idautomation bar code - ActiveX Multiple Vulnerabilities

----------------------------------------------------------------------------- IDAutomation Multiple Vulnerabilities url: www.idautomation.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Autho...

Zune software ActiveX unauthorized access

It's possible to save files to any location...

CVE-2007-6016: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server BEWS 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary cod...

CVE-2008-0481: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action...

FaScript FaPersianHack v1 (show.php) SQL Injection Vulnerability

No description provided by source. FaScript FaPersianHack v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash&nb...

CVE-2007-6503

Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to 1 import an arbitrary plan via a request to hosting/importhostingplans.asp; or 2 change an arbitrary plan via a request to hosting/AutoSignUpPlans.asp with the a save, b 30,...

phprpg-sql.txt

By Michael Brooks Vulneralbity: Sql Injection and Session Information Disclosure. Homepage:http://sourceforge.net/projects/phprpg/ Verison affected 0.8.0 There are two flaws that affect this applcation. A nearly vinnella login bypass issues affects phprpg. If magicqutoesgpc=off then this will log...

PHP RPG - Sql Injection and Session Information Disclosure.

By Michael Brooks Vulneralbity: Sql Injection and Session Information Disclosure. Homepage:http://sourceforge.net/projects/phprpg/ Verison affected 0.8.0 There are two flaws that affect this applcation. A nearly vinnella login bypass issues affects phprpg. If magicqutoesgpc=off then this will log...

CVE-2003-1446

Buffer overflow in the saveintofile function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a tilde...

obedit-xss.txt

=============================================== Obedit v3.03 - XSS Vuln. =============================================== Author: Ishkur Impact: XSS and Cookie Alert Patches: in development ------------------------------------------- Affected Software Description:...

CVE-2007-4981: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the save function in Obedit 3.03 allows user-assisted remote attackers to inject arbitrary web script or HTML via unknown vectors, as demonstrated by a SCRIPT element in an unspecified context when saving a document. NOTE: because the details of the attac...

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007 Mercury/32 v4.52 is a security patch release, addressing a serious weakness in the MercuryS SMTP server specifically, a buffer overflow vulnerability in the way the server processes the AUTH command. All v4.x versions of Mercury earlier than v4.51...

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

DEBIAN-CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

Command injection

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

Security feature bypass

The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...

CVE-2007-2644: Undefined Security Weakness

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

Buffer overflow

Multiple buffer overflows in the Office Viewer OCX ActiveX control oa.ocx 3.2 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long argument to the 1 HttpDownloadFile, 2 Open, 3 OpenWebFile, 4 DoOleCommand, 5 FTPDownloadFile, 6 FTPUploadFile, 7...

Office Viewer OCX 3.2.0.5 Multiple Methods Denial of Service Exploit

No description provided by source. span style="font: 14pt Courier New;"p align="center"b2007/05/04/b/p/span pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-----------------------------------------------------------------------------...