Microsoft Windows Help Program - 'WinHlp32.exe' Crash (PoC)

!/usr/bin/perl Title : Microsoft Windows Help programWinHlp32.exememory corruption Version : 5.1.2600 Date : 2012-10-24 Vendor : http://www.microsoft.com Crash : http://img69.imageshack.us/img69/7652/helpview.jpg Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested ...

Microsoft Windows Help Program Memory Corruption

!/usr/bin/perl Title : Microsoft Windows Help programWinHlp32.exememory corruption Version : 5.1.2600 Date : 2012-10-21 Vendor : http://www.microsoft.com Crash : http://img69.imageshack.us/img69/7652/helpview.jpg Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested ...

Microsoft Windows Help (WinHlp32.exe) memory corruption

The HLP file is Microsoft Help file documentation for the Windows operating system or Windows programs. The file contains documentation for the Windows operating system or Windows programs. Successful exploits can allow attackers to execute arbitrary code !/usr/bin/perl Title : Microsoft Windows...

CVE-2012-4751

Cross-site scripting XSS vulnerability in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC...

Cross site scripting

Cross-site scripting XSS vulnerability in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC...

CVE-2012-4751

Cross-site scripting XSS vulnerability in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC...

CVE-2012-4751

Removed by vendor...

CVE-2012-4751

CVE-2012-4751 is an XSS vulnerability in Open Ticket Request System (OTRS) Help Desk. Affected are OTRS 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11. The issue arises from rendering an e-mail body where whitespace before a javascript: URL in the SRC attribute of an element (d...

Joomla! Component com_fss 1.9.1.1447 - SQL Injection

Joomla! Component comfss 1.9.1.1447 - SQL Injection Exploit Title: Joomla Freestyle Support comfss sqli Dork: N/A Date: 17-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://freestyle-joomla.com Version: Version 1.9.1.1447 last update on Oct 15, 2012 License: Commercial...

Cartweaver 3 - Local File Inclusion

Cartweaver 3 - Local File Inclusion Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the...

Cartweaver 3 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8...

Cartweaver 3 - Local File Inclusion

Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the Help Documents located in...

Cartweaver 3 Local File Inclusion

Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the Help Documents located in...

Web Help Desk 11.0.7 Cross Site Scripting

Author: loneferret of Offensive Security Product: Web Help Desk by SolarWinds Version: 11.0.7 older versions may be affected Vendor Site: http://www.webhelpdesk.com Software Download: http://www.webhelpdesk.com/help-desk-software/ Discovered: August 18th 2012 Disclosure: August 19th 2012: Reporte...

Web Help Desk by SolarWinds - Persistent Cross-Site Scripting

Web Help Desk by SolarWinds - Persistent Cross-Site Scripting Author: loneferret of Offensive Security Product: Web Help Desk by SolarWinds Version: 11.0.7 older versions may be affected Vendor Site: http://www.webhelpdesk.com Software Download: http://www.webhelpdesk.com/help-desk-software/...

Web Help Desk XSS Vulnerability

Exploit for php platform in category web applications Author: loneferret Product: Web Help Desk by SolarWinds Version: 11.0.7 older versions may be affected Vendor Site: http://www.webhelpdesk.com Software Download: http://www.webhelpdesk.com/help-desk-software/ Discovered: August 18th 2012...

Symantec Norton AntiVirus Protocol Handler (HCP) Code Execution Vulnerability

This host is installed with Symantec Norton AntiVirus and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecnortonavprotocolhandlercodeexecvuln.nasl 6018 2017-04-24 09:02:24Z teissa $ Symantec Norton AntiVirus Protocol Handler HCP Code Execution...

Symantec Norton AntiVirus Protocol Handler (HCP) Code Execution Vulnerability

Symantec Norton AntiVirus is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AVG Anti-Virus 'hcp://' Protocol Handler Remote Code Execution Vulnerability

The host is installed with AVG Anti-Virus and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbavgantivirusremotecodeexecvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ AVG Anti-Virus 'hcp://' Protocol Handler Remote Code Execution Vulnerability Authors: Madhuri D...

AVG Anti-Virus 'hcp://' Protocol Handler RCE Vulnerability

AVG Anti-Virus is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...