Microsoft Office WPG Image File Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious WPG WordPerfect Graphics file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the...

Microsoft Windows Image Color Management Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability because of a flaw in the Microsoft Color Management System MSCMS module of the Image Color Management System ICM. An attacker could exploit this issue by enticing a victim to open a malicious image file. Successfully...

CVE-2008-0259

Multiple directory traversal vulnerabilities in mg/php/mgthumbs.php in minimal Gallery 0.8 allow remote attackers to read arbitrary files via a .. dot dot in the 1 thumbcat and 2 thumb parameters...

CVE-2008-0260

CVE-2008-0260 affects minimal Gallery 0.8. The issue is an information-disclosure vulnerability where an attacker can remotely obtain configuration information by requesting php_info.php, which invokes phpinfo. The exposed data could include server configuration details and environment settings. ...

CVE-2008-0259

CVE-2008-0259 affects minimal Gallery 0.8. Vulnerability in the PHP file _mg/php/mg_thumbs.php allows remote attackers to read arbitrary files through a directory traversal using the parameters (1) thumbcat and (2) thumb. The underlying cause is improper handling of user-supplied paths, enabling ...

CVE-2008-0259

Multiple directory traversal vulnerabilities in mg/php/mgthumbs.php in minimal Gallery 0.8 allow remote attackers to read arbitrary files via a .. dot dot in the 1 thumbcat and 2 thumb parameters...

minimal-disclose.txt

Script : minimal Gallery 0.8 Download : http://minimaldesign.net/downloads/projects/minimal-gallery BUG : Remote File Disclosure Vulnerability Dork : powered by minimal Gallery 0.8 Vulnerable CODE : /mg/php/mgthumbs.php readfile"../$thumbsdir/$thumbcat$thumb"; the variables thumbcat & thumb are...

minimal Gallery 0.8 Remote File Disclosure Vulnerability

No description provided by source. Script : minimal Gallery 0.8 Download : http://minimaldesign.net/downloads/projects/minimal-gallery BUG : Remote File Disclosure Vulnerability Dork : powered by minimal Gallery 0.8 Vulnerable CODE : /mg/php/mgthumbs.php readfile"../$thumbsdir/$thumbcat$thumb"; t...

minimal Gallery 0.8 - Remote File Disclosure

minimal Gallery 0.8 - Remote File Disclosure Script : minimal Gallery 0.8 Download : http://minimaldesign.net/downloads/projects/minimal-gallery BUG : Remote File Disclosure Vulnerability Dork : powered by minimal Gallery 0.8 Vulnerable CODE : /mg/php/mgthumbs.php...

minimal Gallery 0.8 - Remote File Disclosure

Script : minimal Gallery 0.8 Download : http://minimaldesign.net/downloads/projects/minimal-gallery BUG : Remote File Disclosure Vulnerability Dork : powered by minimal Gallery 0.8 Vulnerable CODE : /mg/php/mgthumbs.php readfile"../$thumbsdir/$thumbcat$thumb"; the variables thumbcat & thumb are...

minimal Gallery 0.8 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================== minimal Gallery 0.8 Remote File Disclosure Vulnerability ======================================================== Script : minimal Gallery 0.8 Download :...

Microsoft Excel Worksheet Index Value Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file .xls. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft .NET Framework PE Loader Remote Buffer Overflow Vulnerability

Description Microsoft .NET Framework is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of a user running the application. Successful exploits ca...

Microsoft Windows CE .NET Compact Framework Components Multiple Vulnerabilities

Description Components of the .NET Compact Framework for Microsoft Windows CE are prone to multiple vulnerabilities. Exploiting these issues may allow remote attackers to cause denial-of-service conditions, corrupt memory, or execute arbitrary machine code in the context of the affected...

Microsoft Office Malformed Drawing Object Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing a victim into opening a malicious Office file. Successful exploits will allow attackers to execute arbitrary code in the context of the currently logged-in user. Failed...

Buffer overflow

Buffer overflow in the Apple Minimal SLP v2 Service Agent slpd in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field...

CVE-2007-0355

Buffer overflow in the Apple Minimal SLP v2 Service Agent slpd in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field...

CVE-2006-6168

tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email."...

CVE-2006-6168

tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email."...

DEBIAN-CVE-2006-4565

Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."...