CVE-2004-2727

MailEnable Professional (MEHTTPS/HTTPMail) versions 1.5–1.7 are affected by a heap/overflow issue triggered by an oversized HTTP GET request to the HTTPMail service, causing a denial of service (service crash). OpenVAS notes potential for arbitrary code execution, and some sources indicate a vend...

CVE-2004-2727: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in MEHTTPS HTTPMail of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service application crash via a long HTTP GET request...

CVE-2004-2726: Undefined Security Weakness

HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denial of service null dereference and application crash. NOTE: This is a different vulnerability than CVE-2005-1348...

Microsoft Visual FoxPro 6.0 - 'FPOLE.OCX' Arbitrary Command Execution

----------------------------------------------------------------------------- Microsoft Visual FoxPro 6.0 FPOLE.OCX Arbitrary Command Execution url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bPegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite/b url:...

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion ----------------------------------------------------------------------------- Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

Pegasus Imaging ImagXpress 8.0 - Arbitrary File Overwrite

----------------------------------------------------------------------------- Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

EDraw Office Viewer Component 5.3 FtpDownloadFile() Remote BoF

Exploit for unknown platform in category dos / poc ============================================================== EDraw Office Viewer Component 5.3 FtpDownloadFile Remote BoF ==============================================================...

EB Design Pty Ltd (EBCRYPT.DLL v.2.0) Multiple Remote Vulnerabilites

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bEB Design Pty Ltd EBCRYPT.DLL v.2.0 Multiple Remote Vulnerabilites/b url:...

Microsoft MFC库CFileFind::FindFile缓冲区溢出漏洞

Microsoft Windows是一款流行的操作系统。 Microsoft Windows包含的MFC库处理CFileFind::FindFile方法存在缓冲区溢出，远程攻击者可以利用漏洞以链接此库的应用程序权限执行任意指令。 问题存在于MFC库包含的FindFile函数中，FindFile函数管理垮文件系统文件搜索，可指定文件类型进行搜索。FindFile函数为buffer1分配内存，buffer1用于存储function2的第一个参数，而没有对其大小进行检查。这个数据用于开始一个搜索。...

Yahoo! Messenger 8.1.0.421 - CYFT Object Arbitrary File Download

----------------------------------------------------------------------------- Yahoo! Messenger 8.1.0.421 CYFT Object ft60.dll Arbitrary File Download url: http://download.yahoo.com/dl/msgr8/us/ymsgr8us.exe Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was...

MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit

Exploit for unknown platform in category remote exploits ================================================================= MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit =================================================================...

Microsoft Visual Studio 6.0 (VBTOVSI.DLL 1.0.0.0) File Overwrite Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"---------------------------------------------------------------------------------------------------------...

Microsoft Visual Studio 6.0 - PDWizard.ocx Remote Command Execution

Microsoft Visual Studio 6.0 - PDWizard.ocx Remote Command Execution ------------------------------------------------------------------------------------------------------ Microsoft Visual Studio 6.0 PDWizard PDWizard.ocx url: http://www.microsoft.com author: shinnai mail: shinnaiatautisticidotorg...

msvb-vbto.txt

--------------------------------------------------------------------------------------------------------- Microsoft Visual Studio 6.0 VB To VSI Support Library VBTOVSI.DLL v. 1.0.0.0 Arbitrary File Overwrite url: http://www.microsoft.com author: shinnai mail: shinnaiatautisticidotorg site:...

Microsoft Visual Studio 6.0 - VBTOVSI.dll 1.0.0.0 File Overwrite

Microsoft Visual Studio 6.0 - VBTOVSI.dll 1.0.0.0 File Overwrite --------------------------------------------------------------------------------------------------------- Microsoft Visual Studio 6.0 VB To VSI Support Library VBTOVSI.DLL v. 1.0.0.0 Arbitrary File Overwrite url:...

msvs-pdwiz.txt

------------------------------------------------------------------------------------------------------ Microsoft Visual Studio 6.0 PDWizard PDWizard.ocx url: http://www.microsoft.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educationa...

CVE-2007-4655

Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to 1 list.cgi or 2 list2.cgi...

CVE-2007-4655

The CVE-2007-4655 entry describes a directory traversal vulnerability in CGI RESCUE Shopping Basket Professional (Shopping Basket Pro) with versions 7.51 and earlier. The flaw allows remote attackers to enumerate or read arbitrary files and directories via traversal sequences in unspecified param...

CVE-2007-4655: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to 1 list.cgi or 2 list2.cgi...