Security Update for Microsoft Visio 2002 (KB955654)

A security vulnerability exists in Microsoft Visio 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Design/Logic Flaw

listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tblstructure.php with a modified table parameter. NOTE: other unspecified pages are also...

Heap overflow

Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field...

CVE-2008-2469

Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field...

CVE-2008-4714

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

Security Update for Microsoft Excel 2002 (KB955464)

A security vulnerability exists in Microsoft Excel 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Excel 2003 (KB955466)

A security vulnerability exists in Microsoft Office Excel 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Excel Viewer (KB955935)

A security vulnerability exists in Microsoft Excel Viewer that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2008-4394

Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the 1 ys-apps/portage, 2 net-mail/fetchmail, 3 app-editors/le...

autodesk-exec.txt

!-- Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ tested against IE6 tested software: Revit Architecture 2009 sp2 Autodesk Design Review 2009 which also comes with Revit dll settings both: RegK...

CVE-2008-4047

CVE-2008-4047 affects Novell Forum (SiteScape Forum) versions 7.0–8.0. It enables remote attackers to execute arbitrary TCL code by supplying a modified URL, as described in the CVE entry (note possible overlap with CVE-2007-6515). The provided documents confirm the existence of a TCL injection v...

Windows Vulnerability in Microsoft Jet Database Engine

The remote host is probably affected by the vulnerability described in CVE-2007-6026 Impact Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 aka Microsoft Jet Engine, as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a...

Security Update for 2007 Microsoft Office System (KB951596)

A security vulnerability exists in the Compatibility Pack for the 2007 Microsoft Office System that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...

Security Update for Microsoft Office PowerPoint 2003 (KB948988)

A security vulnerability exists in Microsoft Office PowerPoint 2003 that could allow arbitrary code to run when a maliciously modified document is opened. This update resolves that vulnerability...

CVE-2008-3203

js/pages/pagesdata.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter...

phpnukeplatinum-exec.txt

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...

Authentication flaw

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

CVE-2008-2682

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

CVE-2008-2682

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...