Re: [Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability

7245 correctly resolves this issue; standard stack overflow in WZFILEVIEW.FilePattern snatching EIP; PoC below; HTML HEAD TITLE/TITLE /HEAD BODY SCRIPT LANGUAGE="VBScript" !-- Sub WZFILEVIEWOnAfterItemAddItem WZFILEVIEW.FilePattern = "SMASHTHESTACKHERE" end sub -- /SCRIPT OBJECT ID="WZFILEVIEW"...

[SA22699] Novell BorderManager ISAKMP Predictable Cookie Security Issue

TITLE: Novell BorderManager ISAKMP Predictable Cookie Security Issue SECUNIA ADVISORY ID: SA22699 VERIFY ADVISORY: http://secunia.com/advisories/22699/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From remote SOFTWARE: Novell BorderManager 3.x http://secunia.com/product/378/...

[SA22812] Vallheru mail.php SQL Injection Vulnerabilities

---------------------------------------------------------------------- To improve our services to our customers, we have made a number of additions to the Secunia Advisories and have started translating the advisories to German. The improvements will help our customers to get a better understandi...

[SA22668] Microsoft Windows GDI Kernel Structures Handling Vulnerability

TITLE: Microsoft Windows GDI Kernel Structures Handling Vulnerability SECUNIA ADVISORY ID: SA22668 VERIFY ADVISORY: http://secunia.com/advisories/22668/ CRITICAL: Less critical IMPACT: Privilege escalation, DoS WHERE: Local system OPERATING SYSTEM: Microsoft Windows 2000 Advanced Server...

[Full-disclosure] Fun with wireless cards...

Lorenzo's Kernel Fun project: http://kernelfun.blogspot.com/ The Metasploit 3 exploit module: http://metasploit.com/svn/framework3/trunk/modules/auxiliary/dos/wireless/daringphucball.rb Media coverage so far: http://www.securityfocus.com/brief/344...

[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Web Mail platform by "Mirapoint"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Web Mail platform by "Mirapoint" Discovered Date: 19/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.mirapoint.com/ Details: Mirapoint Web Mail platform is prone to a Cross Site...

MS Internet Explorer 7 Popup Address Bar Spoofing Weakness

No description provided by source. !-- Secunia Advisory: SA22542 Release Date: 2006-10-25 Impact: Spoofing Solution Status: Unpatched Software: Microsoft Internet Explorer 7.x Description: A weakness has been discovered in Internet Explorer, which can be exploited by malicious people to conduct...

ZipCentral 4.01 ZIP File Handling Local Buffer Overflow Exploit

No description provided by source. / ZipCentral 4.01 Exploit by bratax http://www.bratax.be/ Soooooo many thanks to BuzzDee and c0rrupt for helping me with all the problems I encountered : Wouldn't have finished this without you guys! Greetz to everyone I like... no, that doesn't include you...

Novell eDirectory iMonitor HTTP redirection buffer overflow

Added: 10/26/2006 CVE: CVE-2006-5478 BID: 20655 OSVDB: 29993 Background iMonitor is a web service which is a component of Novell eDirectory. Problem iMonitor allows remote command execution by sending specially crafted HTTP header data in a request for certain URLs, which results in a buffer...

Microsoft Internet Explorer 7 - Popup Address Bar Spoofing

Microsoft Internet Explorer 7 - Popup Address Bar Spoofing function StartTest var padding = ''; for i=0 ; i milw0rm.com 200...

Novell eDirectory iMonitor HTTP redirection buffer overflow

Added: 10/26/2006 CVE: CVE-2006-5478 BID: 20655 OSVDB: 29993 Background iMonitor is a web service which is a component of Novell eDirectory. Problem iMonitor allows remote command execution by sending specially crafted HTTP header data in a request for certain URLs, which results in a buffer...

Microsoft Internet Explorer 7 - Popup Address Bar Spoofing

function StartTest var padding = ''; for i=0 ; i milw0rm.com 2006-10-26...

MS Internet Explorer 7 Popup Address Bar Spoofing Weakness

Exploit for unknown platform in category remote exploits ========================================================== MS Internet Explorer 7 Popup Address Bar Spoofing Weakness ========================================================== function StartTest var padding = ''; for i=0 ; i108 ; i++ paddi...

Secunia Research: IBM Lotus Notes Insecure Default FolderPermissions

====================================================================== Secunia Research 18/10/2006 - IBM Lotus Notes Insecure Default Folder Permissions - ====================================================================== Table of Contents Affected...

Re: Secunia Research: Microsoft Windows Object Packager Dialog Spoofing

I knew about this particular flaw for some time . honestly I found it by accident, like I think the the security researcher from secunia did...or maybe it leaked from where I posted it?!?!?!!! :P. This could be a bit more critical if : 1 a '' not a '/' was placed at the end of the command line...

[SA22327] Macromedia Breeze URL Parsing Information Disclosure

TITLE: Macromedia Breeze URL Parsing Information Disclosure SECUNIA ADVISORY ID: SA22327 VERIFY ADVISORY: http://secunia.com/advisories/22327/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Macromedia Breeze / Acrobat Connect Professional 5.x...

Secunia Research: Microsoft Windows Object Packager Dialog Spoofing

====================================================================== Secunia Research 11/10/2006 - Microsoft Windows Object Packager Dialog Spoofing - ====================================================================== Table of Contents Affected...

McAfee HTTP header processing buffer overflow

Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...

McAfee HTTP header processing buffer overflow

Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...

McAfee HTTP header processing buffer overflow

Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...