Horde Help Viewer <= 3.1 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Wed Apr 5 21:51:12 CEST 2006 [email protected] Horde help module remote execution telnet 310.27.901.33.1109 1689 thanks horatio for the address USER paranoia PASS total SYST REST 100 REST 0 PWD TYPE A PASV LIST CWD 0days GET horddy.pl w0w this dam...

Horde Application Framework: Remote code execution

Background The Horde Application Framework is a general-purpose web application framework written in PHP, providing classes for handling preferences, compression, browser detection, connection tracking, MIME and more. Description Jan Schneider of the Horde team discovered a vulnerability in the...

Heap overflow

Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file...

CVE-2006-1591

Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file...

CVE-2006-1591

Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file...

CVE-2006-1591: Undefined Security Weakness

Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file...

Design/Logic Flaw

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

CVE-2006-1491

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

CVE-2006-1491

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

CVE-2006-1491

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

CVE-2006-1491: Improper Control of Generation of Code

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

horde -- remote code execution vulnerability in the help viewer

Horde 3.1.1 release announcement: Major changes compared to Horde 3.1 are: Fix for remote code execution vulnerability in the help viewer, discovered by Jan Schneider from the Horde team...

Help Center Live module.php local file include flaw

The remote web server contains a PHP script that is affected by a local file file include vulnerability. Description : The remote host is running Help Center Live, a help desk tool written in PHP. The remote version of Help Center Live fails to sanitize input to the SPDX-FileCopyrightText: 2005...

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

Microsoft Windows Korean IME privilege escalation

Help subsystem is executed with LocalSystem privileges...

Microsoft HTML Help Workshop buffer overflow

Buffer overflow on .hhp files parsing...

Eagle Werros

/ Unl0ck Research Team Security Advisory / product: HTML Help Workshop 1994-1999 bug : stack overflow / vendor : Microsoft Corp. http://microsoft.com date : 13.02.06 / author : darkeagle / Info: stack based buffer overflows were founded in HTML HW. / HTML HW crashes when user opens specially...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (3)

Exploit for unknown platform in category local exploits ==================================================================== Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit 3 ==================================================================== / \ Windows HTML Help Workshop Index...