CVE-2007-5320

Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to 1 delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control PegasusImaging.ActiveX.ThumnailXpress1.dll or 2 overwrite arbitrary files via the CompactFile...

CVE-2007-5320

Pegasus Imaging ImagXpress 8.0 contains multiple absolute path traversal vulnerabilities. In particular, the ThumbNailXpress1 ActiveX control’s CacheFile attribute and the ImagXpress8 ActiveX control’s CompactFile function can be abused to delete or overwrite arbitrary files on affected systems. ...

CVE-2007-5320: Improper Limitation of a Pathname to a Restricted Directory

Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to 1 delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control PegasusImaging.ActiveX.ThumnailXpress1.dll or 2 overwrite arbitrary files via the CompactFile...

Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bPegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite/b url:...

pegasus-overwrite.txt

----------------------------------------------------------------------------- Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bPegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion/b url:...

pegasus-delete.txt

----------------------------------------------------------------------------- Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite

Exploit for unknown platform in category remote exploits ============================================================== Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite ==============================================================...

Pegasus Imaging ImagXpress 8.0 - Arbitrary File Overwrite

Pegasus Imaging ImagXpress 8.0 - Arbitrary File Overwrite ----------------------------------------------------------------------------- Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion

----------------------------------------------------------------------------- Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion ----------------------------------------------------------------------------- Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion

Exploit for unknown platform in category remote exploits ================================================================== Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion ==================================================================...

Pegasus Imaging ImagXpress 8.0 - Arbitrary File Overwrite

----------------------------------------------------------------------------- Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

HPLIP hpssd.py From Address Arbitrary Command Execution

This module exploits a command execution vulnerable in the hpssd.py daemon of the Hewlett-Packard Linux Imaging and Printing Project. According to MITRE, versions 1.x and 2.x before 2.7.10 are vulnerable. This module was written and tested using the Fedora 6 Linux distribution. On the test system...

Microsoft MFC FindFile function heap buffer overflow

Overview A buffer overflow vulnerability in the Microsoft Foundation Class MFC Library could allow an attacker to execute arbitrary code on an affected system. Description The Microsoft Foundation Class MFC Library is a Microsoft library that wraps parts of the Windows API in C++ classes. The MFC...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-3649

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-3649

The CVE-2007-3649 issue affects HP Digital Imaging’s hpqvwocx.dll 2.1.0.556 (ActiveX control). The vulnerability is an absolute path traversal in the SaveToFile method’s second argument, allowing remote attackers to create or overwrite arbitrary files. The provided sources confirm the affected co...

CVE-2007-3649: Undefined Security Weakness

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

hpdig-savetofile.txt

------------------------------------------------------------------------------- HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 "SaveToFile" Insecure Method url: http://www.hp.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...