SA-20070509-0.txt

SEC Consult Security Advisory ======================================================================= title: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express Information / Source Code Disclosure, Cross Site Scripting, Denial of Service program: Nokia Intellisync...

CVE-2007-2137

IBM Tivoli Monitoring Express 6.1 (including Universal Agent, Windows OS Monitoring Agent, and Enterprise Portal Server) is affected by a heap-based buffer overflow in kde.dll caused by processing oversized input. The vulnerability exists in three services: Universal Agent Primary Service (TCP 10...

IBM Tivoli Monitoring Express通用代理多个堆溢出漏洞

IBM Tivoli Monitoring Express用于帮助用户监控和管理操作系统、数据库及应用。 Tivoli Monitoring Express的Tivoli Universal Agent Primary Service（TCP 10110）、Monitoring Agent for Windows OS - Primary（TCP 6014）和Tivoli Enterprise Portal Server（TCP 14206）服务中存在堆溢出漏洞，如果向这些服务发送了超长字符串的话，就会在调用kde.dll中有漏洞函数期间触发堆溢出，导致执行任意指令。 IBM Tivol...

ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability

ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability http://www.zerodayinitiative.com/advisories/ZDI-07-018.html April 18, 2007 -- CVE ID: CVE-2007-2137 -- Affected Vendor: IBM -- Affected Products: IBM Tivoli Monitoring Express 6.1 -- Vulnerability Details: This...

Solaris 10 (x86) : 122794-36 (deprecated)

Sun Java System Communications Express 6.3-23.01x86: core patch. Date this patch was last updated by Sun : Jun/25/12 This plugin has been deprecated and either replaced with individual 122794 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 9 (sparc) : 122793-36

Sun Java System Communications Express 6.3-23.01: core patch. Date this patch was last updated by Sun : Jun/25/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 122793-36 (deprecated)

Sun Java System Communications Express 6.3-23.01: core patch. Date this patch was last updated by Sun : Jun/25/12 This plugin has been deprecated and either replaced with individual 122793 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

ani_loadimage_chunksize-email.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

Microsoft Windows动画光标ANI格式处理远程代码执行漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器，Microsoft Windows是一款流行的操作系统。 Microsoft Windows在处理畸形的动画图标文件.ani时存在缓冲区溢出问题，远程攻击者可利用此漏洞以 当前用户进程权限执行任意指令。 Microsoft Windows在处理畸形动画光标文件.ani时没有正确地验证ANI头字段中所指定的大小，可导致基 于栈溢出漏洞。攻击者可以构建恶意WEB页或者包含ANI文件的EMAIL消息来触发，就会触发这个溢出，导致...

CVE-2006-7158

Oracle Application Express (APEX/HTMLDB) prior to version 2.2.1 is affected by a cross-site scripting (XSS) vulnerability in the NOTIFICATION_MSG parameter in the APEX UI. The issue allows remote attackers to inject arbitrary web script or HTML. The root cause is insufficient input handling for t...

MDKA-2006:020 : libaio

The libaio package is being made available as an official/main package to provide out-of-the-box support for Oracle Express in Mandriva Linux 2006. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

calexp-xss.txt

hey guys .. check out this new xss i just found ;P Vulnerable : Calendar Express 2 web : http://www.ci.emeryville.ca.us/calendar, http://www.phplite.com/products/calendarexpress/ XSS :...

Calendar Express - search.php Cross-Site Scripting

Calendar Express - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22578/info Calendar Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

XSS in [Calendar Express 2 ]

hey guys .. check out this new xss i just found ;P Vulnerable : Calendar Express 2 web : http://www.ci.emeryville.ca.us/calendar, http://www.phplite.com/products/calendarexpress/ XSS : http://127.0.0.1/calendar/search.php?allwords=223E3Cscript3Ealert2827bl4ck27293C2Fscript3E&cid=1&title=1&desc=1...

BEA JRockit Java虚拟机未明堆栈缓冲区溢出漏洞

BEA JRockit JDK为开发和运行使用Java语言编写的应用程序提供了各种工具、实用程序和一个完整的运行时环境。 BEA JRockit在特殊环境下存在溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 BEA WebLogic Server 8.1 BEA WebLogic Platform 8.1 BEA WebLogic Express 8.1 BEA JRockit 1.4.205 补丁下载： BEA WebLogic Server 8.1 BEA WebLogic Server...

MS05-030 Microsoft Outlook Express NNTP Response Parsing Buffer Overflow

This module exploits a stack buffer overflow in the news reader of Microsoft Outlook Express. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS05-030 Microsoft Outlook Express NNTP Response...

Code injection

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...

CVE-2006-2386

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...

CVE-2006-2386

CVE-2006-2386 is an unspecified remote code execution vulnerability affecting Microsoft Outlook Express 6 and earlier, exploitable via a crafted Windows Address Book (.wab) file. Technical details in connected docs indicate the root cause is a buffer/validation issue in Windows Address Book (WAB)...

CVE-2006-2386

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...