CVE-2007-4960

Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' double-quote space sequence followed by the -autologin and -loginuri arguments, whic...

CVE-2007-4961

The CVE-2007-4961 description documents an authentication flaw in Linden Lab Second Life: the login_to_simulator method (used by the secondlife:// protocol handler) transmits an MD5 hash in cleartext in the passwd field, enabling an attacker who can sniff network traffic to login to an account by...

CVE-2007-4960

The CVE-2007-4960 entry concerns an argument-injection vulnerability in Linden Lab’s Second Life secondlife:// protocol handler, used by Internet Explorer (and possibly Firefox). The issue allows a remote attacker to craft a sequence consisting of a quote space ('" ') followed by -autologin and -...

PT-2007-6075 · Linden · Second Life

Name of the Vulnerable Software and Affected Versions: Linden Lab Second Life affected versions not specified Description: The issue concerns the login to simulator method, which sends an MD5 hash in cleartext in the passwd field. This allows remote attackers to login to an account by sniffing th...

Dora Emlak Script v1.0 (tr) Admin Login ByPass

Dora Emlak Script v1.0 tr Admin Login ByPass ilker kandemir ilkerkandemiratmynet.com Download: http://aspindir.com/goster/5027 TnX.: Ajann, Dumenci, H0tTurk, Str0ke Bug in ../dora/administartor/yonetim/patron/default.asp cookFirstLevel = Session"FirstLevelSecurity" 'Ilk Gьvenlik Session...

apache mod rewrite exploit (win32)

No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...

apache2058-rewrite.txt

/ apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003 original exploit http://milw0rm.com/exploits/3680 only...

Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC

No description provided by source. !-- =============================================================================================== Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC By Umesh Wanve...

Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC

No description provided by source. !-- =============================================================================================== Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC By Umesh Wanve...

Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC

Exploit for unknown platform in category dos / poc =============================================================== Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC =============================================================== Second Sight Software ActiveMod.ocx ActiveX Buffer...

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC- By Umesh Wanve targetFile = "C:\Research\activegs\ActiveGS.ocx" prototype = "InvokeUnknown Slot52 As String" memberName = "Slot52" progid = "ActiveGSLib.ActiveGS" argCount...

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow PoC Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC- By Umesh Wanve targetFile = "C:\Research\activegs\ActiveGS.ocx" prototype = "InvokeUnknown...

Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow PoC Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC - By Umesh Wanve targetFile = "C:\Research\activemod\ActiveMod.ocx" prototype = "InvokeUnknown Filename As String" memberName = "Filename" progid = "ActiveModLib.Activ...

Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC - By Umesh Wanve targetFile = "C:\Research\activemod\ActiveMod.ocx" prototype = "InvokeUnknown Filename As String" memberName = "Filename" progid = "ActiveModLib.ActiveMod" argCount = 1 arg1=String208, "A" target.Filename = arg1...

Second Sight Software多个ActiveX控件缓冲区溢出漏洞

Second Sight Software ActiveGS是Apple IIGS模拟器，提供ActiveGS.ocx控件。Second Sight Software ActiveMod是音乐播放器，提供ActiveMod.ocx控件。 Second Sight Software存在多个缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 通过构建恶意HTML文档，诱使用户访问来触发。受此漏洞影响的控件CLSID为： 052DF14F-6F28-44A0-9130-294FDA6176EB 2078D6EC-693C-4FB2-AE7B-A6B8D2BC4DC8 Secon...

CVE-2007-1691

Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control ActiveMod.ocx allows remote attackers to execute arbitrary code via unspecified vectors...

Stack overflow

Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control ActiveMod.ocx allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1690

The CVE-2007-1690 entry concerns Second Sight Software ActiveGS ActiveX control (ActiveGS.ocx), which contains multiple stack-based buffer overflows. The included connected documentation confirms that a remote attacker could execute arbitrary code by convincing a user to view a specially crafted ...

Second Sight Software ActiveMod ActiveX control stack buffer overflow

Overview The Second Sight Software ActiveMod ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Second Sight Software ActiveMod is a music player that is provided as an ActiveX control...

PHP and ASP upload vulnerability explore-exploit warning-the black bar safety net

1 pass exploit the principles just for the form format of the upload of asp and php scripts ncnetcat For the submission packet the dos interface to run under: nc-vv www.. com 8 01.txt -vv: echo 8 0: the www port 1.txt: is your data packet to be transmitted use of more methods, please check this...