4573 matches found
8e6-bypass.txt
8e6 Technologies R3000 Internet Filter Bypass by Request Split Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter can be bypassed by...
CORE-2007-1106: SynCE Remote Command Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs SynCE Remote Command Injection Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL:...
Core Security Technologies Advisory 2007.1106
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs SynCE Remote Command Injection Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL:...
PT-2008-07: VMware Multiple Products hcmon.sys Denial of Service Vulnerability
Positive Technologies Research Team has discovered denial of service vulnerabilities in VMware products. The IOCTL handler in hcmon.sys does not properly validate buffer data associated with the Irp object, which allows local users with administrative priviligies to crash the system. Solution...
PT-2008-05: VMware Multiple Products vmci.sys Privilege Escalation Vulnerability
Positive Technologies Research Team has discovered priviliege escalation vulnerabilities in VMware products. The IOCTL handler in vmci.sys does not properly validate buffer data associated with the Irp object, which allows local users with administrative priviligies to gain SYSTEM privilieges...
wconnect-xss.txt
HSC WCONNECT WC.DLL Cross-Site Scripting Vulnerability West Wind Web Connection is a tool for building Web applications using the Visual FoxPro environment but is also Vulnerable to Cross-Site scripting attacks. Admins need to password protect the application since its installed with out password...
Buffer overflow
Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbitrary code via a long first argument to the CreateStill method...
CVE-2007-6327
Summary (CVE-2007-6327) : A buffer overflow in the ActiveX control AVSMJPEGFILE.DLL version 1.1.1.102 from Online Media Technologies can allow remote code execution when a long first argument is passed to the CreateStill method. The affected component is an ActiveX control used by the application...
CVE-2007-6327: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbitrary code via a long first argument to the CreateStill method...
Online Media Technologies 'AVSMJPEGFILE.DLL 1.1' - Remote Buffer Overflow (PoC)
------------------------------------------------------------------------------- Online Media Technologies AVSMJPEGFILE.DLL 1.1 Remote Buffer Overflow url: www.avsmedia.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...
Skype Technologies < 3.6.0.216 skype4com URI Handler Remote Heap Corruption
Binary data 4310.prm...
VLC 0.86 < 0.86d ActiveX Remote Bad Pointer Initialization PoC
No description provided by source. !-- Core Security Technologiess - CoreLabs Advisory http://www.coresecurity.com/corelabs VLC Activex Bad Pointer Initialization Vulnerability Advisory Information Title: VLC Activex Bad Pointer Initialization Vulnerability...
VideoLAN VLC Media Player 0.86 < 0.86d - ActiveX Remote Bad Pointer Initialization
var mm = null; if target != null var param1 = unescape"%u0505%u0505"; var salame = "defaultV"; var salame2 = 1; var salame3 = 0; ag = unescape"%uCCCC%uCCCC"; sh = unescape"%u9090%u9090%u9090%u9090%u9090%u9090%u9090%u9090%"; sz = sh.length 2;...
[SECURITY] Fedora 7 Update: galeon-2.0.3-14.fc7
Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...
Ubuntu 5.10 / 6.06 LTS / 6.10 : gnupg vulnerability (USN-432-1)
Gerardo Richarte from Core Security Technologies discovered that when gnupg is used without --status-fd, there is no way to distinguish initial unsigned messages from a following signed message. An attacker could inject an unsigned message, which could fool the user into thinking the message was...
CVE-2003-1536
Multiple cross-site scripting XSS vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php and 2 the year parameter to calendar.php...
CVE-2003-1536: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php and 2 the year parameter to calendar.php...
Directory traversal
Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: this can be leveraged to obtain the path by including a local PHP script with a...
CVE-2007-5802
Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: this can be leveraged to obtain the path by including a local PHP script with a...
CVE-2007-5802
CVE-2007-5802 affects Firewolf Technologies Synergiser 1.2 RC1 and earlier. A directory traversal in index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the page parameter. This may enable including a local PHP script with a duplicate function decla...