CVE-2011-4786

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787...

CVE-2011-4787

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786...

HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Unfixed XSS vulnerability at www.easy-song-writing.com

Security researcher Digital Kryptonite, has submitted on 31/12/2011 a cross-site-scripting XSS vulnerability affecting www.easy-song-writing.com, which at the time of submission ranked 1736139 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Linux x86 cdda2cdr local disk exploit

No description provided by source. cat /tmp/cdda2x.c EOF / Linux x86 cdda2cdr local disk exploit gcc -o inj3ct0r inj3ct0r.c inj3ct0r offset bufsiz / include stdlib.h include stdio.h char exec= / Generic Linux x86 running our /tmp program /...

w3af v.1.1 - Web Application Attack and Audit Framework Released

w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...

Easy Hosting control panel to manage authentication bypass the defect and repair-vulnerability warning-the black bar safety net

Title: Easy Hosting Control Panel Admin Auth Bypass Author: Jasman www.2cto.com Download address: https://launchpad.net/ehcp & amp; http://www.ehcp.net Affected version: 0.29.10 - 0.29.13 Test platform: Ubuntu, Debian Overview Easy Hosting Control Panel designed for hosting of multiple domains on...

Easy Hosting Control Panel FTP Account Security Bypass Vulnerability

Easy Hosting Control Panel is prone to a security-bypass vulnerability. Attackers could exploit the issue to add arbitrary FTP accounts to the affected application. Easy Hosting Control Panel versions 0.29.10 up to and including 0.29.13 are vulnerable. OpenVAS Vulnerability Test $Id:...

[SECURITY] Fedora 16 Update: kolourpaint-4.7.1-1.fc16

An easy-to-use paint program...

CVE-2010-4844

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

Sql injection

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

CVE-2010-4844

CVE-2010-4844 describes an SQL injection vulnerability in content.php of MH Products Easy Online Shop, exploitable via the kat parameter to execute arbitrary SQL commands. The provided documents do not specify affected versions, root cause details beyond the injection flaw, or any remediation ste...

CVE-2010-4844

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

HP Easy Printer Care Software HPTicketMgr.dll Directory Traversal (CVE-2011-2404)

A code execution vulnerability has been reported in HP Easy Printer Care Software. The vulnerability is due to insufficient input validation by an ActiveX control within the affected product. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious link...

CVE-2011-3774

php Easy Survey Package phpESP 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/landing.php and certain other files...

CVE-2011-3774

The CVE-2011-3774 entry affects php Easy Survey Package (phpESP) 2.1.1. The vulnerability is a remote information disclosure where a direct request to certain .php files (e.g., public/landing.php and similar) causes an error message that reveals the installation path. This detail is present in NV...

WordPress WP Easy Stats Plugin 1.8 - Remote File Inclusion

WP Easy Stats plugin is prone to remote file include vulnerability. It allows an attacker to include a remote file and get access to the server. Solution Upgrade the plugin...

Easy Audio Editor Local SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python print"" print" Exploit Title: Easy Audio Editor Local SEH Exploit " print" Author: Angel Injection " print" Tested On: Windows xp sp3 " print" Usage: Import File, Select It, " print"" windows/exec - 303 bytes CMD=calc.ex...

HP Easy Printer Care Software HPTicketMgr.dll ActiveX Control Remote Code Execution

Added: 08/29/2011 CVE: CVE-2011-2404 BID: 49100 OSVDB: 74510 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software HPTicketMgr.dll is vulnerable to directory traversal due to insufficient input validation by the...