HiveMaker Professional 1.0.2 - cid SQL Injection

HiveMaker Professional 1.0.2 - cid SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV96$2008 ----------------------------------------------------------------------------------------- ECHOADV96$2008 HiveMaker Professional = 1.0.2 cid Sql...

HiveMaker Professional 1.0.2 - 'cid' SQL Injection

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV96$2008 ----------------------------------------------------------------------------------------- ECHOADV96$2008 HiveMaker Professional = 1.0.2 cid Sql Injection Vulnerability...

Shopping Basket Professional vulnerable to OS command injection

Overview Shopping Basket Professional provided by CGI RESCUE contains a vulnerability which allows a remote attacker to inject an arbitrary OS command as it does not properly validate input data. Impact A remote attacker could execute an arbitrary OS command on the server where Shopping Basket...

Malformed Acrobat Distiller 8 .joboptions

===================================================================== = Malformed Acrobat Distiller 8 .joboptions = = Vendor Website: = http://www.adobe.com = = Affected Version: = Adobe Acrobat Reader, Acrobat Professional 7, Acrobat Professional 8 = = Vendor Notified - February 2007 = Public...

CVE-2008-2042

The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method that allows remote attackers to execute arbitrary commands or trigger a buffer overflow . This occurs when a crafted PDF file invokes app.checkForUpdate with a malicious callback function. This vu...

Adobe Acrobat Professional Javascript For PDF Security Feature Bypass and Memory Corruption Vulnerabilities

Adobe Acrobat Professional Javascript For PDF Security Feature Bypass and Memory Corruption Vulnerabilities by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: Two critical vulnerabilities exist in the javascript API of Adobe Acrobat Professional 7. A remote attacker who successful...

CVE-2008-2042: Improper Input Validation

The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execute arbitrary commands or trigger a buffer overflow via a crafted PDF file that invokes app.checkForUpdate with a malicious callback function...

CVE-2008-1436: Undefined Security Weakness

Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the 1 NetworkService and 2 LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service...

CVE-2008-1793

Multiple cross-site scripting XSS vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the 1 AdNum and 2 Department parameters. NOTE: the provenance of this information is...

CVE-2008-1793: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the 1 AdNum and 2 Department parameters. NOTE: the provenance of this information is...

Adobe Flash Player Multimedia File Remote Buffer Overflow Vulnerability

Description Adobe Flash Player is prone to a remote buffer-overflow vulnerability when handling multimedia files with certain tags. An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in...

CVE-2008-1625: Undefined Security Weakness

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests...

CVE-2008-1201: Improper Control of Generation of Code

Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file...

MailEnable Pro/Ent <= 3.13 (Fetch) post-auth Remote BOF Exploit

No description provided by source. !/usr/bin/perl ================================================================= MailEnable Professional = 3.13 "FETCH" post-auth buffer overflow ================================================================= Bind Shell POC Exploit for Win2K SP4 pro English...

MailEnable ProfessionalEnterprise 3.13 - Fetch (Authenticated) Remote Buffer Overflow

MailEnable ProfessionalEnterprise 3.13 - Fetch Authenticated Remote Buffer Overflow !/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use...

mailenablefetch-overflow.txt

!/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use IO::Socket; print "\n MailEnable Professional 3.13 imap remote exploit"; print "\n exploit b...

MailEnable Professional/Enterprise 3.13 - 'Fetch' (Authenticated) Remote Buffer Overflow

!/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use IO::Socket; print "\n MailEnable Professional 3.13 imap remote exploit"; print "\n exploit b...

CVE-2008-1277

The IMAP service MEIMAPS.exe in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service crash via 1 SEARCH and 2 APPEND commands without required arguments, which triggers a NULL pointer dereference...

CVE-2008-1276: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the IMAP service MEIMAPS.EXE in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the 1 FETCH, 2 EXAMINE, and 3 UNSUBSCRIBE commands...

CVE-2008-1277: Improper Input Validation

The IMAP service MEIMAPS.exe in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service crash via 1 SEARCH and 2 APPEND commands without required arguments, which triggers a NULL pointer dereference...