Horde Application Framework: Remote code execution

Background The Horde Application Framework is a general-purpose web application framework written in PHP, providing classes for handling preferences, compression, browser detection, connection tracking, MIME and more. Description Jan Schneider of the Horde team discovered a vulnerability in the...

CVE-2006-1591

Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file...

Heap overflow

Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file...

CVE-2006-1591

Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file...

CVE-2006-1491

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

Design/Logic Flaw

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

CVE-2006-1491

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

CVE-2006-1491

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

horde -- remote code execution vulnerability in the help viewer

Horde 3.1.1 release announcement: Major changes compared to Horde 3.1 are: Fix for remote code execution vulnerability in the help viewer, discovered by Jan Schneider from the Horde team...

Help Center Live module.php local file include flaw

The remote web server contains a PHP script that is affected by a local file file include vulnerability. Description : The remote host is running Help Center Live, a help desk tool written in PHP. The remote version of Help Center Live fails to sanitize input to the SPDX-FileCopyrightText: 2005...

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

Microsoft Windows Korean IME privilege escalation

Help subsystem is executed with LocalSystem privileges...

Microsoft HTML Help Workshop buffer overflow

Buffer overflow on .hhp files parsing...

Eagle Werros

/ Unl0ck Research Team Security Advisory / product: HTML Help Workshop 1994-1999 bug : stack overflow / vendor : Microsoft Corp. http://microsoft.com date : 13.02.06 / author : darkeagle / Info: stack based buffer overflows were founded in HTML HW. / HTML HW crashes when user opens specially...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (3)

Exploit for unknown platform in category local exploits ==================================================================== Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit 3 ==================================================================== / \ Windows HTML Help Workshop Index...

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (3)

/ \ Windows HTML Help Workshop Index File Stack Overflow Exploit / by Darkeagle \ / http://eagle.blacksecurity.org \ / MS coders codes so secure code. Keep coding : \ / Original Advisory: http://eagle.blacksecurity.org/stuff/unl0ck/adv/55k700206.txt \ / Exploit tested in WinXP SP2 RUS. \ / includ...

Microsoft HTML Help Workshop buffer overflow

Overview A buffer overflow in Microsoft HTML Help Workshop may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft HTML Help provides a standard help system for the Windows operating system. HTML Help Workshop is a component of the software development...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (new)

No description provided by source. / Microsoft HTML Help Workshop .hhp file Compiled File Header Buffer Overflow Exploit The Buffer Overlfow in Compiled File in Options in a HHP file. Bug found by:darkeagle Exploit coded by:k3xji Mail:[email protected] Web: www.guvenliklab.com Tested:Win XP SP2 /...