4687 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 -- TippingPointTM IPS Customer...
ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-040.html November 14, 2006 -- CVE ID: CVE-2006-5198 -- Affected Vendor: WinZip -- Affected Products: WinZip 10.0 pre build 7245 -- TippingPointTM IPS Customer...
[Full-disclosure] ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability
ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-037.html November 6, 2006 -- CVE ID: CVE-2006-5650 -- Affected Vendor: America Online -- Affected Products: America Online ICQ 5.1 -- TippingPointTM IPS Customer...
ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability
ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-036.html October 31, 2006 -- CVE ID: CVE-2006-5478 -- Affected Vendor: Novell -- Affected Products: Netmail 3.5.2 Novell eDirectory 8.8.1 -- TippingPointTM IPS Customer...
Easy File Sharing Web Server 4 Remote Information Stealer Exploit
No description provided by source. / =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the...
ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability
ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-035.html October 26, 2006 -- CVE ID: CVE-2006-5478 -- Affected Vendor: Novell -- Affected Products: Novell eDirectory 8.8.1 -- TippingPointTM IPS Customer...
RevilloC MailServer 1.x (RCPT TO) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================================== RevilloC MailServer 1.x RCPT TO Remote Denial of Service Exploit ================================================================== /...
QK SMTP远程栈溢出漏洞
QK SMTP Server是一款SMTP（简单邮件传输协议）服务器软件。 QK SMTP Server在处理用户命令参数时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 QK SMTP Server在处理传送给“RCPT TO:”命令的参数时存在栈溢出漏洞，远程攻击者可以通过向服务器发送超长参数导致执行任意指令。 QKSoft QK SMTP 3.1.0 Beta QKSoft QK SMTP 3.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.qksoft.com/ /...
OpenBSD 2.6 / 2.7ftpd Remote Exploit
No description provided by source. / h0h0h0 0-day k0d3z Exploit by Scrippie, help by dvorak and jimjones greets to sk8 Not fully developt exploit but it works most of the time ; Things to add: - automatic writeable directory finding - syn-scan option to do mass-scanning - worm capabilities? shoul...
ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability
ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-033.html October 10, 2006 -- CVE ID: CVE-2006-2387 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsof...
Microsoft PowerPoinr memory corruption
0-day vulberability in SlideShowWindows.View.GotoNamedShow function is used for malware installation...
ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability
ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-032.html October 10, 2006 -- CVE ID: CVE-2006-3435 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3...
ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability
ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-034.html October 10, 2006 -- CVE ID: CVE-2006-3650 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsoft Offi...
TorrentFlux User-Agent XSS Vulnerability
http://www.stevenroddis.com.au/2006/10/06/torrentflux-user-agent-xss-vulnerability/ Name: TorrentFlux User-Agent XSS Vulnerability Published: 2006-10-06 Critical Level: Moderate Type: Cross-Site Scripting Where: Remote Status: 0-Day Software: Torrentflux 2.1 Discoverer: Steven Roddis...
[Full-disclosure] ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability
ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-031.html October 5, 2006 -- CVE ID: CVE-2006-5143 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup R11.5 Server...
Microsoft Security Advisory (925984) Vulnerability in PowerPoint Could Allow Remote Code Execution
Microsoft Security Advisory 925984 Vulnerability in PowerPoint Could Allow Remote Code Execution Published: September 27, 2006 Microsoft is investigating new public reports of limited “zero-day” attacks using a vulnerability in Microsoft PowerPoint 2000, Microsoft PowerPoint 2002, Microsoft Offic...
Microsoft Windows / Internet Explorer 0-day vulnerability
Microsoft Vector Graphics Rendering Library vulnerability is used for hidden malware installation...
ZDI-06-029: Ipswitch WS_FTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities
ZDI-06-029: Ipswitch WSFTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-06-029.html September 26, 2006 -- CVE ID: CVE-2006-5000 -- Affected Vendor: Ipswitch -- Affected Products: Ipswitch WSFTP Server v5.04, v5.05 -- TippingPointT...
New PowerPoint 0-day Trojan in the wild
New zero-day vulnerability in Microsoft PowerPoint has been disclosed. This vulnerability is being exploited by Trojan horse Trojan.PPDropper.E. This dropper type file reportedly works in all Windows systems, but the vulnerability itself has been confirmed in PowerPoint 2000 Chinese version...