Numerous XSS Type 2 vulnerabilities in macros bundled with Confluence

'd like to report critical vulnerabilities in 3 of your macros - Column, Image, Block and Code macros. The vulnerabilities are classified as XSS Type 2 stored and the details with example exploits are in the pdfs attached. Because of similarity of the vulnerabilities assume that it is more than...

CVE-2007-4417

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed...

CVE-2007-2929

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code on...

CVE-2007-2929

The CVE-2007-2929 issue affects the IBM/Lenovo Access Support acpRunner ActiveX control, distributed with AcpController.dll prior to version 1.2.8.0 (and possibly acpir.dll prior to 1.0.0.9). The ActiveX control exposes unsafe methods to arbitrary web domains, enabling remote attackers to downloa...

IBM and Lenovo Access Support acpRunner ActiveX control fails to restrict access to methods

Overview The IBM Lenovo Access Support acpRunner ActiveX control fails to restrict access to its methods, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Access Support software package for IBM and Lenovo systems includes severa...

ddaa-insecure.txt

--------------------------------------------------------------------------------------- Data Dynamics ActiveBar ActiveX Control actbar3.ocx url: http://www.datadynamics.com/default.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for...

Data Dynamics ActiveBar ActiveX (actbar3.ocx <= 3.1) Insecure Methods

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------------- bData Dynamics ActiveBar ActiveX Control actbar3.ocx = 3.1 Multiple Inscure Methods/b url:...

Data Dynamics ActiveBar ActiveX (actbar3.ocx <= 3.1) Insecure Methods

Exploit for unknown platform in category remote exploits ===================================================================== Data Dynamics ActiveBar ActiveX actbar3.ocx --------------------------------------------------------------------------------------- Data Dynamics ActiveBar ActiveX Contro...

Data Dynamics ActiveBar - ActiveX actbar3.ocx 3.1 Insecure Methods

Data Dynamics ActiveBar - ActiveX actbar3.ocx 3.1 Insecure Methods --------------------------------------------------------------------------------------- Data Dynamics ActiveBar ActiveX Control actbar3.ocx url: http://www.datadynamics.com/default.aspx author: shinnai mail: shinnaiatautisticidoto...

Data Dynamics ActiveBar - ActiveX 'actbar3.ocx 3.1' Insecure Methods

--------------------------------------------------------------------------------------- Data Dynamics ActiveBar ActiveX Control actbar3.ocx url: http://www.datadynamics.com/default.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for...

chilkat-multi.txt

------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------ bChilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0...

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods ------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/...

Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit ====================================================================...

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods

------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-3296

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods...

Zenturi ProgramChecker ActiveX Multiple Insecure Methods Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bZenturi ProgramChecker ActiveX Control Multiple Insecure Methods/b url:...

Zenturi ProgramChecker ActiveX Multiple Insecure Methods Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bZenturi ProgramChecker ActiveX Control Multiple Insecure Methods/b url:...

Zenturi ProgramChecker - ActiveX Multiple Insecure Methods

----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control Multiple Insecure Methods url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written fo...

Zenturi ProgramChecker - ActiveX Multiple Insecure Methods

Zenturi ProgramChecker - ActiveX Multiple Insecure Methods ----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control Multiple Insecure Methods url: http://www.programchecker.com/activeintro.aspx author: shinnai mail:...