CVE-2007-3979

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2007-3979

CVE-2007-3979 affects BlogSite Professional (aka Blog System) 1.x. The vulnerability is a SQL injection in index.php via the news_id parameter , allowing remote attackers to execute arbitrary SQL commands. This is a straightforward input-injection flaw in the web application layer that leads to p...

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite ------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url:...

Zenturi NixonMyPrograms Class (sasatl.dll v. 1.5.0.531) Remote BoF

Exploit for unknown platform in category remote exploits ================================================================== Zenturi NixonMyPrograms Class sasatl.dll v. 1.5.0.531 Remote BoF ==================================================================...

Zenturi NixonMyPrograms Class 'sasatl.dll 1.5.0.531' - Remote Buffer Overflow

----------------------------------------------------------------------------- Zenturi NixonMyPrograms Class sasatl.dll v. 1.5.0.531 "Scan" Method Remote Buffer Overflow Exploit Heap Spray Technique url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg...

ddaa-insecure.txt

--------------------------------------------------------------------------------------- Data Dynamics ActiveBar ActiveX Control actbar3.ocx url: http://www.datadynamics.com/default.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for...

Microsoft Security Bulletin MS07-041 - Important Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution (939373)

Microsoft Security Bulletin MS07-041 - Important Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution 939373 Published: July 10, 2007 Version: 1.0 General Information Executive Summary This important security update resolves a privately reported vulnerability...

Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------ bChilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0...

HP Digital Imaging hpqvwocx.dll 2.1.0.556 - SaveToFile() File Write

HP Digital Imaging hpqvwocx.dll 2.1.0.556 - SaveToFile File Write ------------------------------------------------------------------------------- HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 "SaveToFile" Insecure Method url: http://www.hp.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

HP Instant Support - Driver Check Remote Buffer Overflow (PoC)

---------------------------------------------------------------------------------- HP Instant Support - Driver Check Remote Buffer Overflow Exploit author: Carlo Di Dato aka shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP Professional SP2 full patch...

HP Instant Support (Driver Check) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ==================================================================== HP Instant Support Driver Check Remote Buffer Overflow Exploit PoC ====================================================================...

hpinstat-overflow.txt

---------------------------------------------------------------------------------- HP Instant Support - Driver Check Remote Buffer Overflow Exploit author: Carlo Di Dato aka shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP Professional SP2 full patch...

Microsoft Internet Explorer Document.Domain跨域同源覆盖漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在绕过同源策略问题，远程攻击者可以利用漏洞访问其他目标域或者进行内容伪造攻击。 攻击者可以通过修改document.domain中的值，构建恶意WEB页，诱使用户访问来触发。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Citrix ICA Client for Windows 4.0...

NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll 2.6.2.157 - File Write

NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll 2.6.2.157 - File Write ------------------------------------------------------------------------------------------ NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 "CreateFile"Insecure Method url: http://www.nctsoft.com/products/NCTAudioEditor2/...

NetClassifieds - SQL Injection / Cross-Site Scripting / Full Path

Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/30/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------------------- bZenturi ProgramChecker...

Zenturi ProgramChecker - ActiveX 'sasatl.dll' Remote Buffer Overflow

------------------------------------------------------------------------ Zenturi ProgramChecker ActiveX sasatl.dll Remote Buffer Overflow PoC url: http://www.programchecker.com/activeintro.aspx original advisory: http://secunia.com/advisories/25473/ Will Dormann, CERT/CC, is credited with the...

EDraw Office Viewer Component Unsafe Method Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/28/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------- bEDraw Office Viewer...

LeadTools Raster ISIS Object 'LTRIS14e.DLL 14.5.0.44' - Remote Buffer Overflow (PoC)

2007/05/27 ----------------------------------------------------------------------------------------- LeadTools Raster ISIS Object LTRIS14e.DLL v. 14.5.0.44 Remote Buffer Overflow Exploit url: http://www.leadtools.com/ price: eheheh, take a look at thier site : author: shinnai mail:...

Zenturi ProgramChecker - ActiveX File Download/Overwrite

2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site:...