CVE-2007-3815

CVE-2007-3815 affects Poslovni informator Republike Slovenije (PIRS) 2007, via a buffer overflow in pirs32.exe in the GUI, allowing a local user to trigger a denial of service and potentially execute arbitrary code by supplying a long search string. Evidence across multiple sources confirms the c...

CVE-2007-3815: Undefined Security Weakness

Buffer overflow in pirs32.exe in Poslovni informator Republike Slovenije PIRS 2007 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long search string in certain fields in the GUI. NOTE: this may cross privilege boundaries if PIRS is used...

Code injection

Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that injects JavaScript, a www.google.com search IFRAME, and a META HTTP-EQUIV="refresh" that targets a www.google.com search for a local .exe file, which is displayed in the "results...

Ignite Realtime Openfire未明特权提升漏洞

Ignite Realtime Openfire是一款实时协作服务程序。 Ignite Realtime Openfire存在多个问题，远程攻击者可以利用漏洞提升特权。 漏洞允许恶意用户通过内置的管理控制台上传代码到Openfire而执行任意指令。目前没有详细漏洞细节提供。 Ignite Realtime Openfire 3.3 升级程序： Ignite Realtime Openfire 3.3 Ignite Realtime openfire-3.3.1-1.i386.rpm...

Buffer overflow

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

Microsoft Office 2000 (OUACTRL.OCX v. 1.0.1.9) Remote DoS Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/23/b/p/span...

Microsoft Office 2000 (OUACTRL.OCX 1.0.1.9) - Remote Denial of Service

Microsoft Office 2000 OUACTRL.OCX 1.0.1.9 - Remote Denial of Service 2007/05/23 --------------------------------------------------------------------------------------------------------------------------- Microsoft Office 2000 Controllo UA di Microsoft Office OUACTRL.OCX v. 1.0.1.9 "HelpPopup"...

Ordinary file deception-vulnerability warning-the black bar safety net

Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS bundle file, bundle...

CVE-2007-1972

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

Ordinary file deception-vulnerability warning-the black bar safety net

Source: whytt's Blog Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS...

CVE-2007-1578: Undefined Security Weakness

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD mcrimap4.exe 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow...

Think of a comparison XX run the EXE file method-vulnerability warning-the black bar safety net

From the Internet under the software compression package,usually comes with a readme. txt or sn. txt or the like,which contains some of the software description of the serial number or something,and generally in running the software before clicking the check out instructions,but we know. lnk file...

PHP COM extensions (inconsistent Win32) safe_mode Bypass Exploit

Exploit for unknown platform in category local exploits ================================================================ PHP COM extensions inconsistent Win32 safemode Bypass Exploit ================================================================ Run'c:\windows\system32\cmd.exe /c...

Microsoft Office Excel 2003 XLS File Denial Of Service

Microsoft Office Excel 2003 XLS File Denial Of Service В программе "Microsoft Office Excel 2003" компонент "DW20.EXE" вызывает ошибку при обработке файлов формата XLS Протестированно: Microsoft Office Excel 2003 11.6560.6568 SP2 Windows XP SP2 file "example.xls": ---begin--- MIME-Version: 1.0...

CVE-2007-0264

Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long command line argument. NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted...

CVE-2007-0264

CVE-2007-0264 affects WinZip 9.0 via a buffer overflow in Winzip32.exe triggered by a long command line argument. It may allow a local attacker to crash the application and potentially execute arbitrary code; in some setups it could cross privilege boundaries if untrusted filenames invoke Winzip3...

CVE-2007-0264: Undefined Security Weakness

Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long command line argument. NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted...

WinZip 9.0 - Command Line Remote Buffer Overflow

source: https://www.securityfocus.com/bid/22020/info WinZip is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may exploit this issue to cause denial-of-service...

CVE-2007-0161: Undefined Security Weakness

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

qksmtp.pl.txt

!/bin/perl http://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg Linares for discovered the...