HP Digital Imaging (hpqvwocx.dll v. 2.1.0.556) SaveToFile() Exploit

Exploit for unknown platform in category remote exploits =================================================================== HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 SaveToFile Exploit ===================================================================...

HP Digital Imaging hpqvwocx.dll 2.1.0.556 - SaveToFile() File Write

HP Digital Imaging hpqvwocx.dll 2.1.0.556 - SaveToFile File Write ------------------------------------------------------------------------------- HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 "SaveToFile" Insecure Method url: http://www.hp.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

NCTAudioStudio2 ActiveX DLL 2.6.1.148 CreateFile() Insecure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------------------------- bNCTAudioStudio2 ActiveX DLL NCTWavChunksEditor2.dll v. 2.6.1.148 "CreateFile"Insecure...

NCTAudioEditor2 ActiveX DLL (NCTWMAFile2.dll v. 2.6.2.157) Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------------------ bNCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 "CreateFile"Insecure Method/b url:...

NCTAudioStudio2 ActiveX DLL 2.6.1.148 CreateFile() Insecure Method

Exploit for unknown platform in category remote exploits ================================================================== NCTAudioStudio2 ActiveX DLL 2.6.1.148 CreateFile Insecure Method ==================================================================...

NCTAudioEditor2.txt

------------------------------------------------------------------------------------------ NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 "CreateFile"Insecure Method url: http://www.nctsoft.com/products/NCTAudioEditor2/ author: shinnai mail: shinnaiatautisticidotorg site:...

NCTAudioStudio2 - ActiveX DLL 2.6.1.148 CreateFile() Insecure Method

NCTAudioStudio2 - ActiveX DLL 2.6.1.148 CreateFile Insecure Method -------------------------------------------------------------------------------------------------- NCTAudioStudio2 ActiveX DLL NCTWavChunksEditor2.dll v. 2.6.1.148 "CreateFile"Insecure Method url:...

NCTAudioStudio2 - ActiveX DLL 2.6.1.148 'CreateFile()'/ Insecure Method

-------------------------------------------------------------------------------------------------- NCTAudioStudio2 ActiveX DLL NCTWavChunksEditor2.dll v. 2.6.1.148 "CreateFile"Insecure Method url: http://www.nctsoft.com/products/NCTAudioEditor2/ author: shinnai mail: shinnaiatautisticidotorg site...

NCTAudioEditor2 ActiveX DLL (NCTWMAFile2.dll v. 2.6.2.157) Exploit

Exploit for unknown platform in category remote exploits ================================================================== NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 Exploit ==================================================================...

NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll 2.6.2.157 - File Write

NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll 2.6.2.157 - File Write ------------------------------------------------------------------------------------------ NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 "CreateFile"Insecure Method url: http://www.nctsoft.com/products/NCTAudioEditor2/...

NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - File Write

------------------------------------------------------------------------------------------ NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 "CreateFile"Insecure Method url: http://www.nctsoft.com/products/NCTAudioEditor2/ author: shinnai mail: shinnaiatautisticidotorg site:...

zenturi-navig.txt

----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windo...

Zenturi ProgramChecker ActiveX NavigateUrl() Insecure Method Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bZenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method/b url:...

Zenturi ProgramChecker - 'ActiveX NavigateUrl()' Insecure Method

----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windo...

Zenturi ProgramChecker - ActiveX NavigateUrl() Insecure Method

Zenturi ProgramChecker - ActiveX NavigateUrl Insecure Method ----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method url: http://www.programchecker.com/activeintro.aspx author: shinnai mail:...

ee -- temporary file privilege escalation

Problem description The ispellop function used by ee1 while executing spell check operations employs an insecure method of temporary file generation. This method produces predictable file names based on the process ID and fails to confirm which path will be over written with the user. It should b...

USN-61-1: vim vulnerabilities

Javier Fernández-Sanguino Peña noticed that the auxillary scripts "tcltags" and "vimspell.sh" created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the script either by calling it...

netsupport.txt

To the moderator, this is my first bugtraq posting, feel free to make any changes you feel nessessary to make this more helpful. Thank you very much Vendor : NetSupport URL : http://www.netsupport-inc.com/ Version : Invision NetSupport School Pro Risk : Password protection weakness Description:...

Symbolic links in python

os.py execvpe method creates temporary file insecurely...

Re: [SECURITY] New version of premail fixes /tmp file problem

On Sat, May 30, 1998 at 06:53:48PM +0200, Martin Schulze wrote: We have received a report that premail uses temporary files in /tmp using unsecure methods for opening them. This is fixed in the new 0.45-4 release. We recommend you upgrade your samba package immediately. ^^^^^ This should read...