Avax Vector 'Avaxswf.dll' 1.0.0.1 - ActiveX Arbitrary Data Write

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write ============================================================================ Internal ID: VULWAR200706264. Introduction ------------...

BarCode ActiveX Control BarCodeAx.dll 4.9 Remote Overflow Exploit

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction...

mswin-anim.txt

!/usr/bin/env python $Id: win32-loadaniicon.py 4 2007-06-02 00:47:59Z ramon $ Windows Animated Cursor Stack Overflow Exploit Copyright 2007 Ramon de Carvalho Valle , RISE Security This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

Microsoft Windows Animated Cursor Stack Overflow Exploit

No description provided by source. !/usr/bin/env python $Id: win32-loadaniicon.py 4 2007-06-02 00:47:59Z ramon $ Windows Animated Cursor Stack Overflow Exploit Copyright 2007 Ramon de Carvalho Valle [email protected], RISE Security [email protected] This program is free software; you...

Hewlett Packard 1.0.0.309 hpqvwocx.dll ActiveX Magview Overflow PoC

No description provided by source. html head title Proof of Concept - Hewlett Packard Stack Overflow in hpqvwocx.dll v1.0.0.309 /title /head h4Proof of Concept - Hewlett Packard Stack Overflow in hpqvwocx.dll v1.0.0.309br Tested in Windows XP Service Pack 2br Discovered by Goodfellas Security...

Hewlett Packard 1.0.0.309 - hpqvwocx.dll ActiveX Magview Overflow (PoC)

Hewlett Packard 1.0.0.309 - hpqvwocx.dll ActiveX Magview Overflow PoC Proof of Concept - Hewlett Packard Stack Overflow in hpqvwocx.dll v1.0.0.309 Proof of Concept - Hewlett Packard Stack Overflow in hpqvwocx.dll v1.0.0.309 Tested in Windows XP Service Pack 2 Discovered by Goodfellas Security...

Unfixed XSS vulnerability at www.yalecorni.it

Security researcher iNs uNkn0wn.eu CreW, has submitted on 05/10/2007 a cross-site-scripting XSS vulnerability affecting www.yalecorni.it, which at the time of submission ranked 8336451 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007...

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption http://dvlabs.tippingpoint.com/advisory/TPTI-07-06 May 2, 2007 -- CVE ID: CVE-2007-2418 -- Affected Vendor: Cerulean Studios -- Affected Products: Trillian Pro 3.1 build 121 and below -- TippingPointTM IPS Customer Protection:...

Unfixed XSS vulnerability at www.operaprojektet.dk

Security researcher KaBuS, has submitted on 05/03/2007 a cross-site-scripting XSS vulnerability affecting www.operaprojektet.dk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2007. It is currentl...

PostNuke Module v4bJournal - SQL Injection

PostNuke Module v4bJournal - SQL Injection ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir...

PostNuke Module v4bJournal Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PostNuke Module v4bJournal Remote SQL Injection Vulnerability ============================================================= ---------------------------------------- PostNuke...

PostNuke Module v4bJournal - SQL Injection

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

AFFLIB(TM): Multiple Format String Injections

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Multiple Format String Injections in AFFLIB Release Date: 2007-04-27 Application...

[MajorSecurity Advisory #46]Plogger - Session fixation Issue

MajorSecurity Advisory 46Plogger - Session fixation Issue Details ======= Product: Plogger Remote-Exploit: yes Vendor-URL: http://www.plogger.org Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz http://www.majorsecurity.de Original Advisory:...

ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability

ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-016.html April 18, 2007 -- CVE ID: CVE-2007-2170 -- Affected Vendor: Oracle -- Affected Products: Oracle E-Business Suite -- TippingPointTM IPS Customer Protection:...

[MajorSecurity Advisory #45]oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue

MajorSecurity Advisory 45oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue Details ======= Product: oe2edit CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.oe2edit.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Dav...

phpMyAdmin 2.6.1 Local Cross Site Scripting

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

[MajorSecurity Advisory #42]webblizzard CMS - Cross Site Scripting and Session fixation Issues

MajorSecurity Advisory 42webblizzard CMS - Cross Site Scripting and Session fixation Issues Details ======= Product: webblizzard CMS Remote-Exploit: yes Vendor-URL: http://www.webblizzard.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...

[MajorSecurity Advisory #39]onelook onebyone CMS - Session fixation Issue

MajorSecurity Advisory 39onelook onebyone CMS - Session fixation Issue Details ======= Product: onebyone CMS Remote-Exploit: yes Vendor-URL: http://www.onebyone.ch/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz http://www.majorsecurity.de...

hp-dos.txt

Vulnerability : Remote DOS HP JetDirect Print Servers Product : HP JetDirect Print Servers "HP LaserJet Series" By: Handrix 26 March 2007 MorX security research team www.morx.org +-------------+ | Description :-------------------------------------------------------------------------------...