745 matches found
Korean GHBoard FlashUpload Component - 'download.jsp?name' Arbitrary File Access
source: https://www.securityfocus.com/bid/26182/info GHBoard is prone to multiple vulnerabilities that let attackers upload and download arbitrary files and execute arbitrary code within the context of the webserver process...
Microsoft Windows - 'gdi32.dll' Denial of Service (MS07-046)
/ MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong Gil-Dong & Chun Woo-Chi Yang yeon?1542, Korea "I shall keep clenching my left fist unitl i see the real tao". This POC is only for test. If an application read a malformed wmf file like this POC, the application will be crashe...
KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow
KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam = HeapJam.substring0, SizeofHeapPad/2; return HeapJam; // buffer 671 bytes write,...
Unfixed XSS vulnerability at www.lifeinkorea.com
Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.lifeinkorea.com, which at the time of submission ranked 78092 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...
Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
No description provided by source. + Title: Microsoft Word 2000 Unspecified Code Execution Vulnerability Exploit 0-day + code by xCuter BongGoo Kang - [email protected] + Critical: High Critical + Impact: MS Word 2000 - Could Allow Arbitrary Command Execution...
ms07-004.txt
and slightly modified - 2007.1.15 -- v: behavior: urlVMLRender; shellcode =...
MS Internet Explorer VML Remote Buffer Overflow Exploit (MS07-0 0 4)-vulnerability warning-the black bar safety net
In addition there is attention to detail: tested on WinXP SP2 Korean version fully patched except kb929969 & IE 6.0 sorry about that virus hit ratio is only about 1/5 The test environment is WinXP SP2 Korean version, in addition to kb929969, the other patch is complete, IE 6.0 The success rate of...
Microsoft Internet Explorer - VML Remote Buffer Overflow (MS07-004)
Microsoft Internet Explorer - VML Remote Buffer Overflow MS07-004 and slightly modified - 2007.1.15 -- v: behavior: urlVMLRender; shellcode =...
MS Internet Explorer VML Remote Buffer Overflow Exploit (MS07-004)
Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer VML Remote Buffer Overflow Exploit MS07-004 ================================================================== and slightly modified - 2007.1.15 -- v:...
Microsoft Internet Explorer - VML Remote Buffer Overflow (MS07-004)
and slightly modified - 2007.1.15 -- v: behavior: urlVMLRender; shellcode =...
BBS E-Market Professional (Path Disclosure/Include) Multiple Vulns
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV06$2004 --------------------------------------------------------------------------- Multiple vulnerabilities 1n BBS E-Market Professional...
BBS E-Market Professional - Full Path Disclosure File Inclusion
BBS E-Market Professional - Full Path Disclosure File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV06$2004 --------------------------------------------------------------------------- Multiple vulnerabilities 1n BBS E-Market Professional...
BBS E-Market Professional (Path Disclosure/Include) Multiple Vulns
Exploit for unknown platform in category web applications ================================================================== BBS E-Market Professional Path Disclosure/Include Multiple Vulns ================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y...
Microsoft Windows韩语输入法编辑器权限提升漏洞（MS06-009）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows和Office韩语输入法编辑器（IME）中存在权限提升漏洞，可能允许恶意用户完全控制受影响的系统。 攻击者可以通过终端服务连接到服务器或在控制台，在登录界面上，调出韩文输入法，点击查看授权许可的链接，这时Winlogon进程会以系统权限执行显示授权信息的notepad程序。此时用户以普通用户登录进系统，即可以利用这个高权限的notepad进程提升自己的访问能力。 Microsoft Office 2003 Microsoft Windows XP SP2 Microsoft Windows XP SP1...
Microsoft Excel 2000-2004 - Style Handling and Repair Remote Code Execution
source: https://www.securityfocus.com/bid/18872/info Microsoft Excel is prone to a remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of targeted users. A proof-of-concept malicious code named 'Trojan.Hongmosa' is...
Microsoft Windows Korean IME privilege escalation
Help subsystem is executed with LocalSystem privileges...
Microsoft Security Bulletin MS06-009 Vulnerability in the Korean Input Method Editor Could Allow Elevation of Privilege (901190)
Microsoft Security Bulletin MS06-009 Vulnerability in the Korean Input Method Editor Could Allow Elevation of Privilege 901190 Published: February 14, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows or Microsoft Office 2003 Impact of Vulnerability:...
CVE-2006-0008
The ShellAbout API call in Korean Input Method Editor IME in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, whi...
Input validation
The ShellAbout API call in Korean Input Method Editor IME in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, whi...
CVE-2006-0008
The ShellAbout API call in Korean Input Method Editor IME in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, whi...