CVE-2013-7331

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...

CVE-2013-7331

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...

IntegraXor缓冲区溢出漏洞

No description provided by source. import urllib2 import json host="192.168.150.131" port="7131" projectname="1" f="\x41"1000 url = "http://" + host + ":" + port + "/" + projectname + "/" + "res?res/igres.dll/"+f request = urllib2.Requesturl urllib2.urlopenrequest...

RES Workspace Manager Relay Server Detection

The remote service is a RES Workspace Manager Relay Server. It communicates with a central database of RES Workspace Manager, a workspace virtualization platform, or another RES Workspace Manager Relay Server and provides caching services to RES Workspace Manager Agents and other RES Workspace...

RES Workspace Manager Agent Detection

The remote service is a RES Workspace Manager Agent. It communicates with a central database of RES Workspace Manager, a workspace virtualization platform, and provides transaction services to the RES Workspace Composer. It usually indicates that this machine has the RES Workspace Composer...

Fedora Update for kernel FEDORA-2013-3909

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-3909 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

RealPlayer 11 Browser Active-X Code Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

RealPlayer 11 Browser (res://ieframe.dll) Remote Arbitrary Code

Exploit for windows platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

CentOS 5 : kvm (CESA-2010:0088)

Updated kvm packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for...

Important: Red Hat Security Advisory: kvm security and bug fix update

Updated kvm packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for...

CVE-2009-4199

The CVE-2009-4199 entry describes multiple SQL injection vulnerabilities in the Mambo Resident component (com_mosres) version 1.0f used with Mambo/Joomla!. The root cause is input handling when magic_quotes_gpc is disabled, allowing remote attackers to inject SQL via two parameters: property_uid ...

Joomla Momres Component SQL Injection

================================================================================== Joomla Component commosres propertyuid SQL injection Vulnerability ================================================================================== + Author : Chip D3 Bi0s + Author Name : Russell... + Email :...

Joomla! Component com_mosres - Multiple SQL Injections

Joomla! Component commosres - Multiple SQL Injections ================================================================================== Joomla Component commosres propertyuid SQL injection Vulnerability ================================================================================== + Author :...

Internet Explorer 8 Spoof

IE8 beta RC1 res://ieframe.dll/acrerror.htm Spoff Vendor page: www.microsoft.com Advisore:http://lostmon.blogspot.com/ 2009/03/ie8-beta-rc1-resieframedllacrerrorhtm.html vendor notify:yes exploit available:yes Internet explorer 8 has a flaw that allows remote users to spooff the domain name in...

Microsoft Internet Explorer 7 - Header Handling 'res://' Information Disclosure

source: https://www.securityfocus.com/bid/28667/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain potentially sensitive information from the local computer. Information obtained may aid in further attacks. This issue...

Microsoft Internet Explorer 8 Beta 1 - ieframe.dll Script Injection

Microsoft Internet Explorer 8 Beta 1 - ieframe.dll Script Injection source: https://www.securityfocus.com/bid/28581/info Microsoft Internet Explorer is prone to a script-injection vulnerability when handling specially crafted requests to 'acrerror.htm' via the 'res://' protocol. The file resides ...

DEBIAN-CVE-2007-6171

SQL injection vulnerability in the Postgres Realtime Engine resconfigpgsql in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2007-5896

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

Design/Logic Flaw

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

CVE-2007-5896

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...