Macromedia Shockwave 10 'SwDir.dll' Internet Explorer 7 - Denial of Service

argCount = 1 arg1=String1000000, "A" ShockW.swURL = arg1 milw0rm.com 2006-12-29...

RealPlayer 10.5 ierpplug.dll Internet Explorer Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================================== RealPlayer 10.5 ierpplug.dll Internet Explorer Denial of Service Exploit ========================================================================...

RealPlayer 10.5 - ActiveX Control Denial of Service

RealPlayer 10.5 - ActiveX Control Denial of Service RealPlayer.Initialize"AA","defaultV" milw0rm.com 2006-12-20...

RealPlayer 10.5 (ActiveX Control) Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== RealPlayer 10.5 ActiveX Control Denial of Service Exploit =========================================================== RealPlayer.Initialize"AA","defaultV" 0day.today 2018-01-05...

Microsoft Visual Studio WmiScriptUtils.dll跨域脚本漏洞

Microsoft Visual Studio是一套微软公司的开发工具套件系列产品。 Microsoft Visual Studio WMIScriptUtils.WMIObjectBroker2 ActiveX控件处理存在问题，远程攻击者可利用漏洞以应用程序进程权限执行任意指令。 Microsoft WMIScriptUtils.WMIObjectBroker2 ActiveX控件存在安全问题，攻击者可以构建恶意页面，诱使用户访问，导致绕过Internet域安全限制，并实例化其他危险的对象，造成 任意指令执行。 Visual Studio 2005 Standard Edition...

Microsoft Windows Manifest File Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability because the software fails to properly process and manage file manifests. An attacker may exploit this issue to manipulate file manifests to elevate user privileges. Successful exploits will result in the complet...

CVE-2006-6446

SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the D parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6446

SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the D parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6446

CVE-2006-6446 describes an SQL injection vulnerability in index.php of iWare Professional 5.0.4, triggered when magic_quotes_gpc is disabled. An attacker can remotely execute arbitrary SQL commands via the D parameter. The entry notes the provenance as third‑party information and provides CVSS 2....

Microsoft Windows Help存在多个漏洞

Microsoft Help WINHLP32.EXE处理.hlp文件存在多个远程代码执行和拒绝服务问题。 攻击者可以在WEB页上防止恶意帮助文件，或者通过EMAIL附件形式发送，诱使用户打开来触发此漏洞，成功利用此漏洞可以以进程权限执行任意指令。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition...

Microsoft Windows图形设备接口附加库拒绝服务漏洞

Microsoft Windows是一款流行的操作系统。 Microsoft Windows图形社诶接口附加库处理畸形图象文件存在问题，远程攻击者可以利用漏洞可对系统进行拒绝服务攻击。 问题存在于Windows GDI+库'gdiplus.dll'中，构建恶意的图象文件，诱使用户打开，可导致系统崩溃。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP...

CVE-2006-6290

Multiple stack-based buffer overflows in the IMAP module MEIMAPS.EXE in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.30 and 2.0 through 2.33 allow remote authenticated users to cause a denial of service crash or possibly execute arbitrary...

CVE-2006-6291

CVE-2006-6291 describes a stack overflow in MailEnable’s IMAP module (MEIMAPS.EXE) affecting MailEnable Professional 1.6–1.83 and 2.0–2.33, and MailEnable Enterprise 1.1–1.40 and 2.0–2.33. An authenticated remote user could crash the service by sending a long argument containing * and ? character...

CVE-2006-6291

Stack overflow in the IMAP module MEIMAPS.EXE in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service crash via a long argument containing asterisk and ?...

BBS E-Market Professional (Path Disclosure/Include) Multiple Vulns

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV06$2004 --------------------------------------------------------------------------- Multiple vulnerabilities 1n BBS E-Market Professional...

BBS E-Market Professional - Full Path Disclosure File Inclusion

BBS E-Market Professional - Full Path Disclosure File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV06$2004 --------------------------------------------------------------------------- Multiple vulnerabilities 1n BBS E-Market Professional...

MailEnable 2.x - SMTP NTLM Multiple Authentication Vulnerabilities

MailEnable 2.x - SMTP NTLM Multiple Authentication Vulnerabilities source: https://www.securityfocus.com/bid/20290/info MailEnable is prone to multiple remote vulnerabilities. These issues arise in the SMTP server during NTLM authentication and may facilitate arbitrary code execution or...

MailEnable 2.x - SMTP NTLM Multiple Authentication Vulnerabilities

source: https://www.securityfocus.com/bid/20290/info MailEnable is prone to multiple remote vulnerabilities. These issues arise in the SMTP server during NTLM authentication and may facilitate arbitrary code execution or denial-of-service conditions. MailEnable Professional 2.0 and MailEnable...

MailEnable IMAP服务未明缓冲区溢出漏洞

MailEnable是一款流行的邮件服务程序. MailEnable IMAP服务存在未明缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 MailEnable MailEnable Professional 2.0-2.32 MailEnable MailEnable Professional 1.9-1.82 MailEnable MailEnable Enterprise Edition 2.0-2.32 MailEnable MailEnable Enterprise Edition 1.1-1.30 补丁下载：...

Business Objects Crystal Reports XI Professional文件处理缓冲区溢出漏洞

Business Objects Crystal Reports XI Professional是专业的水晶报表系列。 Business Objects Crystal Reports XI Professional处理.RPT文件存在问题，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供。 Business Objects Crystal Reports XI Professional http://www.businessobjects.com/...