Ignite Realtime Openfire未明特权提升漏洞

Ignite Realtime Openfire是一款实时协作服务程序。 Ignite Realtime Openfire存在多个问题，远程攻击者可以利用漏洞提升特权。 漏洞允许恶意用户通过内置的管理控制台上传代码到Openfire而执行任意指令。目前没有详细漏洞细节提供。 Ignite Realtime Openfire 3.3 升级程序： Ignite Realtime Openfire 3.3 Ignite Realtime openfire-3.3.1-1.i386.rpm...

Buffer overflow

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

Microsoft Office 2000 (OUACTRL.OCX v. 1.0.1.9) Remote DoS Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/23/b/p/span...

Microsoft Office 2000 (OUACTRL.OCX 1.0.1.9) - Remote Denial of Service

Microsoft Office 2000 OUACTRL.OCX 1.0.1.9 - Remote Denial of Service 2007/05/23 --------------------------------------------------------------------------------------------------------------------------- Microsoft Office 2000 Controllo UA di Microsoft Office OUACTRL.OCX v. 1.0.1.9 "HelpPopup"...

Ordinary file deception-vulnerability warning-the black bar safety net

Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS bundle file, bundle...

CVE-2007-1972

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

Ordinary file deception-vulnerability warning-the black bar safety net

Source: whytt's Blog Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS...

Think of a comparison XX run the EXE file method-vulnerability warning-the black bar safety net

From the Internet under the software compression package,usually comes with a readme. txt or sn. txt or the like,which contains some of the software description of the serial number or something,and generally in running the software before clicking the check out instructions,but we know. lnk file...

PHP COM extensions (inconsistent Win32) safe_mode Bypass Exploit

Exploit for unknown platform in category local exploits ================================================================ PHP COM extensions inconsistent Win32 safemode Bypass Exploit ================================================================ Run'c:\windows\system32\cmd.exe /c...

Microsoft Office Excel 2003 XLS File Denial Of Service

Microsoft Office Excel 2003 XLS File Denial Of Service В программе "Microsoft Office Excel 2003" компонент "DW20.EXE" вызывает ошибку при обработке файлов формата XLS Протестированно: Microsoft Office Excel 2003 11.6560.6568 SP2 Windows XP SP2 file "example.xls": ---begin--- MIME-Version: 1.0...

CVE-2007-0264

Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long command line argument. NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted...

CVE-2007-0264

CVE-2007-0264 affects WinZip 9.0 via a buffer overflow in Winzip32.exe triggered by a long command line argument. It may allow a local attacker to crash the application and potentially execute arbitrary code; in some setups it could cross privilege boundaries if untrusted filenames invoke Winzip3...

WinZip 9.0 - Command Line Remote Buffer Overflow

source: https://www.securityfocus.com/bid/22020/info WinZip is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may exploit this issue to cause denial-of-service...

qksmtp.pl.txt

!/bin/perl http://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg Linares for discovered the...

QK SMTP 3.01 - 'RCPT TO' Remote Buffer Overflow (2)

!/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg Linares for discovered the...

CVE-2006-6578

Microsoft Internet Information Services IIS 5.1 permits the IUSRMachine account to execute non-EXE files such as .COM files, which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments, as demonstrated using win.com when it is in a web directo...

CVE-2006-6578

Microsoft Internet Information Services IIS 5.1 permits the IUSRMachine account to execute non-EXE files such as .COM files, which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments, as demonstrated using win.com when it is in a web directo...

PT-2006-7199 · Hyperaccess · Hyperaccess

Name of the Vulnerable Software and Affected Versions: HyperAccess version 8.4 Description: The issue allows user-assisted remote attackers to execute arbitrary vbscript and commands. This is achieved via the /r option in a telnet:// URI, which is configured to use hawin32.exe. Recommendations: F...

Hacking tricks of using pictures do Trojan applications completely resolution-vulnerability warning-the black bar safety net

What is a BMP web page Trojan. It and last long with the stink of a MIME header vulnerability of Trojans different, MIME Trojans is to put an EXE file with a MIME-encoded as an EMLOUT LOOK mailthe file, put it on a web page using IE and OE coding vulnerability to automatically download and execut...

Microsoft Windows Help存在多个漏洞

Microsoft Help WINHLP32.EXE处理.hlp文件存在多个远程代码执行和拒绝服务问题。 攻击者可以在WEB页上防止恶意帮助文件，或者通过EMAIL附件形式发送，诱使用户打开来触发此漏洞，成功利用此漏洞可以以进程权限执行任意指令。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition...