CVE-2008-2475

eBay Enhanced Picture Uploader ActiveX control EPUWALcontrol.dll before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property...

CVE-2008-2475

The CVE-2008-2475 entry concerns the eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) prior to version 1.0.27. The underlying flaw allows remote command execution through the PictureUrls property when the ActiveX control is used in a page, enabling arbitrary commands to run with...

eBay Enhanced Picture Uploader ActiveX control vulnerable to arbitrary command execution

Overview The eBay Enhanced Picture Uploader ActiveX control allows arbitrary commands to be executed. Description The eBay Enhanced Picture Uploader ActiveX control is used by the eBay web site to give Internet Explorer users additional functionality when uploading pictures to an auction. This...

Cross site scripting

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing...

CVE-2009-1308

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing...

CVE-2009-1308

CVE-2009-1308 is a cross-site scripting (XSS) vulnerability in Mozilla Firefox prior to 3.0.9, also affecting Thunderbird and SeaMonkey. The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, with exploitation...

VulnCheck KEV: CVE-2009-1308

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing...

CVE-2009-1308

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing...

Conficker-infected PCs get update, better anti-security defenses

From Network World Jeremy Kirk Millions of PCs infected with the Conficker virus have received a series of updated files over peer-to-peer connections that improve the worm’s defenses against security products and also include a sniffer and some fake anti-virus software. This is just the latest...

ebayindia-sql.txt

Host Information Server = Apache/2.0.52 CentOS Version = 4.0.20 Powered by = PHP/5.2.0 Current User = root@localhost Current Database = pegasusinfo Supports Union = yes Union Columns = 15 Url| http://shopping.ebay.in/files/template1rupeenew.php?lpid=600 Vuln:...

ebay-xss.txt

I am still Fugitif and now I want to show you how can work one vulnerable XSS Alert Bug on Ebay.com. To be more precise our link now is http://togo.ebay.com Ok..My XSS alert can be found here http://togo.ebay.com/affiliates/create/ imghttp://funkyimg.com/u/20862ebay1JPG.jpg/img I go to select one...

Unfixed XSS vulnerability at www.comparestoreprices.co.uk

Security researcher MaXWeL, has submitted on 22/04/2007 a cross-site-scripting XSS vulnerability affecting www.comparestoreprices.co.uk, which at the time of submission ranked 13457 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2007. It...

paypalXSScorry.txt

-=--------------------ADVISORY-------------------=- PayPal.com Author:CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: PayPal.com -=+ Version: -=+ Vendor's URL: www.paypal.com -=+ Platform: Linux\Unix -=+ Bug type: XSS -=+ Exploitation: Remote/Local -...

CVE-2006-5084

Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5..79 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference...

CVE-2006-5084

Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5..79 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference...

CVE-2006-5084

The connected CERT/NVD entries confirm a format-string vulnerability in Skype for Mac’s NSRunAlertPanel when handling Skype URIs (e.g., skype://) in versions up to 1.5..79, enabling remote attackers to cause crash and potentially execute arbitrary code. Impact is user-level via a crafted URI; no ...

[SA20969] eBay Enhanced Picture Services ActiveX Control Buffer Overflow

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

eBay Enhanced Picture Services buffer overflow

No description provided...

Buffer overflow

Buffer overflow in eBay Enhanced Picture Services aka EPUImageControl Class in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item SYI, Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary...

CVE-2006-1176

Buffer overflow in eBay Enhanced Picture Services aka EPUImageControl Class in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item SYI, Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary...