Hummingbird Deployment Wizard 2008 - ActiveX Command Execution

------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 DeployRun.dll Arbitrary File Execution url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational...

Hummingbird Deployment Wizard 2008 - ActiveX File Execution(2)

-------------------------------------------------------------------------------- Hummingbird Deployment Wizard 2008 DeployRun.dll Arbitrary File Execution2 url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational...

CVE-2008-4592: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

CVE-2008-4519

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. in the target parameter to (1) index2.php and (2) index.php. The underlying issue is in those target parameters; this could enable arbitrary local ...

CVE-2008-4519: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

CVE-2008-4528: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager pPIM 1.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter in an edit action...

CVE-2008-4483: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

Autodesk LiveUpdate ActiveX control ApplyPatch method vulnerability

Added: 10/06/2008 CVE: CVE-2008-4472 BID: 31490 OSVDB: 49047 Background Autodesk is a suite of architectural design software products. Problem The ApplyPatch method in the LiveUpdate ActiveX control allows a web page to execute arbitrary files on the system. Remote command execution is possible b...

CVE-2008-4455: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magicquotesgpc is disabled, allows remote attackers to read and execute arbitrary files via a .. dot dot in the language cookie...

Autodesk DWF Viewer ActiveX multiple security vulnerabilities

Insecure methods allow to save and execute files...

CVE-2008-4346: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to comments.php, a different vector than CVE-2008-3371...

CVE-2008-4351: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. dot dot in the p parameter...

ArabCMS - rss.php Local File Inclusion

ArabCMS - rss.php Local File Inclusion Local File Inclusion Vulnerabilities http://www.the-ghost.com/extras/am2/am%202.0%20beta%201.zip author : JIKO foor read a php file ?rss=name of file iwthout php for execute exploit does not write extention of file exploit : /Script/rss.php?rss=../name of fi...

Chilkat IMAP ActiveX 7.9 File Execution / IE DoS Exploit

No description provided by source. Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID: ChilkatMail2.ChilkatMailMan2.1 CLSID...

chilkat-execdos.txt

Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID: ChilkatMail2.ChilkatMailMan2.1 CLSID:...

Chilkat IMAP ActiveX 7.9 - File Execution IE Denial of Service

Chilkat IMAP ActiveX 7.9 - File Execution IE Denial of Service Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID:...

Chilkat IMAP ActiveX 7.9 - File Execution / Denial of Service

Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID: ChilkatMail2.ChilkatMailMan2.1 CLSID:...

Chilkat IMAP ActiveX 7.9 File Execution / IE DoS Exploit

Exploit for unknown platform in category remote exploits ======================================================== Chilkat IMAP ActiveX 7.9 File Execution / IE DoS Exploit ======================================================== Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By:...

Gentoo Security Advisory GLSA 200701-11 (horde-kronolith)

The remote host is missing updates announced in advisory GLSA 200701-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200805-01 (horde)

The remote host is missing updates announced in advisory GLSA 200805-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...