Unfixed XSS vulnerability at www.comparestoreprices.co.uk

Security researcher MaXWeL, has submitted on 22/04/2007 a cross-site-scripting XSS vulnerability affecting www.comparestoreprices.co.uk, which at the time of submission ranked 13457 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2007. It...

paypalXSScorry.txt

-=--------------------ADVISORY-------------------=- PayPal.com Author:CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: PayPal.com -=+ Version: -=+ Vendor's URL: www.paypal.com -=+ Platform: Linux\Unix -=+ Bug type: XSS -=+ Exploitation: Remote/Local -...

CVE-2006-5084

Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5..79 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference...

CVE-2006-5084

The connected CERT/NVD entries confirm a format-string vulnerability in Skype for Mac’s NSRunAlertPanel when handling Skype URIs (e.g., skype://) in versions up to 1.5..79, enabling remote attackers to cause crash and potentially execute arbitrary code. Impact is user-level via a crafted URI; no ...

CVE-2006-5084

Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5..79 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference...

CVE-2006-5084: Improper Input Validation

Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5..79 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference...

eBay Enhanced Picture Services buffer overflow

No description provided...

[SA20969] eBay Enhanced Picture Services ActiveX Control Buffer Overflow

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

Buffer overflow

Buffer overflow in eBay Enhanced Picture Services aka EPUImageControl Class in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item SYI, Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary...

CVE-2006-1176

Buffer overflow in eBay Enhanced Picture Services aka EPUImageControl Class in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item SYI, Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary...

CVE-2006-1176

The CVE-2006-1176 issue is a buffer overflow in the eBay Enhanced Picture Services ActiveX control (EPUImageControl Class) shipped by EUPWALcontrol.dll. Vulnerable when the ActiveX control is version 1.0.3.36 and earlier, used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, ...

CVE-2006-1176

Buffer overflow in eBay Enhanced Picture Services aka EPUImageControl Class in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item SYI, Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary...

CVE-2006-1176: Undefined Security Weakness

Buffer overflow in eBay Enhanced Picture Services aka EPUImageControl Class in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item SYI, Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary...

KLA10416 ACE vulnerability in eBay Enhanced Picture Services

A buffer overflow was found in eBay Enhanced Picture Services. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed HTML Original advisories - Exploitation Related products...

eBay Enhanced Picture Services ActiveX control buffer overflow

Overview The eBay Enhanced Picture Services EPUImageControl Class ActiveX control contains a buffer overflow vulnerability. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description ActiveXActiveX is a technology that allows programmers to...

eBay contains a cross-site scripting vulnerability

Overview The eBay web site contains a cross-site scripting vulnerability. Description eBay is a popular auction web site. When an eBay user posts an auction, eBay allows SCRIPT tags to be included in the auction description. This creates a cross-site scripting vulnerability in the eBay website...

Microsoft Excel 95972000200220032004 - Malformed Range Memory Corruption

Microsoft Excel 95972000200220032004 - Malformed Range Memory Corruption source: https://www.securityfocus.com/bid/15780/info Microsoft Excel is susceptible to a remote code-execution vulnerability. This issue was originally disclosed through an eBay auction that has since been terminated. This...

Microsoft Excel 95/97/2000/2002/2003/2004 - Malformed Range Memory Corruption

source: https://www.securityfocus.com/bid/15780/info Microsoft Excel is susceptible to a remote code-execution vulnerability. This issue was originally disclosed through an eBay auction that has since been terminated. This issue is due to the application's failure to properly bounds-check...

CVE-2005-0158

Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses...

CVE-2005-0158

Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses...