Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)

No description provided by source. !/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' repeats 101 times, "DCBA center" 2007-07-10 21:15:34.573 Cor...

Core Image Fun House 2.0 (OSX) - Arbitrary Code Execution (PoC)

!/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' , "DCBA center" 2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0:...

The Microsoft Office Snapshot Viewer ActiveX Exploit-vulnerability warning-the black bar safety net

Source: http://hi.baidu.com/cloie/ Today someone made a Snapshot Viewer of the ADV, combined with the CERT that dranzer. pdf, to reproduce the vulnerability EXP: the var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/"Start"菜单 / 程序 / 启动 /test.exe'; obj...

Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a 1 location or 2 location.href property, related to incorrect determination of t...

Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

CVE-2008-2948

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

CVE-2008-2949

CVE-2008-2949 describes a cross-domain vulnerability in Internet Explorer 6 and 7 where the attacker could manipulate the window.location object using a String to observe events across domains. The root cause is the incorrect determination of the origin of web script, enabling potential viewing o...

Buffer overflow

Buffer overflow in the DXTTextOutEffect ActiveX control aka the Text-Effect DXT Filter, as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value...

CVE-2008-2910

Buffer overflow in the DXTTextOutEffect ActiveX control aka the Text-Effect DXT Filter, as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value...

CVE-2008-2910

The CVE-2008-2910 issue concerns muvee autoProducer (versions 6.0 and 6.1) containing the DXTTextOutEffect ActiveX control (TextOut.dll 6.0.18.1 and mvtextout.dll). The root cause is a buffer overflow in the DXTTextOutEffect that occurs when a long FontSetting property value is processed, enablin...

Heap overflow

Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long SRC property value. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

GLSA-200806-06 : Evolution: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-06 Evolution: User-assisted execution of arbitrary code Alin Rad Pop Secunia Research reported two vulnerabilities in Evolution: A boundary error exists when parsing overly long timezone strings contained within iCalendar...

Unfixed XSS vulnerability at www.bigislandhawaiiproperty.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.bigislandhawaiiproperty.com, which at the time of submission ranked 7747284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008...

Heap overflow

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

DEBIAN-CVE-2008-1109

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

RHEL 5 : evolution (RHSA-2008:0514)

Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring, contact...

Stack overflow

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...

CVE-2008-0955

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...

GLSA-200805-21 : Roundup: Permission bypass

The remote host is affected by the vulnerability described in GLSA-200805-21 Roundup: Permission bypass Philipp Gortan reported that the xml-rpc server in Roundup does not check property permissions CVE-2008-1475. Furthermore, Roland Meister discovered multiple vulnerabilities caused by unspecifi...

Unfixed XSS vulnerability at www.propertybangalore.co.in

Security researcher rhys, has submitted on 23/05/2008 a cross-site-scripting XSS vulnerability affecting www.propertybangalore.co.in, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...