Second Sight Software多个ActiveX控件缓冲区溢出漏洞

Second Sight Software ActiveGS是Apple IIGS模拟器，提供ActiveGS.ocx控件。Second Sight Software ActiveMod是音乐播放器，提供ActiveMod.ocx控件。 Second Sight Software存在多个缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 通过构建恶意HTML文档，诱使用户访问来触发。受此漏洞影响的控件CLSID为： 052DF14F-6F28-44A0-9130-294FDA6176EB 2078D6EC-693C-4FB2-AE7B-A6B8D2BC4DC8 Secon...

Stack overflow

Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control ActiveMod.ocx allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1691

Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control ActiveMod.ocx allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1690

The CVE-2007-1690 entry concerns Second Sight Software ActiveGS ActiveX control (ActiveGS.ocx), which contains multiple stack-based buffer overflows. The included connected documentation confirms that a remote attacker could execute arbitrary code by convincing a user to view a specially crafted ...

CVE-2007-1690: Undefined Security Weakness

Multiple stack-based buffer overflows in Second Sight Software ActiveGS ActiveX control ActiveGS.ocx allow remote attackers to execute arbitrary code via unspecified vectors...

Second Sight Software ActiveMod ActiveX control stack buffer overflow

Overview The Second Sight Software ActiveMod ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Second Sight Software ActiveMod is a music player that is provided as an ActiveX control...

PHP and ASP upload vulnerability explore-exploit warning-the black bar safety net

1 pass exploit the principles just for the form format of the upload of asp and php scripts ncnetcat For the submission packet the dos interface to run under: nc-vv www.. com 8 01.txt -vv: echo 8 0: the www port 1.txt: is your data packet to be transmitted use of more methods, please check this...

Novell eDirectory <= 9.0 DHost Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= Novell eDirectory | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through...

Novell eDirectory 9.0 - DHost Remote Buffer Overflow

Novell eDirectory 9.0 - DHost Remote Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (2)

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow 2 // source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before...

Novell eDirectory 9.0 - 'DHost' Remote Buffer Overflow

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...

trforum20.txt

!/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......: acid-root.new.fr/poc/10060903.txt...

[NT] Microsoft Internet Explorer Drag-and-Drop Redeux

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[KAPDA::#19] - Html Injection in vBulletin 3.5.2

KAPDA New advisory Vendor: http://www.vbulletin.com Vulnerable Version: 3.5.2 prior versions also may be affected Bug: Html Injection Second order cross site scripting Exploitation: Remote with browser Description: -------------------- vBulletin is a powerful, scalable and fully customizable foru...

linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes

linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes. Shellcode exploit for linx86 platform / dup2loop-core.c by Charles Stevenson I made this as a chunk you can paste in to make modular remote exploits. I usually combine this with an execve as the second stage of a read jmp %esp / char hellcode = /...

Unchecked Buffer in Windows Help(Q323255)

An unchecked buffer in Windows help could allow an attacker to could gain control over user's system. Maximum Severity Rating: Critical Recommendation: Customers should install the patch immediately. Affected Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows...

CVE-2003-1143: Undefined Security Weakness

Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service crash or freeze via a TCP packet with an invalid first parameter...

CVE-2004-1207: Undefined Security Weakness

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

CVE-2001-0723: Undefined Security Weakness

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."...

DUO-PSA-2016-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2016-002 Publication Date: 2016-12-14 Revision Date: 2016-12-21 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in the Duo Authentication Proxy which, under certain uncommon configurations, could enable...