2732 matches found
HiveMaker Professional <= 1.0.2 (cid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= HiveMaker Professional = 1.0.2 cid SQL Injection Vulnerability ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / |...
Shopping Basket Professional vulnerable to OS command injection
Overview Shopping Basket Professional provided by CGI RESCUE contains a vulnerability which allows a remote attacker to inject an arbitrary OS command as it does not properly validate input data. Impact A remote attacker could execute an arbitrary OS command on the server where Shopping Basket...
Malformed Acrobat Distiller 8 .joboptions
===================================================================== = Malformed Acrobat Distiller 8 .joboptions = = Vendor Website: = http://www.adobe.com = = Affected Version: = Adobe Acrobat Reader, Acrobat Professional 7, Acrobat Professional 8 = = Vendor Notified - February 2007 = Public...
Adobe Acrobat Professional Javascript For PDF Security Feature Bypass and Memory Corruption Vulnerabilities
Adobe Acrobat Professional Javascript For PDF Security Feature Bypass and Memory Corruption Vulnerabilities by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: Two critical vulnerabilities exist in the javascript API of Adobe Acrobat Professional 7. A remote attacker who successful...
CVE-2008-2042
The CVE-2008-2042 issue affects Adobe Acrobat Professional (7.0.9, possibly 8.1.1) where a vulnerable Javascript API allows a crafted PDF to trigger app.checkForUpdate with a malicious callback, enabling remote arbitrary commands or a memory corruption/overflow. Several security advisories refere...
CVE-2008-1793
Multiple cross-site scripting XSS vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the 1 AdNum and 2 Department parameters. NOTE: the provenance of this information is...
Adobe Flash Player Multimedia File Remote Buffer Overflow Vulnerability
Description Adobe Flash Player is prone to a remote buffer-overflow vulnerability when handling multimedia files with certain tags. An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in...
MailEnable Pro/Ent <= 3.13 (Fetch) post-auth Remote BOF Exploit
No description provided by source. !/usr/bin/perl ================================================================= MailEnable Professional = 3.13 "FETCH" post-auth buffer overflow ================================================================= Bind Shell POC Exploit for Win2K SP4 pro English...
mailenablefetch-overflow.txt
!/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use IO::Socket; print "\n MailEnable Professional 3.13 imap remote exploit"; print "\n exploit b...
MailEnable ProfessionalEnterprise 3.13 - Fetch (Authenticated) Remote Buffer Overflow
MailEnable ProfessionalEnterprise 3.13 - Fetch Authenticated Remote Buffer Overflow !/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use...
MailEnable Professional/Enterprise 3.13 - 'Fetch' (Authenticated) Remote Buffer Overflow
!/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use IO::Socket; print "\n MailEnable Professional 3.13 imap remote exploit"; print "\n exploit b...
CVE-2008-1277
The IMAP service MEIMAPS.exe in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service crash via 1 SEARCH and 2 APPEND commands without required arguments, which triggers a NULL pointer dereference...
cyan soft - Multiple Applications Format String Denial of Service Vulnerabilities
cyan soft - Multiple Applications Format String Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/27728/info Multiple cyan soft products are affected by a format-string vulnerability because they fail to adequately sanitize user-supplied input before passing it as the...
Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability
Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability by [email protected] http://ruder.cdut.net Summary: A design error vulnerability exists in Adobe Reader and Adobe Acrobat Professional. A remote attacker who successfully exploit this vulnerability can control the printer...
Cross site scripting
Cross-site scripting XSS vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2008-0558
Cross-site scripting XSS vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2008-0558
Cross-site scripting XSS vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2008-0558
CVE-2008-0558 describes a cross-site scripting (XSS) vulnerability in Uniwin eCart Professional prior to 2.0.16. The issue allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and potentially other components. The root cause is not explicitly detaile...
Chilkat FTP ActiveX 2.0 - 'ChilkatCert.dll' Insecure Method
======================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Web site : www.chilkatsoft.com=======================================================================Author: darkl0rd E-mail: [email protected] Tested on Windows XP...
chilkatmail-insecure.txt
Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit Site : www.chilkatsoft.com =================================================== Tested on Windows XP Professional SP2 , with Internet Explorer 6 Author : darkl0rd E-Mail : lldarkl0rdllatyahoodotcom SaveLastError Sub lose...