CVE-2007-0646

Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling the NSRunCriticalAlertPanel Apple AppK...

CVE-2007-0646

CVE-2007-0646 describes a format string vulnerability in iMovie HD 6.0.3 and Safari on Mac OS X 10.4–10.4.10. The issue arises when handling format specifiers in filenames passed to NSRunCriticalAlertPanel, allowing remote user‑assisted crashes (DoS). Connected Nessus entries reference Mac OS X S...

CVE-2007-0646: Use of Externally-Controlled Format String

Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling the NSRunCriticalAlertPanel Apple AppK...

CVE-2007-0646

Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling the NSRunCriticalAlertPanel Apple AppK...

Apple Mac OSX 10.4.x - iMovie HD .imovieproj Filename Format String

Apple Mac OSX 10.4.x - iMovie HD .imovieproj Filename Format String source: https://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting...

Apple Mac OSX 10.4.x - iMovie HD '.imovieproj' Filename Format String

source: https://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting these issues can allow attacker-supplied data to be written to...

Download & Exec polymorphed shellcode Engine

Exploit for generator platform in category shellcode ============================================ Download & Exec polymorphed shellcode Engine ============================================ Download & Exec polymorphed shellcode engine POC This downloading and execution code is not detectable by...

CVE-2006-5175

Cross-site request forgery CSRF vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors...

CVE-2006-5175: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors...

CVE-2006-5175

Cross-site request forgery CSRF vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors...

CVE-2006-5175

CVE-2006-5175 refers to a CSRF vulnerability in the administrative web interface of Buffalo TeraStation HD-HTGL. The flaw affects firmware versions prior to 2.05 beta 1, allowing remote attackers to cause configuration changes or data deletion via unspecified vectors when an administrator is auth...

CA BrightStor Discovery Service TCP Overflow

This module exploits a vulnerability in the CA BrightStor Discovery Service. This vulnerability occurs when a specific type of request is sent to the TCP listener on port 41523. This vulnerability was discovered by cybertronicatgmx.net and affects all known versions of the BrightStor product. Thi...

CVE-2004-0069

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function...

CVE-2004-0069

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function...

CVE-2004-0069

HD Soft Windows FTP Server 1.6 and earlier is affected by CVE-2004-0069 due to a format string vulnerability in the username parameter, which is processed by wscanf. This allows remote attackers to induce arbitrary code execution on vulnerable installations. The vulnerability is described in the ...

CVE-2004-0069: Undefined Security Weakness

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function...

HD Soft Windows FTP Server format string bug

Format string bug during authentication...

mac-excel98.txt

Subject: MM Giant Excel security hole Date: Thu, 12 Nov 1998 16:09:22 -0500 x-sender: [email protected] From: Steve Klein To: "Mac Mgrs" Mime-Version: 1.0 Sender: [email protected] Status: Question short version: Does anyone know of a way to protect my Macs from Excel's confused pathname...

Silverlight

Microsoft Silverlight is a cross-browser plug-in for Microsoft Internet Explorer and Mozilla Firefox that enables simplified delivery of media and rich Internet applications blending animation, audio/video, and interactivity. Silverlight 1.0 adds interactivity to media-centric applications,...