CVE-2007-3167

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

CVE-2007-3167

CVE-2007-3167 describes a stack-based buffer overflow in the Vivotek Motion JPEG ActiveX control (MjpegControl) within MjpegDecoder.dll version 2.0.0.13. The vulnerability arises from handling a very long PtzUrl property value, which can overflow a stack buffer and allow a remote attacker to exec...

CVE-2007-3167: Undefined Security Weakness

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

Vivotek Motion Jpeg Control (MjpegDecoder.dll 2.0.0.13) Remote Exploit

No description provided by source. !-- IE 6 / Vivotek Motion Jpeg Control MjpegDecoder.dll 2.0.0.13 remote buffer overflow exploit / win 2k sp4 en version by rgod site: retrogod.altervista.org software site: http://www.vivotek.com/ "VIVOTEK INC. is a leading IP surveillance camera and Network...

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow ' metasploit one, alpha2... add a user 'sun' with pass 'tzu' FRAGMENT =...

Vivotek Motion Jpeg Control - 'MjpegDecoder.dll 2.0.0.13' Remote Overflow

' metasploit one, alpha2... add a user 'sun' with pass 'tzu' FRAGMENT =...

CVE-2007-0323: Undefined Security Weakness

Buffer overflow in the SetLanguage function in Research In Motion RIM TeamOn Import Object ActiveX control TOImport.dll allows remote attackers to execute arbitrary code via unspecified vectors...

Research In Motion TeamOn Import Object ActiveX control buffer overflow

Overview The Research In Motion TeamOn Import Object ActiveX control contains a buffer overflow, which could allow an attacker to execute arbitrary code on a vulnerable system. Description The Research In Motion TeamOn Import Object is an ActiveX control, which is provided by the file TOImport.dl...

Pixel Motion Config.PHP远程命令执行漏洞

Pixel Motion是一款基于PHP的web应用程序。 Pixel Motion不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于‘config. php’脚本对用户提交的web参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Pixel Motion Pixel Motion 2.1.1 目前没有解决方案提供，请关注以下链接： http://www.pixelmotion.org/ !/usr/bin/perl Affected.scr..: Blog Pixel Motion V2.1.1...

CVE-2006-5489: Undefined Security Weakness

Research in Motion RIM BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service application hang via a deleted recurrent meeting instance when changing the attendee's calendar meeting time...

CVE-2006-5085

Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...

CVE-2006-5086

Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to inserebase.php with modified 1 login and 2 pass parameters. NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not...

CVE-2006-5085

Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...

CVE-2006-5086

Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to inserebase.php with modified 1 login and 2 pass parameters. NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not...

CVE-2006-5085

CVE-2006-5085 affects Blog Pixel Motion 2.1.1. The vulnerability is a static code injection in config.php where the nom_blog parameter is injected into include/variables.php, enabling remote attackers to execute arbitrary PHP code. The available connected documents confirm the affected software v...

CVE-2006-5086

Blog Pixel Motion 2.1.1 is affected. The vulnerability allows remote attackers to change the admin username and password via a direct request to insere_base.php using modified (1) login and (2) pass parameters. The original researcher claimed SQL injection, but the report notes that this is not S...

CVE-2006-5085: Undefined Security Weakness

Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...

CVE-2006-5086: Undefined Security Weakness

Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to inserebase.php with modified 1 login and 2 pass parameters. NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not...

Blog Pixel Motion 2.1.1 PHP Code Execution / Create Admin Exploit

Exploit for unknown platform in category web applications ================================================================= Blog Pixel Motion 2.1.1 PHP Code Execution / Create Admin Exploit ================================================================= !/usr/bin/perl Affected.scr..: Blog Pixel...

Blog Pixel Motion 2.1.1 PHP Code Execution / Create Admin Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: Blog Pixel Motion V2.1.1 Poc.ID........: 12060927 Type..........: PHP Code Execution stripslashes, SQL Injection urldecode Risk.level....: High Vendor.Status.: Unpatched Src.download..: www.pixelmotion.org/zip/blog2.1.zip...