MW6 Barcode - ActiveX 'Barcode.dll' Insecure Method

...

MW6 Aztec ActiveX (Aztec.dll) Remote Insecure Method Exploit

Exploit for unknown platform in category remote exploits ============================================================ MW6 Aztec ActiveX Aztec.dll Remote Insecure Method Exploit ============================================================ Test Exploit page targetFile =...

MW6 Aztec - ActiveX Aztec.dll Remote Insecure Method

MW6 Aztec - ActiveX Aztec.dll Remote Insecure Method  Test Exploit page targetFile = "C:\WINDOWS\system32\Aztec.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "AZTECLib.MW6Aztec" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1...

CVE-2008-4000: Oracle PeopleTools – Authentication Weakness

PeopleSoft Enterprise applications architecture is built around the proprietary PeopleTools technology. PeopleTools user authentication mechanism requires a user to provide the correct credentials in order to gain access through the web interface. An account lockout policy disables a user account...

CVE-2008-4591

Multiple cross-site scripting XSS vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 langaccessforbiden and 2 langidenttitle parameters...

CVE-2008-4504

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4504

Affected software: Hero DVD Player 3.0.8 (Herosoft Inc.). Vulnerability: heap-based buffer overflow in Mplayer.exe triggered by a long entry in an M3U file. Impact: user-assisted remote attackers may execute arbitrary code. Notes: the description indicates the provenance is from third-party infor...

CVE-2008-4504

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Debian Security Advisory DSA 1648-1 (mon)

The remote host is missing an update to mon announced via advisory DSA 1648-1. OpenVAS Vulnerability Test $Id: deb16481.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1648-1 mon Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-4504: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

fc2blog-xss.txt

Subject: FC2 BLOG Cross-Site Scripting Vulnerabilities Application: FC2 BLOG Vendor:BLOG.FC2.COM Corporation: FC2, Inc. DATE : 9 Oct 2008 Description: FC2 BLOG Cross-Site Scripting Vulnerabilities Vulnerability: ============== They do not properly sanitize the potentially malicious input content ...

FreeBSD Ports: mysql-client

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-4352: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...

NMS DVD Burning SDK 'NMSDVDX.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31374 CNCAN ID：CNCAN-2008092609 NMS DVD Burning SDK是一款用于刻录DVD光盘的工具包。 NMS DVD Burning SDK包含的ActiveX控件存在任意文件覆盖问题，远程攻击者可以利用漏洞以登录用户进程权限执行任意程序。 问题是'NMSDVDX.dll' ActiveX控件处理"EnableLog"和"LogMessage"方法存在问题，构建恶意WEB页，诱使用户访问，可覆盖系统文件，执行任意程序。 Numedia Soft Inc. NMSDVDX DVD Burning SDK 1.008 Numedia...

Gentoo Security Advisory GLSA 200501-18 (konqueror)

The remote host is missing updates announced in advisory GLSA 200501-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200608-18 (net-server)

The remote host is missing updates announced in advisory GLSA 200608-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200704-22 (BEAST)

The remote host is missing updates announced in advisory GLSA 200704-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200710-07 (tk)

The remote host is missing updates announced in advisory GLSA 200710-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200407-12 (Kernel)

The remote host is missing updates announced in advisory GLSA 200407-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-33 (www-apps/twiki)

The remote host is missing updates announced in advisory GLSA 200411-33. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...