9592 matches found
Security Update for the 2007 Microsoft Office System (KB947801)
A security vulnerability exists in the Compatibility Pack for the 2007 Office System that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...
DSquare Exploit Pack: D2SEC_JAVAWS
Name| d2secjavaws ---|--- CVE| CVE-2008-1190 Exploit Pack| D2ExploitPack Description| Sun Java Web Start Untrusted Application Vulnerability Notes|...
Vulnerability in Invision Power Board
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости причём persistent XSS в Invision Power Board. Из-за отсутствия защиты от исполнения JavaScript кода из flash, при включенной поддержке флеша в сообщениях, атакующий может внедрить ссылку на специальный флеш-файл в...
Immunity Canvas: PODCASTGEN_INCLUDE
Name| podcastgeninclude ---|--- CVE| CVE-2008-1124 Exploit Pack| CANVAS Description| Podcast Generator = 1.0 BETA 2 remote file include Notes| CVE Name: CVE-2008-1124 VENDOR: podcastgen Repeatability: Infinite References: http://www.securityfocus.com/bid/28038 CVE Url:...
DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability
Title ----- DDIVRT-2008-10 PacketTrap PT360 Tool Suite TFTP Arbitrary File Access Severity -------- High Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: princeofnigeria and r@b13$ Date Discovered --------------- 1/29/2008 Vulnerability Description...
Immunity Canvas: PHPQLADMIN_INCLUDE
Name| phpqladmininclude ---|--- CVE| CVE-2008-1067 Exploit Pack| CANVAS Description| phpQLAdmin 2.2.7 Remote File Include Notes| CVE Name: CVE-2008-1067 VENDOR: phpQLAdmin.com Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/phpqladmin-rfi.txt.html CVE Url:...
Immunity Canvas: WPSNIPLETS_RFI
Name| wpsnipletsrfi ---|--- CVE| CVE-2008-1059 Exploit Pack| CANVAS Description| WordPress Plugin Sniplets 1.1.2 Remote File Include Notes| CVE Name: CVE-2008-1059 VENDOR: WordPress Repeatability: Infinite CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1059 References: None CVSS: 7.5...
Immunity Canvas: WPSNIPLETS_EXEC
Name| wpsnipletsexec ---|--- CVE| CVE-2008-1060 Exploit Pack| CANVAS Description| Wordpress Plugin Sniplets 1.1.2 Remote Code Execution exploict Notes| CVE Name: CVE-2008-1060 VENDOR: WordPress Repeatability: Infinite References: http://seclists.org/bugtraq/2008/Feb/0402.html CVE Url:...
Immunity Canvas: QUINSONNAS_INCLUDE
Name| quinsonnasinclude ---|--- CVE| CVE-2008-1046 Exploit Pack| CANVAS Description| Quinsonnas Mail Checker 1.55 Remote File Inclusion Notes| CVE Name: CVE-2008-1046 VENDOR: Quinsonnas Repeatability: Infinite References: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1046 CVE Url:...
DSquare Exploit Pack: D2SEC_IPRINT
Name| d2seciprint ---|--- CVE| CVE-2008-0935 Exploit Pack| D2ExploitPack Description| Novell iPrint Client ienipp.ocx ActiveX Stack Overflow Notes|...
CVE-2008-0870
BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session...
Immunity Canvas: LOOKSTRIKE_INCLUDE
Name| lookstrikeinclude ---|--- CVE| CVE-2008-0803 Exploit Pack| CANVAS Description| LookStrike Lan Manager v0.9 Remote File Include Notes| CVE Name: CVE-2008-0803 VENDOR: LookStrike Repeatability: Infinite References: http://securityreason.com/exploitalert/3398 CVE Url:...
Immunity Canvas: NWSPOOL_C
Name| nwspoolc ---|--- CVE| CVE-2008-0639 Exploit Pack| CANVAS Description| Novell Netware Client for Windows Notes| CVE Name: CVE-2008-0639 VENDOR: Novell Notes: Use the setthreadtoken module to revert back to LocalSystem once the exploitation is successful Platforms Tested: References:...
Microsoft Office 2003 - .wps Local Stack Overflow (MS08-011)
Microsoft Office 2003 - .wps Local Stack Overflow MS08-011 / Copyright c 2008 chujwamwdupe - pumpernikiel.c one day in teletubby land... an email from idefense: "Unfortunately, Microsoft has refused to credit you using the name you requested." ...what's wrong with 'chujwamwdupe', eh? Description:...
Immunity Canvas: JOOMLAMOSDIRECTORY_INCLUDE
Name| joomlamosdirectoryinclude ---|--- CVE| CVE-2008-0690 Exploit Pack| CANVAS Description| Joomla mosDirectory Component Remote File Inclusion Notes| CVE Name: CVE-2008-0690 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/3098 CVE Url:...
DSquare Exploit Pack: D2SEC_MYSPACE
Name| d2secmyspace ---|--- CVE| CVE-2008-0659 Exploit Pack| D2ExploitPack Description| MySpace Uploader MySpaceUploader.ocx ActiveX Stack Overflow Notes|...
DSquare Exploit Pack: D2SEC_FACEBOOK
Name| d2secfacebook ---|--- CVE| CVE-2008-0660 Exploit Pack| D2ExploitPack Description| Facebook Photo Uploader 4 ImageUploader4.1.ocx ActiveX Stack Overflow Notes|...
Directory traversal
Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...
