5537 matches found
Nero Express 7.9.6.4 - Local Heap PoC
No description provided by source. !/user/bin/perl Exploit Title: Nero Express7 Local Heap Poc Date: 2010/01/01 Author: D3V!L FUCKER Version: Nero Express7 Ver.7.9.6.4 Tested on: windows vista sp0 After Setup Open Nero StartSmart Essentials = Favorites = Open Projects = explit.nir Code : $headr=...
Microsoft Outlook Express 5/6 Script Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/8281/info It has been reported that a weakness may have been re-introduced into Microsoft Outlook Express. According to the source, the issue described in Bugtraq ID 3334 had been fixed by Microsoft but appears to have...
Microsoft Outlook Express 5.5 DoS Device Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4584/info A denial of service issue has been reported in Microsoft Outlook Express. Reportedly, Outlook Express does not adequately handle unusually crafted HTML mail messages. Modifying the BGSOUND or IFRAME tag to conta...
Sun Java System Communications Express 6.3 'UWCMain' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34155/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This issue is tracked by Sun Alert ID 258068. An attacker ma...
Sun Java System Communications Express 6.3 'search.xml' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34154/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...
Cisco Unity Express Multiple Vulnerabilities
No description provided by source. Exploit Title: Cisco Unity Express Multiple Vulnerabilities Reported: December 2012 Disclosed: February 2013 Author: Jacob Holcomb of Independent Security Evaluators CVE: XSS - CVE-2013-1114 and CSRF - CVE-2013-1120...
Microsoft Windows XP/2000 showHelp CHM File Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/9320/info Microsoft Windows is prone to a security flaw in the implementation of the showHelp function. Microsoft previously released patches that provide security measures to prevent abuse of the showHelp method to...
Microsoft Outlook Express 6.0 MHTML Forced File Execution Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9105/info A vulnerability has been discovered in Microsoft Outlook Express when handling MHTML file and res URIs that could lead to an unexpected file being downloaded and executed. The problem occurs due to the component...
Microsoft Outlook 97/98/2000, Outlook Express 4.0/5.0 GMT Field Buffer Overflow (1)
No description provided by source. source: http://www.securityfocus.com/bid/1481/info All versions of Microsoft Outlook and Outlook Express are vulnerable to buffer overflow attacks where a remote user is capable of executing arbitrary code on an email recipient's system. The problem lies in how...
Microsoft Outlook Express NNTP Response Parsing Buffer Overflow
No description provided by source. $Id: ms05030nntp.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Outlook Express 6 Attachment Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3271/info Microsoft Outlook Express 6 contains a new security feature which prevents users from opening potentially harmful file attachments. A vulnerability exists which allows a file embedded within an HTML frame in an...
BEA Systems WebLogic Express 3.1.8/4/5 Source Code Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/1378/info Within WebLogic Server and WebLogic Express there are four main java servlets registered to serve different kind of files. A default servlet exists if a requested file does not have an assigned servlet. If an ht...
mIRC 6.1 "IRC" Protocol Remote Buffer Overflow Exploit
No description provided by source. / remote mirc 6.11 exploit by blasty TESTED ON: Windows XP No SP, Ducth Build: 2600.xpclient.010817-1148 A few days ago, I saw a mIRC advisory on packetstorm 1 and was surprised nobody had written an exploit yet. So I decided to start writing one. Since this was...
Microsoft Outlook Express 4.27.3110/4.72.3120 POP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/252/info A vulnerability in Outlook Express allows a malicious message sent to the users mailbox to halt POP mail download. The Microsoft tracking number of this issue is S2134 T6142. A line with a single dot '.' stands f...
Microsoft Internet Explorer 5 Shell: IFrame Cross-Zone Scripting Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9628/info It has been alleged that Microsoft Internet Explorer is prone to a weakness that may potentially allow for the execution of hostile script code in the context of the My Computer Zone. This issue is related to ho...
Sun Java System Messenger Express 6.3-0.15 'error' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34140/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...
Microsoft Internet Explorer 6.0 Codebase Double Backslash Local Zone File Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10344/info A vulnerability has been reported that may potentially permit HTML documents to gain unauthorized access to local resources by using specific syntax when referencing said resource as a value for the CODEBASE...
Alleged Outlook Express 5/6 Link Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5682/info Reportedly, when decoding a HTML email, Outlook Express will stop responding upon encountering a A HREF link longer than 4095 characters. It is not confirmed why this behaviour occurs...
Microsoft Outlook Express 6 XML File Attachment Script Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5350/info An error has been reported in Microsoft Outlook Express which may allow malicious XML file attachments to execute arbitrary code in the context of the local system. Code execution could occur when the file...
Outlook Express 5.5/6.0,Windows Mail MHTML URI Handler Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17717/info Outlook Express and Windows Mail are prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties of a site in an arbitrary external domain in t...