9547 matches found
SA-2008-004 - Fileshare - Arbitrary code execution
The fileshare module is used to create nodes that allow browsing, uploading, downloading and deleting of files from a fileshare directory that is created by Drupal and linked to the node. Users who are able to create fileshare nodes are able to execute arbitrary code on the server. Versions...
Evilsentinel <= 1.0.9 (multiple vulnerabilities) Disable Exploit
Exploit for unknown platform in category web applications ================================================================ Evilsentinel = 1.0.9 multiple vulnerabilities Disable Exploit ================================================================ !/usr/bin/php -q -d shortopentag=on ? echo '...
Gateway CWebLaunchCtl ActiveX control buffer overflow
Overview The Gateway CWebLaunchCtl ActiveX control contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable sytem. Description The Gateway Computers CWebLaunchCtlActiveX control, which is provided by weblaunch.ocx and weblaunch2.ocx,...
CVE-2007-6501
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...
Cross site request forgery (csrf)
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...
CVE-2007-6501
The CVE affects Hosting Controller 6.1 Hotfix 3.3 and earlier. It describes an unspecified vulnerability that allows remote authenticated users to enable or disable the "pay type" via a request to adminsettings/choosetranstype.asp. The connected documents provide this basic impact but do not spec...
nokia-dos.txt
Nokia N95 cellphone remote DoS using the SIP Stack Severity: High Denial of Service Hardware: Nokia N95 Firmware: Tested version: Nokia RM-159 V 12.0.013 Notification: Vulnerability found: 11 September 2007 Contact Nokia Support: 12 September 2007 / None reply Contact Nokia Security Support: 19...
PT-2007-7113 · Realnetworks · Realplayer
Name of the Vulnerable Software and Affected Versions: RealPlayer version 11 Description: The issue allows remote attackers to cause a denial of service, resulting in a browser crash, by providing a certain argument to the GetSourceTransport method in the RealAudioObjects.RealAudio ActiveX contro...
Invensys Wonderware InTouch creates insecure NetDDE share
Overview Invensys Wonderware InTouch 8.0 creates a NetDDE share that could allow an attacker to run arbitrary programs. Description Invensys Wonderware InTouch HMI Software is used in Supervisory Control And Data Acquisition SCADA systems.Dynamic Data Exchange DDE was designed to allow Microsoft...
Apple QuickTime for Java may allow Java applets to gain elevated privileges
Overview Apple QuickTime for Java contains a vulnerability that may allow a malicious Java applet to gain elevated privileges. Description Apple QuickTime is a media player that includes a browser plugin. QuickTime for Java provides APIs which allow Java developers to include multimedia in Java...
SonicWall NetExtender NELaunchCtrl ActiveX control stack buffer overflow
Overview The SonicWall NetExtender NELaunchCtrl ActiveX control contains a stack buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SonicWall NetExtender is an SSL VPN client that is implemented by using an ActiveX...
US-CERT Technical Cyber Security Alert TA07-297A -- RealNetworks RealPlayer ActiveX Playlist Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-297A RealNetworks RealPlayer ActiveX Playlist Buffer Overflow Original release date: October 24, 2007 Last revised: -- Source: US-CERT Systems Affected Windows systems with RealPlayer 11...
CVE-2007-5653
The Component Object Model COM functions in PHP 5.x on Windows do not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control...
PHP 5.x COM - Safe Mode Disable Functions Bypass
PHP 5.x COM - Safe Mode Disable Functions Bypass sounds good //The windows version of PHP has built in support for this extension. You do not need to //load any additional extension in order to use these functions. //You are responsible for installing support for the various COM objects that you...
Mozilla products vulnerable to memory corruption in the JavaScript engine
Overview A number of vulnerabilities in the Mozilla JavaScript engine may allow the execution of arbitrary code or denial of service. Description The Mozilla JavaScript engine contains several vulnerabilities that may result in memory corruption. The impact of this memory corruption in specific...
GLSA-200710-16 : X.Org X server: Composite local privilege escalation
The remote host is affected by the vulnerability described in GLSA-200710-16 X.Org X server: Composite local privilege escalation Aaron Plattner discovered a buffer overflow in the compNewPixmap function when copying data from a large pixel depth pixmap into a smaller pixel depth pixmap. Impact :...
php524ioncube-bypass.txt
ionCube output:"; echo $MyBootioncube; ?...
PHP 5.2.4 ionCube extension safe_mode / disable_functions Bypass
No description provided by source. ?php //PHP5.2.4ionCubeextensionsafemodeanddisablefunctionsprotectionsbypass //author:shinnai //mail:shinnaiatautisticidotorg //site:http://shinnai.altervista.org //TestedonxpProsp2fullpatched,workedbothfromthecliandonapache //Technicaldetails: //ionCubeversion:6...
