DSquare Exploit Pack: D2SEC_VMPEGASUS

Name| d2secvmpegasus ---|--- CVE| CVE-2007-5360 Exploit Pack| D2ExploitPack Description| VMware ESX Server OpenPegasus overflow Notes|...

CVE-2008-0098

Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: As of 20080103, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE...

CVE-2008-0098

Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: As of 20080103, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE...

[HSC] Snitz Forums Multiple Vulnerabilities

HSC Snitz Forums Multiple Vulnerabilities Snitz Forums Default Database installation allows remote users to download the database which contains critical information. As a result, an attacker exploiting this vulnerability will be able to obtain detailed information. An attacker may leverage xss...

CVE-2007-6525

Unspecified vulnerability in eClient in IBM DB2 Content Manager CM Toolkit 8.3 before fix pack 7 for z/OS has unknown impact and attack vectors, related to "scripting."...

DSquare Exploit Pack: D2SEC_XUPLOAD

Name| d2secxupload ---|--- CVE| CVE-2007-6530 Exploit Pack| D2ExploitPack Description| Persits Software XUpload ActiveX Stack Overflow Notes|...

IPortalX Forums Cross-Site Scripting Vulnerability

HSC IPortalX Forums Cross-Site Scripting Vulnerability IPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2007-6509

Unspecified vulnerability in Appian Enterprise Business Process Management BPM Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp...

IBM AIX 5300-06 Service Pack 4和5300-07技术级别修正多个未明漏洞

BUGTRAQ ID: 26825 CNCAN ID:CNCAN-2007121205 IBM AIX是一款商业性质的操作系统。 IBM AIX 5300-06 Service Pack 4和5300-07 Technology Level修正了多个安全问题，目前没有详细漏洞细节提供。 IBM AIX 5.3 安装和使用IBM AIX 5300-06 Service Pack 4和5300-07 Technology Level：...

DSquare Exploit Pack: D2SEC_HPINFO

Name| d2sechpinfo ---|--- CVE| CVE-2007-6331 Exploit Pack| D2ExploitPack Description| HP Info Center HPInfoDLL.DLL ActiveX Arbitrary Code Execution Vulnerability Notes|...

SuSE 10 Security Update : cron (ZYPP Patch Number 3831)

By setting hard links to /etc/crontab users were able to prevent cron from running scheduled jobs. CVE-2007-1856 A re-emerged symlink bug allowed users to edit the crontab of other users. CVE-2005-1038 This is a reissue of the SLES10 update after Service Pack 1, since Service Pack 1 merge lost so...

Immunity Canvas: MS07_066

Name| ms07066 ---|--- CVE| CVE-2007-5350 Exploit Pack| CANVAS Description| Microsoft Vista ALPC Dangling Pointer Overwrite Notes| References: www.microsoft.com/technet/security/bulletin/ms07-066.mspx CVE Name: CVE-2007-5350 VENDOR: Microsoft MSADV: MS07-066 Date public: 12/11/07 CVE Url:...

Microsoft Security Bulletin MS07-069 - Critical Cumulative Security Update for Internet Explorer (942615)

Microsoft Security Bulletin MS07-069 - Critical Cumulative Security Update for Internet Explorer 942615 Published: December 11, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves four privately reported vulnerabilities. The most serious security impact...

bitweaver-sqlxss.txt

HSC Bitweaver XSS & SQL Injection Vulnerability Bitweaver is an open source content management system. Its speed and power are ideal for large-scale community websites and corporate applications, but it is simple enough for non-technical small site users to set up and administrate. It comes fully...

Immunity Canvas: OOO_230

Name| ooo230 ---|--- CVE| CVE-2007-4575 Exploit Pack| CANVAS Description| OpenOffice Database 2.3.0 Static Java Execution Notes| CVE Name: CVE-2007-4575 VENDOR: OpenOffice Repeatability: Infinite client side - no crash CVS URL: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4575 Date...

Immunity Canvas: QT73_RTSP

Name| qt73rtsp ---|--- CVE| CVE-2007-6166 Exploit Pack| CANVAS Description| QuickTime 7.3 RTSP Buffer Overflow Notes| CVE Name: CVE-2007-6166 VENDOR: Apple Repeatability: Infinite client side - no crash CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6166 Date public: 11/23/20...

mps-insertion.txt

HSCMySpace Scripts - Poll Creator JavaScript Injection Vulnerability Our MySpace Poll Creator script is the ultimate addition to your MySpace resource site. The script enables your user to quickly and easily create a poll that they can post to profile or bulletin to all their friends. Everyone...

gwextranet-multi.txt

HSC GWExtranet Script Injections & Privilege Escalation Vulnerability Attackers may exploit this issue via a web client. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker...

MySpace Scripts - Poll Creator JavaScript Injection Vulnerability

HSCMySpace Scripts - Poll Creator JavaScript Injection Vulnerability Our MySpace Poll Creator script is the ultimate addition to your MySpace resource site. The script enables your user to quickly and easily create a poll that they can post to profile or bulletin to all their friends. Everyone...

PT-2007-6957 · Rigs Of Rods Team · Rigs Of Rods

Name of the Vulnerable Software and Affected Versions: Rigs of Rods RoR versions prior to 0.33d SP1 Description: The issue is related to a buffer overflow in the Sequencer::queueMessage function, which can be triggered by sending a nickname and then a vehicle name in a MSG2 USE VEHICLE message wi...