[Full-disclosure] Secunia Research: Internet Explorer HTML Objects Memory Corruption Vulnerability

====================================================================== Secunia Research 09/05/2007 - Internet Explorer HTML Objects Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...

Research In Motion TeamOn Import Object ActiveX control buffer overflow

Overview The Research In Motion TeamOn Import Object ActiveX control contains a buffer overflow, which could allow an attacker to execute arbitrary code on a vulnerable system. Description The Research In Motion TeamOn Import Object is an ActiveX control, which is provided by the file TOImport.dl...

PostNuke Module v4bJournal Remote SQL Injection Vulnerability

No description provided by source. ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz F...

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption http://dvlabs.tippingpoint.com/advisory/TPTI-07-06 May 2, 2007 -- CVE ID: CVE-2007-2418 -- Affected Vendor: Cerulean Studios -- Affected Products: Trillian Pro 3.1 build 121 and below -- TippingPointTM IPS Customer Protection:...

Moderate: Red Hat Security Advisory: evolution security update

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A format...

Unfixed XSS vulnerability at www.operaprojektet.dk

Security researcher KaBuS, has submitted on 05/03/2007 a cross-site-scripting XSS vulnerability affecting www.operaprojektet.dk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2007. It is currentl...

PostNuke Module v4bJournal - SQL Injection

PostNuke Module v4bJournal - SQL Injection ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir...

PostNuke Module v4bJournal Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PostNuke Module v4bJournal Remote SQL Injection Vulnerability ============================================================= ---------------------------------------- PostNuke...

PostNuke Module v4bJournal - SQL Injection

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

GLSA-200704-19 : Blender: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200704-19 Blender: User-assisted remote execution of arbitrary code Stefan Cornelius of Secunia Research discovered an insecure use of the 'eval' function in kmzImportWithMesh.py. Impact : A remote attacker could entice a user to...

AFFLIB(TM): Multiple Format String Injections

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Multiple Format String Injections in AFFLIB Release Date: 2007-04-27 Application...

[MajorSecurity Advisory #46]Plogger - Session fixation Issue

MajorSecurity Advisory 46Plogger - Session fixation Issue Details ======= Product: Plogger Remote-Exploit: yes Vendor-URL: http://www.plogger.org Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz http://www.majorsecurity.de Original Advisory:...

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow PoC Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC- By Umesh Wanve targetFile = "C:\Research\activegs\ActiveGS.ocx" prototype = "InvokeUnknown...

[Full-disclosure] [MU-200704-01] Pre-Authentication Vulnerability in Mac OS X RPC runtime library

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pre-Authentication Vulnerability in Mac OS X RPC runtime library MU-200704-01 April 20, 2007 http://labs.musecurity.com/advisories.html Affected Product/Versions: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.9, Mac OS X Server v10.4.9...

ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability

ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-016.html April 18, 2007 -- CVE ID: CVE-2007-2170 -- Affected Vendor: Oracle -- Affected Products: Oracle E-Business Suite -- TippingPointTM IPS Customer Protection:...

[MajorSecurity Advisory #45]oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue

MajorSecurity Advisory 45oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue Details ======= Product: oe2edit CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.oe2edit.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Dav...

Wabbit PHP Gallery v0.9 Cross Site Scripting

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

Back-End CMS Database Tables v0.4.7 Remote File Include Vulnerabilities

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

FloweRS v2.0 Cross Site Scripting

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...