Microsoft Windows Media Player 7 Embedded OCX Control Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1714/info Due to a flaw in the method Microsoft Windows Media Player 7 handles OCX controls ActiveX containers in embedded in RTF email messages, it is possible to crash RTF-enabled email clients such as Microsoft Outlook...

SunShop Shopping Cart 1.5/2.x User-Embedded Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4506/info SunShop is commercial web store software. It is written in PHP, and will run on most Unix and Linux operating systems as well as Microsoft Windows. SunShop allows attackers to embed arbitrary script code into fo...

WebTrends Reporting Center 6.1 Management Interface Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This information may permit an attacker to...

Critical Path InJoin Directory Server 4.0 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4718/info Critical Path provides an LDAP Lightweight Directory Access Protocol Directory Server called InJoin. InJoin Directory Server is provided for Microsoft Windows operating systems and Unix variants. iCon is the...

Microsoft Windows CreateSizedDIBSECTION Stack Buffer Overflow

No description provided by source. $Id: ms11006createsizeddibsection.rb 11730 2011-02-08 23:31:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

Mercury Mail <= 4.01a (Pegasus) IMAP Buffer Overflow Exploit

No description provided by source. / Mercury imap4 server remote buffer overflow exploit author : c0d3r kaveh razavi [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not available right now company...

Macromedia Flash Player 6.0.x Flash Cookie Predictable File Location Weakness

No description provided by source. source: http://www.securityfocus.com/bid/8900/info Macromedia Flash Player is reported to store Flash cookies .sol files in a predictable location on client systems. Other attacks are possible given the ability to store content on a system in a predictable...

EType EServ 1.9x NNTP Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6522/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When a remote user...

Microsoft Windows Help program (WinHlp32.exe) Crash PoC

No description provided by source. !/usr/bin/perl Title : Microsoft Windows Help programWinHlp32.exememory corruption Version : 5.1.2600 Date : 2012-10-24 Vendor : http://www.microsoft.com Crash : http://img69.imageshack.us/img69/7652/helpview.jpg Impact : Med/High Contact : coolkaveh at...

Skype 3.6.216 Voicemail URI Handler Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26588/info Skype is prone to a remote denial-of-service vulnerability because of a NULL-pointer dereference flaw. Successfully exploiting this issue allows remote attackers to crash the application, denying service to...

Microsoft Windows 95/98/2000/NT4 WinHlp Item Buffer Overflow Vulnerability

... HTML帮助ActiveX控件Hhctrl.ocx由Microsoft HTML Help附带，设计用于与Internet Explorer一起提供帮助功能。 ... HTML帮助ActiveX控件存在漏洞，可导致远程攻击者进行拒绝服务攻击。 ... HTML帮助ActiveX控件存在基于栈和堆的缓冲区溢出，攻击者可以构建包含恶意数据的Web页面，当用户浏览此链接时，可导致拒绝服务攻击，精心构建提交数据可导致以SYSTEM的权限在客户端系统上执行任意命令。...

HP OpenView Network Node Manager 7.x - 'ovspmd' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28689/info HP OpenView Network Node Manager is prone to a buffer-overflow vulnerability. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the Network Node Manager...

Opera Web Browser 7.23 Empty Embedded Object JavaScript Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11090/info Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS. Opera Web Browser is reported to be susceptible to a JavaScript denial of servic...

Hosting Controller 1.x DSNManager Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4759/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The DSNManager script does not sufficiently filter...

Microsoft Windows XP/2000 RunDLL32.EXE Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8114/info rundll32.exe has been reported prone to a buffer overflow vulnerability. The condition has been reported to be triggered when an excessive string is passed to the vulnerable application as a routine name for a...

Ipswitch WS_FTP Server 1.0.x/2.0.x 'STAT' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3507/info WSFTP Server, a popular FTP server for Microsoft Windows platforms, is vulnerable to a buffer overflow condition when a user submits a specially crafted legitimate FTP command. WSFTP Server by default runs as a...

Easy File Management Web Server Stack Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking Reliable memory corruption include...

Python - Interpreter Heap Memory Corruption (PoC)

No description provided by source. Title: Python Interpreter Heap Memory Corruption Date: Sun, 30 Mar 2014 20:09:44 -0400 Vulnerability Discovered By : Unknown Proof of Concept : Debasish Mandal https://twitter.com/debasishm89 Software Link: https://www.python.org/ Version: All , Fix released...

2X ApplicationServer 10.1 TuxSystem Class ActiveX Control Remote File Overwrite Vulnerability

No description provided by source. 2X ApplicationServer 10.1 TuxSystem Class ActiveX Control TuxScripting.dll ExportSettings Remote File Overwrite Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2 Internet Explorer 8 vendor description: 2X Software is a global leader of desktop a...

Microsoft Windows 2000 Named Pipes Predictability Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pi...