7979 matches found
Локальный DoS против Windows NT (mutex)
Пользователь может захватить все mutex-объекты, после чего другие приложения не смогут работать с сетью...
Borland/Inprise Interbase SQL database server contains backdoor superuser account with known password
Overview Description Interbase is an open source database package that is distributed by Borland/Inprise. The server contains a compiled-in backdoor account with a known password.In the following interbase code, references are made about a LOCKSMITH user: ./jrd/dyn.e ./jrd/isc.c ./jrd/jrd.c...
Утечка информации в Novell Netware (Object enumeration)
Сервера Netware с поддержкой TCP/IP сообщают информацию об объектах NDS через анонимное соединение TCP/524...
Microsoft Virtual Machine 2000/3100/3200/3300 Series - 'com.ms.activeX.ActiveXComponent' Arbitrary Program Execution
source: https://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsoft Internet Explorer or Outlook. Th...
Пользователь может обойти Inherited Rights Filters (IRF) в Novell Netware
Права на избранные свойства Selected Property Rights в Novell Netware могут наследоваться, но не могут быть блокированы с помощью IRF. Таким образом пользователь, имеющий права на родительский объект может овладеть дочерним объектом NDS, установив права на родительский объект и объявив их...
Очередная уязвимость IE при работе с объектами Office
Создавая ActiveX-объекты для файлов .xla, .ppt, .mdb можно получить доступ к методу SaveAs, сохранить любой файл локально и запустить его на выполнение...
wordpad-ie.txt
Georgi Guninski security advisory 7, 2000 Wordpad vulnerability, exploitable also in IE for Win9x Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for an...
ie50.xml.txt
Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of the information or functionality provided by this...
CVE-1999-1204
Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...
PT-2010-5675 · Gnu +1 · Glibc +1
Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.11.3 glibc versions 2.12.x prior to 2.12.2 Description: The issue is related to the improper restriction of the use of the LD AUDIT environment variable to reference dynamic shared objects DSOs as audit objects. This...
Unguarded calls to __toString() when nesting an object into an array
More info at https://symfony.com/blog/cve-2024-51754-unguarded-calls-to-tostring-in-a-sandbox-when-an-object-is-in-an-array-or-an-argument-list...
Security Update for Windows Server 2003 (KB901017)
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...
Security Update for Windows Server 2003 x64 Edition (KB901017)
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...
Security Update for Windows 2000 (KB901017)
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...
Security Update for Windows Server 2003 64-bit Itanium Edition (KB901017)
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...
Sandbox property allowlist bypass via the `column` filter (array_column on objects)
More info at https://symfony.com/cve-2026-46635...
Security update 1970-01-01
...
EOL Detectoid for Windows 10 1607:Server generated on 02-07-2025
This detectoid will be used for to select applicable ediction of a product ServerEssentialsA,ServerDatacenter,ServerStandard,ServerHyper for GDR...
Security Update for Windows XP (KB901017)
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...