Design/Logic Flaw

The tblinf32.dll aka vstlbinf.dll ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFil...

CVE-2007-4336

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 DirectTransform FlashPix ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value...

Buffer overflow

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 DirectTransform FlashPix ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value...

CVE-2007-4336

The CVE-2007-4336 entry concerns a buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control, packaged in DXTLIPI.DLL version 6.0.2.827 within Microsoft DirectX Media 6.0 SDK. The vulnerability arises from processing a long SourceU...

CVE-2007-3992

SQL injection vulnerability in virlogin.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the Username parameter is covered by CVE-2006-6029. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-3992

SQL injection vulnerability in virlogin.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the Username parameter is covered by CVE-2006-6029. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-3992

Summary (CVE-2007-3992): SQL injection vulnerability in the web component vir_login.asp of iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter (the related Username issue is tracked under CVE-2006-6029). Documented impact is partial confident...

propertypro-sql.txt

Aria-Security Team Property Pro http://isystems.7host.com/isystems/ URL/path/admin Use These As your login Admin 'or'1'='1'or'1'='1 Discovered By The-0utl4w http://aria-security.net http://outlaw.aria-security.info Personal Blog...

[Aria-Security] Munch Pro Remote Login ByPass

Aria-Security Team Property Pro http://isystems.7host.com/isystems/ URL/path/admin Use These As your login Admin 'or'1'='1'or'1'='1 Discovered By The-0utl4w http://aria-security.net http://outlaw.aria-security.info Personal Blog...

[Aria-Security] Property Pro Remote Login ByPass

Aria-Security Team Property Pro http://isystems.7host.com/isystems/ URL/path/admin OR URL/path/virLogin.asp Use These As your login Admin 'or'1'='1'or'1'='1 Discovered By The-0utl4w http://aria-security.net http://outlaw.aria-security.info Personal Blog...

CVE-2007-3579

PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allows remote attackers to inject arbitrary web script...

Buffer overflow

Multiple buffer overflows in the AMX NetLinx VNC AmxVnc ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary code via long 1 Host, 2 Password, or 3 LogFile property values...

CVE-2007-3536

Multiple buffer overflows in the AMX NetLinx VNC AmxVnc ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary code via long 1 Host, 2 Password, or 3 LogFile property values...

AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit

Exploit for unknown platform in category remote exploits =============================================================== AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 BoF Exploit =============================================================== script language='...

AMX Corp. VNC ActiveX Control - 'AmxVnc.dll 1.0.13.0' Remote Buffer Overflow

'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%42%41%30%42%41%58%38%41%42%50%75%68%69%39%6c%38%68%31%54%43%30%47%70%57%70%4...

CVE-2007-3167

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

Stack overflow

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

CVE-2007-3167

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

Buffer overflow

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

Buffer overflow

Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4, allows remote attackers to execute arbitrary code via a long URL property value...