SOL7544 - Full-width and half-width Unicode encoded data bypasses IDS/IPS security controls, VU #739224

Unicode is a system for encoding characters of a character set, which is used in networked applications. IDS/IPS or other security devices may fail to decode and recognize the characters that represent an attack if encoded in Unicode, and pass the characters to a target device. If the target devi...

Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)

Exploit for unknown platform in category remote exploits =================================================================== Microsoft Speech API ActiveX control Remote BoF Exploit win2k sp4 =================================================================== !-- 01/06/2007 23.19.50 Microsoft...

Microsoft Speech API ActiveX Control (Windows 2000 SP4) - Remote Buffer Overflow (MS07-033)

Microsoft Speech API ActiveX Control Windows 2000 SP4 - Remote Buffer Overflow MS07-033 !-- 01/06/2007 23.19.50 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll remote buffer overflow exploit / 2k sp4 seh version both the dlls are located in...

[EXPL] Microsoft Windows XVoice.dll and Xlisten.dll Buffer Overflow (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Vivotek Motion Jpeg Control (MjpegDecoder.dll 2.0.0.13) Remote Exploit

No description provided by source. !-- IE 6 / Vivotek Motion Jpeg Control MjpegDecoder.dll 2.0.0.13 remote buffer overflow exploit / win 2k sp4 en version by rgod site: retrogod.altervista.org software site: http://www.vivotek.com/ "VIVOTEK INC. is a leading IP surveillance camera and Network...

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow ' metasploit one, alpha2... add a user 'sun' with pass 'tzu' FRAGMENT =...

Vivotek Motion Jpeg Control (MjpegDecoder.dll 2.0.0.13) Remote Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Vivotek Motion Jpeg Control MjpegDecoder.dll 2.0.0.13 Remote Exploit ====================================================================== ' metasploit one, alpha2... a...

NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities

NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities I - DESCRIPTION NOD32 Antivirus is vulnerable to two stack overflow vulnerabilities. The vulnerabilities can be exploited when the AV tries to delete/disinfect or rename a detected malware in a specially formated directory. These...

Microsoft Visual Basic 6.0 Project - Description Stack Overflow (PoC)

Microsoft Visual Basic 6.0 Project - Description Stack Overflow PoC !/usr/local/bin/perl Discovered By UmZ Umair Manzoor comments are welcome at umz32.dllatgmail.com Dated 23-02-2007 Time : 02:00 AM PST Stack Overflow Buffer Size 1037690 overflow offset 004A2E43 EBX contain values Memory to write...

Microsoft Visual Basic 6.0 Project - Description Stack Overflow (PoC)

!/usr/local/bin/perl Discovered By UmZ Umair Manzoor comments are welcome at umz32.dllatgmail.com Dated 23-02-2007 Time : 02:00 AM PST Stack Overflow Buffer Size 1037690 overflow offset 004A2E43 EBX contain values Memory to write 03B50188 Visual Basic Project Description Stack overflow Affected...

Microsoft Visual Basic 6.0 Project (Description) Stack overflow PoC

Exploit for unknown platform in category dos / poc =================================================================== Microsoft Visual Basic 6.0 Project Description Stack overflow PoC =================================================================== !/usr/local/bin/perl Discovered By UmZ Umair...

Microsoft Visual Basic 6.0 Project - Company Name Stack Overflow (PoC)

!/usr/local/bin/perl Discovered By UmZ Umair Manzoor comments are welcome at umz32.dllatgmail.com Dated 23-02-2007 Time : 02:00 AM PST Visual Basic Project Company Name Stack Overflow Affected Version : Tested on Visual basic 6 Threats : DoS, Previlidges Escilation System become unstable for more...

Cross site request forgery (csrf)

The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2734

The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2734

The CVE-2007-2734 entry concerns the 3Com TippingPoint IPS failing to properly handle certain full-width/half-width Unicode encodings in HTTP POST requests, which could allow remote attackers to evade detection of HTTP traffic. Affected product: 3Com TippingPoint IPS. Root cause: improper encodin...

CVE-2007-2734

The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2688

The Cisco Intrusion Prevention System IPS and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2689

Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

Code injection

The Cisco Intrusion Prevention System IPS and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2690

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...